HONA Tech Limited ("HONA Tech", "we", "us", or "our") is committed to protecting the privacy of everyone who visits our website or engages our services. This Policy explains what personal data we collect, how we use it, and the choices you have. It applies to honatech.com.ng and all sub-pages and services operated by HONA Tech Limited.
1 Who We Are
HONA Tech Limited is a technology and professional services company registered in Nigeria, providing digital solutions, training, research support, and consultancy services to individuals, corporations, and public institutions across Africa and beyond.
Registered Address: Nigeria
Email: info@honatech.com.ng
Website: honatech.com.ng
2 Data We Collect
We collect personal data in the following ways:
Information you provide directly:
- Name, email address, phone number, and organisation when you fill a contact or enquiry form.
- Payment details (processed securely via Flutterwave or Paystack — we do not store card numbers).
- CV, qualifications, and professional history when you apply for roles or submit your CV.
- Training enrolment information including academic background and course preferences.
- Correspondence content when you email or message us directly.
Information collected automatically:
- IP address, browser type, device type, and operating system.
- Pages visited, time on site, referral URL, and clickstream data via server logs and analytics tools.
- Cookie identifiers (see Section 6).
3 How We Use Your Data
We use the personal data we collect to:
- Respond to your enquiries and provide the services you request.
- Process payments and issue receipts or invoices.
- Manage training enrolments, issue certificates, and track learning progress.
- Review job, internship, consultancy, and volunteer applications.
- Send transactional emails (order confirmations, account updates, support responses).
- Send marketing communications where you have opted in — you may opt out at any time.
- Improve our website's content, functionality, and user experience.
- Comply with legal and regulatory obligations applicable in Nigeria.
- Detect and prevent fraud, spam, and abuse of our platforms.
We do not sell your personal data to any third party for marketing or commercial purposes.
4 Legal Basis for Processing
In accordance with the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations, we process your data on the following bases:
- Contract performance — to deliver the services or training you have signed up for.
- Consent — for marketing communications and non-essential cookies.
- Legitimate interests — for website security, fraud prevention, and service improvement.
- Legal obligation — where required by Nigerian law or regulatory bodies.
5 Sharing Your Data
We share personal data only where necessary and with appropriate safeguards:
- Payment processors: Flutterwave and Paystack, solely to process transactions.
- Email service providers: For sending transactional and marketing emails.
- Analytics providers: Aggregated, anonymised data for website analytics.
- Professional advisers: Lawyers, auditors, and accountants under strict confidentiality obligations.
- Regulatory authorities: Where required by Nigerian law or a valid court order.
All third parties we work with are contractually required to handle your data securely and only for the specified purpose.
6 Cookies & Tracking
Our website uses cookies — small text files stored on your device — to ensure the site works correctly and to understand how visitors use it.
Essential cookies (always active): Session management, CSRF security tokens, login state.
Analytics cookies (with consent): Page view tracking, visitor statistics.
Marketing cookies (with consent): Used only where you have explicitly opted in to receive communications from us.
You may disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect site functionality.
7 Data Retention
We retain personal data for as long as necessary to fulfil the purpose for which it was collected:
- Contact enquiries: Up to 24 months from last contact.
- Training and certification records: ≤5 years (to support certificate verification).
- Financial and payment records: ≤5 years, as required by Nigerian tax law.
- Job applications (unsuccessful): 12 months, then securely deleted.
- Website logs: Up to 90 days.
When data is no longer needed, it is securely deleted or anonymised.
8 Your Rights
Under the Nigeria Data Protection Act 2023, you have the following rights regarding your personal data:
- Right to access — request a copy of the personal data we hold about you.
- Right to rectification — ask us to correct inaccurate or incomplete data.
- Right to erasure — request deletion of your data where there is no lawful reason to retain it.
- Right to restriction — ask us to limit how we process your data in certain circumstances.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent — at any time, where processing is based on your consent.
To exercise any of these rights, contact us at info@honatech.com.ng. We will respond within 30 days. We may ask you to verify your identity before processing the request.
9 Data Security
We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:
- SSL/TLS encryption on all data transmitted to and from our website.
- CSRF token protection on all web forms.
- Password hashing using PHP's
password_hash()with bcrypt. - Access controls restricting data to authorised personnel only.
- Regular security reviews and software updates.
No method of transmission over the internet is 100% secure. If you suspect a data breach, contact us immediately at info@honatech.com.ng.
10 Third-Party Links
Our website may contain links to third-party websites, including partner organisations, academic institutions, payment gateways, and social media platforms. Once you leave honatech.com.ng, this Privacy Policy no longer applies. We encourage you to read the privacy policies of any external site you visit.
11 Children's Privacy
Our website and services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us without parental consent, contact us and we will promptly delete it.
12 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the "Last Updated" date at the top of this page. Significant changes will be communicated via a notice on the website or by email where appropriate. Your continued use of our website after any changes constitutes acceptance of the updated Policy.
13 Contact Us
If you have questions about this Policy or wish to exercise your data rights, please reach out:
Privacy & Data Protection Enquiries
HONA Tech Limited — Data Controller
honatech.com.ng