Privacy Policy

1. Who we are

Qudra Innovations Limited (“Qudra”, “we”, “us” or “our”) is the controller of the personal data described in this policy. We are registered in Nigeria, with our principal place of business in Lagos, Nigeria.

For privacy questions or to exercise your rights, contact us at [email protected]. We have not appointed a Data Protection Officer or an EU/UK representative; requests sent to [email protected] will be handled by our team.

2. Scope

This policy explains how we collect, use, share, and protect personal data when you use qudra.io, submit our contact or talent request forms, or apply for a role through our careers form. It is written to address the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation (NDPR), as well as the EU General Data Protection Regulation (GDPR) and the UK GDPR where they apply.

3. Personal data we collect

• Contact form: name, email address, phone number, and the project details you provide.
• Talent request form: company name, work email address, engagement model, technology stack, start timeline, and project scope.
• Careers form: name, email address, role, experience level, technologies, free-text responses, and your résumé file.
• Technical and security data: IP address, browser and device information, pages requested, timestamps, and security logs generated by our hosting and content delivery provider.
• Cookies and similar technologies: only strictly necessary and security-related cookies (see section 12).

4. How we collect personal data

We collect personal data directly from you when you submit a form or contact us. Technical and security data is generated automatically when you access the website.

5. Why we use personal data and our lawful bases

We process personal data for the purposes and on the lawful bases set out below. Under the GDPR and UK GDPR, the relevant bases are pre-contractual steps (Article 6(1)(b)), legitimate interests (Article 6(1)(f)), and legal obligation (Article 6(1)(c)). Under the NDPA and NDPR, we rely on the corresponding lawful bases.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects.

6. Who we share personal data with

We do not sell personal data. We share it with service providers that process it on our behalf, and with others where required by law:

• EmailJS to deliver form submissions to our team by email.
• Cloudinary to store résumé files and images.
• Hosting and content delivery providers to serve the website and protect it from abuse.
• Professional advisers and authorities where necessary for legal, regulatory, or security reasons.

7. International transfers

Some of our service providers may process personal data outside Nigeria, the European Economic Area, or the United Kingdom. Where we transfer personal data internationally, we take steps to ensure it receives an appropriate level of protection, including through contractual safeguards or reliance on applicable adequacy mechanisms.

8. How long we keep personal data

• Enquiries and talent requests: up to 24 months from your last contact with us.
• Recruitment and résumés: up to 12 months from submission.
• Server and security logs: up to 90 days.

We may retain personal data for longer where required by law or where necessary to establish, exercise, or defend legal claims.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and secure service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request portability of data you provided to us;
• withdraw consent where processing is based on consent; and
• complain to a supervisory authority.

To exercise your rights, email [email protected]. We may need to verify your identity before responding. We will respond within the time required by applicable law, generally within one month under the GDPR and within the timelines set by the NDPA.

11. Complaints

If you have concerns about how we handle your personal data, please contact us first at [email protected] so we can try to resolve the issue.

You also have the right to complain to a supervisory authority. In Nigeria, this is the Nigeria Data Protection Commission (NDPC), www.ndpc.gov.ng. If you are in the EU/EEA or the UK, you can complain to your local data protection authority.

12. Cookies and similar technologies

We do not use advertising or analytics cookies. Our hosting and content delivery provider may set strictly necessary security cookies, for example to distinguish human visitors from automated traffic and to protect the website. These cookies are required for the website to function securely and are not used to profile you for marketing.

You can control or delete cookies through your browser settings. Blocking strictly necessary cookies may affect how the website works.

13. Children

The website is intended for businesses and adults. It is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at [email protected] and we will delete it.

14. Changes to this policy

We may update this policy from time to time. The updated version will be posted on this page with a revised “last updated” date.

15. Contact

For any questions about this policy or your personal data, contact Qudra Innovations Limited at [email protected].