Privacy Policy

This Privacy Policy explains how Nova X Solutions Limited ("Nova X", "we", "us", or "our") collects, uses, shares, and protects personal information when you visit our website at novaxhq.com, submit a contact form, or submit a discovery brief.

Nova X is committed to handling personal data responsibly and in accordance with applicable Nigerian data protection requirements, including the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR).

By using our website and submitting information to us, you acknowledge that your data may be processed as described in this policy.

1. Information We Collect

Information you provide directly

• Contact details: name, email address, phone number, and company name.
• Messages submitted via the contact form.
• Business information submitted via the discovery brief, including systems in use, operational bottlenecks, goals, budget ranges, and project timelines.

Technical information collected automatically

• IP address, browser type, device type, operating system, and referral source.
• Pages visited, time spent on pages, and click behavior, where analytics tools are enabled.
• Cookies and similar technologies (see Section 6).

We do not intentionally collect sensitive personal data (as defined under the NDPA) through our website. Please do not submit sensitive personal data via our forms.

2. Legal Basis for Processing

We process your personal data on one or more of the following legal bases under applicable law:

• Consent — where you voluntarily submit information via our contact form or discovery brief.
• Legitimate interests — for operating, maintaining, and securing our website and improving our services.
• Legal obligation — where processing is required to comply with applicable law.
• Contractual necessity — where processing is required to perform services you request or agree to receive.

3. How We Use Your Information

• To respond to inquiries and schedule discovery calls.
• To evaluate your request and propose suitable solutions.
• To communicate with you about services, proposals, or ongoing engagements.
• To operate, maintain, and secure our website and backend systems.
• To analyze website usage to improve user experience and service quality, where analytics is enabled.
• To comply with legal obligations and protect our rights.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

4. How We Share Your Information

We do not sell personal data. We do not share personal data with third parties for their own marketing purposes.

We may share your data with trusted service providers solely to operate our services, such as:

• Email and communication platforms used to receive and respond to submissions.
• CRM and lead management tools used to manage inquiries and follow-up workflows.
• Scheduling platforms used to facilitate booking of discovery calls.
• Automation and workflow tools used to route submissions and trigger internal processes.
• Website analytics providers used to collect aggregated usage and performance data.

Service providers are required to handle your data securely and only for the purposes we specify. We may also disclose information where required by law, court order, or regulatory authority, or to protect the rights, property, or safety of Nova X Solutions, our clients, or others.

5. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including:

• Contact and discovery brief submissions — up to 24 months from submission, or longer if an active business relationship develops.
• Technical logs — up to 12 months for security and abuse prevention purposes.
• Contractual records — for the duration of any engagement and for a minimum of 6 years thereafter, in line with standard business record retention requirements.

When data is no longer required, it is securely deleted or anonymized.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to operate correctly and to help us understand how visitors use it.

Types of cookies we use:

• Essential cookies required for the website to function.
• Analytics cookies used to collect aggregated data on how visitors interact with the website. Where applicable, these are set only with your consent.

You can manage or disable non-essential cookies through your browser settings at any time. Disabling analytics cookies will not affect your ability to use the website.

7. International Data Transfers

Some service providers we use may be located outside Nigeria. Where personal data is transferred internationally, we take steps to ensure appropriate safeguards are in place, including contractual protections consistent with applicable legal requirements.

8. Data Security

We apply administrative, technical, and organizational measures designed to protect data, including input validation, rate limiting, and security headers at the backend level. No system can guarantee absolute security.

In the event of a personal data breach that poses a risk to your rights or interests, we will notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware, and will notify affected individuals without undue delay where required.

9. Your Rights

Under applicable Nigerian data protection law, you may have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion where there is no legitimate basis to continue holding it.
• Right to restrict processing — request that we limit how we use your data in certain circumstances.
• Right to data portability — request that we provide your data in a structured, commonly used format.
• Right to object — object to processing carried out on the basis of legitimate interests.
• Right to withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at info@novaxhq.com. We will respond within 30 days and may request identity verification before processing your request.

If you are dissatisfied with how we handle your data, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC): ndpc.gov.ng.

10. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate consent, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The effective date above indicates the latest version.

12. Contact Us

Nova X Solutions Limited
Email: info@novaxhq.com
Website: novaxhq.com
Location: Abuja, FCT, Nigeria