Privacy Policy

RyderTech ("we", "us", "our") operates rydertech.ng and its sub-domains. This policy explains how we collect, use, disclose, and protect your personal data under the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR) 2019.

Data Protection Officer: privacy@rydertech.ng | Registered Office: Jabi, Abuja, Nigeria | Regulatory Authority: Nigeria Data Protection Commission (NDPC) www.ndpc.gov.ng

1. Introduction and scope

RyderTech ("we", "us", "our") operates rydertech.ng and its sub-domains (www.rydertech.ng, rydertech.vercel.app). This Privacy Policy explains how we collect, use, disclose, and protect your personal data under the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR) 2019.

2. What personal data we collect

2.1 Data you provide directly

Contact Information: Name, email, phone number, company name (contact form, lead magnets, course enrollment).
Project Details: Project brief, scope, budget range, timeline (build inquiries).
Course Enrollment: Name, email, payment reference. Payment details handled by Paystack - we never store card data.
Communication Records: Messages, attachments, support queries.

2.2 Data collected automatically

Log Data: IP address, browser type, OS, referrer URL, pages visited - processed by Vercel.
Analytics: Anonymous traffic via Vercel Analytics and Plausible (self-hosted, privacy-first).
Cookies: See Section 5.

3. Lawful grounds for processing (NDPA 2023)

Consent: Marketing emails, cookie consent.
Contract Performance: Delivering projects, course enrollment.
Legitimate Interests: Communication, site improvement (rights not overridden).
Legal Obligation: Tax, audit, court orders.

4. Data processors

All processors are bound by written data processing agreements:

Vercel: Hosting, analytics, image optimization (GDPR-equivalent protections).
Supabase: Database hosting for leads/courses (SCCs applied).
Paystack: Payment processing (never stores card data).
EmailJS: Email delivery for lead notifications.
Gmail: Email routing and support ticketing.
Telegram: Team operational notifications (lead alerts, no content).

5. Cookies and tracking

Technology	Purpose	Duration	Type
Vercel session cookie	Site functionality, load balancing	Session / 7 days	Strictly necessary
Vercel Analytics / Plausible	Anonymous traffic analytics	2 years	Performance / Analytics (anonymised)
Supabase auth session	Course access authentication	7 days (refresh) / 1 hour (access)	Functional (HttpOnly, Secure)
rydertech_lead_captured	Tool unlock state	30 days	Functional (first-party)

We do not use third-party advertising cookies. No personal data is sold to advertisers or data brokers.

6. Disclosure of personal data

We do not sell or rent your personal data. We share only with:

Vercel - Hosting, analytics, image optimization (GDPR-equivalent protections).
Supabase - Database hosting for leads/courses (SCCs applied).
Paystack - Payment processing (never stores card data).
EmailJS - Email delivery for lead notifications.
Gmail - Email routing and support ticketing.
Telegram - Team operational notifications (lead alerts, no content).

7. Data retention

Category	Retention	Basis
Contact and lead data	2 years	Business relationship + statute
Course enrollment and payment records	7 years	Tax/audit obligations (CAM 7-year rule)
Technical logs	2 years (aggregated) / 30 days (raw)	Security and fraud prevention
Marketing preferences	Until unsubscribe	Consent

8. International data transfers

Your data may be processed in Nigeria and in jurisdictions outside your country of residence, including the United States and European Economic Area, where our service providers operate.

When we transfer data across borders, we use appropriate safeguards as required by the NDPA 2023, including Standard Contractual Clauses (SCCs) and adequacy decisions where applicable. All processors sign data processing agreements that include confidentiality, security, and compliance obligations.

9. Your rights (NDPA 2023 / NDPR 2019)

Right to be Informed: Know what data we collect and why.
Right of Access: Copy of your data and processing information.
Right to Rectification: Correct inaccurate/incomplete data.
Right to Erasure: Delete data where no lawful basis exists.
Right to Restrict Processing: Limit processing in certain circumstances.
Right to Data Portability: Structured, machine-readable data transfer.
Right to Object: Object to legitimate interest or marketing processing.
Right to Withdraw Consent: Withdraw at any time without affecting lawfulness.
Right to Lodge a Complaint: Nigeria Data Protection Commission (NDPC) at complaints@ndpc.gov.ng.

Exercise rights via privacy@rydertech.ng. Response within 30 days. Identity verification may be required.

10. Data security

SSL/TLS encryption in transit, database-level encryption at rest, OAuth 2.0 plus HttpOnly/Secure/SameSite cookies, least-privilege staff access, regular security audits, and annual staff training.

11. Children's privacy

Not intended for children under 18. We do not knowingly collect children's data.

12. Third-party links

Links to Paystack, LinkedIn, YouTube, etc. are not governed by this policy. Review their policies before engaging.

13. Changes to this policy

We may update this policy. Significant changes take effect 30 days after posting.

14. Contact us

Questions? Contact us at privacy@rydertech.ng | /contact .