This notice explains how Obsidian Security Limited (“Obsidian Security”, “we”, “us” or “our”) may process personal information when you visit this website or contact us. It describes our approach under the Nigeria Data Protection Act 2023 (NDPA), the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), and other applicable data protection laws. The laws that apply depend on your location and circumstances.
1. Who is responsible
Obsidian Security Limited is the organisation responsible for personal information described in this notice, where we determine the purposes and means of processing. We are based in Abuja, Nigeria. This website is for general information and business enquiries.
2. Information we may collect
- Contact information: your name, email address, telephone number, organisation, and the contents of a message when you contact us by email or WhatsApp.
- Technical information: information that may be recorded by the website host when you visit, such as IP address, browser and device details, pages requested, and request time, for service delivery, troubleshooting, and security.
- Communications: information needed to respond to an enquiry and maintain a record of our business communications.
Please do not send sensitive personal information unless it is necessary and we have agreed an appropriate way to handle it.
3. How and why we use information
We may use personal information to respond to enquiries, discuss or provide requested services, operate and protect this website, prevent misuse, and meet legal obligations. We do not use information submitted through this website for automated decision-making with legal or similarly significant effects.
4. Lawful bases
Where UK GDPR or GDPR applies, we rely on one or more of these lawful bases, as relevant. Where the NDPA applies, we process data on a lawful basis permitted by that Act, which may include consent, a contract, a legal obligation, protection of vital interests, a task carried out in the public interest, or legitimate interests, as applicable to the processing.
- Legitimate interests: managing enquiries, maintaining business communications, and securing and improving our website, where those interests are not overridden by your rights.
- Contract or pre-contractual steps: responding to a request or taking steps you ask us to take before entering into an agreement.
- Legal obligation: keeping or disclosing information where the law requires it.
- Consent: where we specifically ask for your consent for a processing activity. You may withdraw consent at any time.
5. Nigeria Data Protection Act and NDPC
Where Nigerian data protection law applies, we process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations. The Nigeria Data Protection Commission (NDPC) is Nigeria’s data protection regulator. You may raise a concern with us at the contact address below and may also lodge a complaint with the NDPC through its official channels.
Depending on the circumstances and subject to applicable legal conditions, rights under the NDPA may include being informed about processing, requesting access to or correction or erasure of personal data, restricting or objecting to processing, requesting data portability, and protections relating to decisions based solely on automated processing. We will handle requests in line with applicable legal requirements.
6. Cookies and similar technologies
This website does not set advertising or analytics cookies. Your browser may make a request to Google Fonts to load the optional typefaces used on the site; that provider may receive technical request information such as your IP address. If the fonts cannot load, system fonts are used. You can configure your browser to block third-party requests.
7. Sharing and international transfers
We may share information with service providers that host or secure this website, and with communication providers when you choose to contact us through their services. Those providers process information under their own privacy terms and, where applicable, our instructions. We may also disclose information to a competent authority when required by law or to protect our rights and the safety of people.
Because we operate from Nigeria and use service providers that may operate in other countries, information may be processed internationally. Where the NDPA applies, we will follow its applicable requirements for transfers of personal data outside Nigeria. Where UK GDPR or GDPR transfer rules apply, we will use a lawful transfer mechanism and appropriate safeguards where required.
8. How long we keep information
We keep enquiry and communication information only for as long as needed to respond, manage the business relationship, resolve disputes, and meet legal or security requirements. Website security logs are retained for a limited period according to the host’s configuration and operational needs, unless an incident requires longer retention. We securely delete or anonymise information when it is no longer needed.
9. Your rights
Depending on the law that applies, you may have the right to request access to, correction or deletion of your personal information; object to or restrict certain processing; request data portability; and withdraw consent where processing relies on consent. You may also complain to your local data protection authority, including the NDPC where Nigerian law applies. We may need to verify your identity before responding and some rights are subject to legal limits.
10. Security
We use reasonable technical and organisational measures to protect information. No website, email, messaging service, or internet transmission can be guaranteed completely secure. Please contact us promptly if you believe information sent to us has been exposed.
11. Children and other websites
This website is intended for business audiences and is not directed to children. It may link to third-party services, including WhatsApp and Google Maps. We do not control those services; review their privacy notices before using them.
12. Changes to this notice
We may update this notice from time to time. The “Last updated” date above will be changed when a revised version is published.
13. Contact us
For privacy questions or requests, contact Obsidian Security Limited at secure@obsidiansecurityltd.com.