Privacy Policy

1 Who We Are

Quadelo Technologies ("Quadelo", "we", "us", "our") is a Nigerian technology company with offices in Lagos and Maiduguri, providing custom software development, IT consulting, managed IT services, and technology training through Quadelo Academy.

We are the data controller for the personal data described in this policy, as defined under the Nigeria Data Protection Act (NDPA) 2023.

Legal entity	Quadelo Technologies
Head office	Lagos, Nigeria
Regional office	Maiduguri, Nigeria
Email (privacy)	hello@quadelo.com.ng
Phone	+234 704 369 1022
Website	quadelo.com.ng

2 What Data We Collect

We collect only the data necessary for the purposes described below. The categories are:

2.1 Data you give us directly

• Contact form submissions — name, email, company, phone number, service interest, and message content.
• Quadelo Academy applications — first name, last name, email, phone, course track, experience level, and your reason for applying.
• Student registrations — full name, email, phone, password (hashed), course track, experience level, organization (optional), portfolio URL (optional), and application reason.
• Corporate training enquiries — company name, contact person, employee count, and training objectives.
• Free Software Program applications — business name, contact name, role, email, phone, city/state, industry, business age, team size, problem description, budget range, and timeline.

2.2 Data we collect automatically

• Server logs — IP address, browser type, device type, pages visited, timestamps, and referring URL. Retained for security and analytics.
• Cookies — minimal, functional cookies only (e.g., session token for logged-in students). See Section 7.

2.3 Data from third parties

We do not purchase or acquire personal data from third-party data brokers. If we use third-party analytics in future (e.g., Google Analytics), this section will be updated and you will be notified.

3 Why We Process Your Data (Legal Basis)

Under the NDPA 2023, we rely on the following lawful bases:

Purpose	Legal Basis
Responding to contact form enquiries	Legitimate interest / consent
Processing academy applications	Contract (if enrolled) / legitimate interest
Delivering software development services	Contract
Student account management and authentication	Contract
Corporate training engagement	Contract
Free Software Program evaluation	Consent
Security, fraud prevention, server logs	Legitimate interest
Legal obligations (tax, regulatory)	Legal obligation

4 How We Use Your Data

We use your personal data to:

• Respond to enquiries submitted via our contact form.
• Assess and process Quadelo Academy applications.
• Create and manage student accounts for our online and in-person classes.
• Deliver agreed services (software development, IT consulting, managed IT).
• Communicate updates about your projects, cohort schedules, or assessments.
• Improve our website, services, and academy curriculum.
• Meet legal, tax, and regulatory obligations under Nigerian law.

We do not use your data for automated decision-making or profiling that has legal or significant effects on you.

5 Who We Share Your Data With

We share your data only when necessary and under strict safeguards:

• Service providers — hosting (Render, Vercel), email delivery, SMS gateways, and payment processors. Each is bound by confidentiality obligations.
• Legal authorities — only when required by Nigerian law, court order, or to protect our legal rights.
• Professional advisers — lawyers and accountants under confidentiality.

We never sell your personal data. We never share it with advertisers or data brokers.

6 Data Retention

Category	Retention Period
Contact form submissions	2 years from last contact
Academy applications (not enrolled)	1 year from submission
Student records (enrolled)	7 years after course completion
Free Software Program applications	2 years from submission
Server logs	90 days rolling
Financial records (invoices, receipts)	7 years (Nigerian tax law)

7 Cookies

We use minimal, functional cookies only. We do not use advertising or tracking cookies.

Cookie	Purpose	Duration
student_token	Authenticates logged-in Quadelo Academy students	7 days
auth_token	Authenticates admin dashboard access	Session

You can disable cookies in your browser settings, but doing so will prevent you from logging in to the student portal or admin dashboard.

8 Your Rights Under NDPA 2023

You have the following rights regarding your personal data:

• Right to be informed — about how we use your data (this policy).
• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure — request deletion of your data (subject to legal retention obligations).
• Right to restrict processing — limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — to processing based on legitimate interest.
• Right to withdraw consent — at any time, where processing is based on consent.
• Right to lodge a complaint — with the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, email hello@quadelo.com.ng with the subject line "Data Rights Request". We will respond within 30 days.

9 Data Security

We take data security seriously and implement industry-standard safeguards:

• HTTPS/TLS encryption on all data in transit.
• Password hashing using bcrypt — we never store plaintext passwords.
• JWT-based authentication with expiration.
• Role-based access control — only authorised personnel can access personal data.
• Regular security reviews of our code and infrastructure.

If a data breach occurs that affects your rights, we will notify you and the NDPC within 72 hours, as required by NDPA 2023.

10 Children's Data

Our services and Quadelo Academy are intended for individuals aged 16 and above. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us immediately so we can delete it.

11 International Data Transfers

Some of our service providers (hosting, email, analytics) may process data outside Nigeria. When this happens, we ensure appropriate safeguards are in place in accordance with NDPA 2023 requirements for cross-border data transfers — including standard contractual clauses and adequacy assessments.

12 Third-Party Links

Our website may contain links to third-party websites (e.g., social media, Google Maps, partner sites). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.

13 Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify registered students and active clients by email.
• Post a notice on our homepage for 30 days.

14 How to Contact Us

For any questions, concerns, or requests regarding your personal data, contact us at:

15 Complaints

If you are not satisfied with our response to a data rights request, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC):

• Website: ndpc.gov.ng
• Email: info@ndpc.gov.ng

This policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act 2023.