Privacy Policy

Dumeh Technologies Ltd – Privacy Notice

Last Updated: September 22, 2025

Who We Are: Dumeh Technologies Ltd (“we,” “us,” “our”) is a registered Data Controller and Processor (NDPC Registration: NDPC/DCP/07225) providing managed IT services.

This notice explains how we collect, use, share, and protect your personal data in accordance with the Nigeria Data Protection Act (NDPA) 2023.

  1. The Data We Collect About You

We may collect, use, store, and transfer:

  • Identity & Contact Data:Name, title, email, phone, business address.
  • Technical & Monitoring Data:IP address, login data, browser type, time-zone, device information. We collect this via cookies and server logs.
  • Service Data:Any data you provide to us for the purpose of delivering our managed services, which may include personal data within your IT systems.
  • Marketing & Communications Data:Your preferences in receiving marketing from us.

  1. How We Use Your Data (Our Lawful Basis)

 

Purpose of Processing Type of Data Lawful Basis for Processing
To provide managed services under our contract Identity, Contact, Service Performance of a Contract
To manage our client relationship Identity, Contact, Marketing Legitimate Interests
To ensure security of our services Technical, Monitoring Legitimate Interests (security)
To send marketing communications Identity, Contact, Marketing Consent or Legitimate Interests

 

  1. How We Share Your Data

We may share your data with:

  • Sub-processors:Trusted third-party service providers (e.g., cloud hosting partners, cybersecurity tools) under strict contractual obligations.
  • Regulatory Bodies:The NDPC or other authorities where required by law.
  • Professional Advisers:Lawyers, bankers, auditors.

  1. International Transfers

We primarily store data within Nigeria. Any international transfer will only occur with adequate safeguards in place, such as Standard Contractual Clauses approved by the NDPC.

  1. Data Security

We implement robust security measures including encryption, access controls, and regular security testing to protect your data.

  1. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. For specific retention periods, please contact our DPO.

  1. Your Legal Rights

Under the NDPA, you have the right to:

  • Access, correct, or erase your personal data.
  • Restrict or object to our processing.
  • Data portability.
  • Withdraw consent at any time.
  • Lodge a complaint with the NDPC.

  1. Contact Us & Our DPO

To exercise your rights or for any queries, contact our Data Protection Officer:

Email: dpo@dumeh.io

Post: Data Protection Officer, Dumeh Technologies Ltd, 7 Ikorodu Road, Maryland, Ikeja, Lagos State, Nigeria