Privacy policy

Who is responsible for your information

Alpheak LTD (RC 9701671), based in Edo, Nigeria, is responsible for deciding how the personal information covered by this policy is used. In data protection law, this makes us the data controller.

Contact [email protected] for privacy questions or to exercise your rights. This policy covers our website and enquiry handling. Separate product notices and project data-processing agreements may apply when you use a product or we process information on a client’s behalf.

What we collect

Contact enquiries include your name, email address, enquiry topic and message. Project briefs also include your selected services, budget currency and range, preferred timeline and project description. You may choose to provide a company name, phone number, referral information and attachments. We also receive information you send directly by email or through a linked contact channel.

Our hosting and security providers process technical information needed to deliver and protect the website, such as your IP address, browser information, request details and security signals. Cloudflare Turnstile assesses browser and connection signals to distinguish people from automated traffic.

Required fields help us understand and respond to your request. Optional fields and attachments can be left out. Please only share information relevant to the conversation, and do not include passwords, access keys, payment-card details or sensitive personal records. Only send another person’s information when you are authorised to do so.

Why we use it

We use enquiry details to respond, clarify requirements and prepare proposals. Where you ask about hiring us, this is necessary to take steps at your request before entering a contract. Other correspondence is handled for our legitimate interest in answering business enquiries, balanced against your rights.

We use technical information for our legitimate interest in operating a reliable website and preventing spam, fraud and abuse. We use information needed for an agreed project to perform that contract, and retain records where required by law. If a use requires your consent, we will ask separately and you can withdraw it.

Sending a form does not subscribe you to marketing. We do not sell enquiry information or use it for targeted advertising. Website forms do not automatically send your submissions to AI services. Any additional handling of personal information for a client project must be addressed in that project’s arrangements.

Who receives your information

Cloudflare provides website delivery, form processing and Turnstile spam protection. Resend processes the submitted form fields, email addresses and attachments to deliver the message. Zoho Mail hosts [email protected], where messages and attachments are received and stored. Within Alpheak, access to this inbox is limited to the administrator.

Providers may use their own subprocessors to deliver these services. Their notices explain processing they undertake for their own security, service administration and legal obligations. We may also disclose relevant information to professional advisers or authorities when necessary to meet a legal obligation or establish, exercise or defend legal claims.

• Cloudflare privacy policy
• Cloudflare Turnstile privacy notice
• Resend privacy policy
• Zoho privacy policy

How long we keep it

For enquiries that do not become projects, we delete the messages and attachments from the records we control 12 months after the last conversation. If a specific legal obligation or an active dispute requires us to keep a record longer, we retain only what is needed for that purpose.

If an enquiry becomes a project, relevant correspondence becomes part of the project record. We keep it for the project and agreed support period, and afterwards only as necessary for applicable legal or accounting obligations and the establishment, exercise or defence of legal claims. The nature of the record and the applicable obligation determine that additional period.

The website does not keep a separate database of submitted briefs or publish attachments. Delivery-provider records, security logs and backup copies may have separate retention and deletion cycles under the providers’ arrangements. Removing an email from our inbox does not instantly erase every provider backup. Contact us if you need information about a particular record or want to request earlier deletion.

Processing outside Nigeria

Our service providers operate internationally, so your information may be processed outside Nigeria. The location selected for email delivery does not mean every copy, log or support operation stays in that location.

International transfers must meet the requirements of applicable data protection law, including an appropriate transfer basis and safeguards where required. You can contact us for information about the countries and safeguards relevant to your information.

Cookies, preferences and browser storage

The website stores your chosen light or dark theme in your browser’s local storage. It also uses browser history state to restore your position when you return to a page. These features support your browsing experience; they are not advertising profiles. You can clear saved site data through your browser settings.

Turnstile runs on pages containing our forms and processes the security signals described above. Security services may use browser storage or cookies where needed for their configured protection features. Blocking them may prevent a form from sending; you can contact us by email instead.

The website currently has no advertising pixels or audience-analytics integration. If we introduce additional tracking, we will update this notice and obtain consent where required before using it.

How we protect information

We limit inbox access to the administrator and use server-side validation and spam checks for form submissions. The form endpoint does not write message bodies or attachments to application logs. Our providers may still keep operational and security records.

No online system can guarantee absolute security. Please send only the information we need to begin a conversation. If you need to share confidential project material, contact us first so we can agree an appropriate channel and, where needed, a non-disclosure agreement.

Your choices and rights

Subject to applicable law, you can ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing or a portable copy. You can object to processing based on legitimate interests and withdraw consent where we rely on it. Withdrawal does not affect processing that was lawful before you withdrew it.

Email [email protected] with your request. We may ask for proportionate information to confirm your identity and will respond within the applicable legal timeframe. Some requests are subject to exceptions, such as records we must retain by law; we will explain any relevant restriction.

You can complain to the Nigeria Data Protection Commission. You do not have to contact us first to exercise that right. If another regulator has jurisdiction over your complaint, you may also contact that regulator.

• Nigeria Data Protection Commission

Children and automated decisions

This website presents business services and is not directed at children. Please contact us if you believe a child has sent personal information that should be removed.

We do not use website enquiries to make decisions with legal or similarly significant effects based solely on automated processing. Turnstile may automatically block a submission it assesses as suspicious; you can still contact [email protected].

Changes and contact

We will update this page when our practices change and revise the date above. Where a change requires a separate notice or consent, we will provide it. For questions about this policy or your information, email [email protected].