Privacy Policy

1. Who We Are

Galucy Niels Enterprises is a technology and business transformation company headquartered in Lagos, Nigeria, with a second office in Abuja. We provide web design and development, brand and identity, software engineering, AI integration, strategy and consultancy, project management, talent and recruitment, quality assurance and technology integration services. For the purposes of the Nigeria Data Protection Act (NDPA) 2023, Galucy Niels Enterprises is the data controller for the personal data described in this policy.

This policy explains what personal data we collect through this website, why we collect it, how long we keep it, and the rights you have over it.

2. The Data We Collect

When you use the contact form on this website, we collect the information you provide:

• Your full name
• Your email address
• Your phone number, if you choose to share it
• The content of your message, including any company or project details you include

We do not ask for, and you should not submit, sensitive personal data (such as health, religious or financial account information) through the contact form.

3. Why We Process Your Data

We use the data you submit only to:

• Respond to your enquiry and communicate with you about it
• Prepare proposals or service information you have requested
• Maintain a record of our correspondence with you
• Comply with legal and regulatory obligations that apply to us

We do not sell your personal data, and we do not use it for unsolicited marketing.

4. Lawful Basis

Under the NDPA 2023, we process your contact form data on the basis of your consent (you choose to send us your details) and our legitimate interest in responding to business enquiries addressed to us. Where we retain records to meet a legal obligation, that obligation is the lawful basis. You may withdraw your consent at any time; doing so does not affect processing carried out before withdrawal.

5. How Long We Keep Your Data

We keep enquiry data for as long as needed to handle your enquiry and for up to 24 months after our last contact with you, so we can respond if you return to a conversation. If your enquiry leads to a contract, related records are kept for the period required by Nigerian law. You can ask us to delete your data earlier at any time, and we will do so unless a legal obligation requires us to keep it.

6. Cookies and Analytics

We use two kinds of cookies, and we ask before setting the optional ones:

• Essential cookies (always on). Strictly necessary for security and the core features of the site. They do not track you and cannot be switched off, so no prior consent is required for them.
• Analytics cookies (optional). Google Analytics, which helps us understand how the site is used so we can improve it. These stay off until you choose "Accept all" in the cookie banner, and you can decline them with "Essential only" at no loss of functionality.

Your choice is remembered on your device. To change it, clear this site's stored data in your browser and the banner will appear again.

7. Kezia, the AI Assistant

Our website offers Kezia, an optional AI chat assistant. When you send Kezia a message, that message is processed by a third-party AI provider (Groq) to generate a reply. Groq processes the message to produce the response and, per its terms, does not use it to train models.

Kezia is for general guidance only, its replies can be inaccurate, and you should not share sensitive personal or financial information with it. If you do not use the chat, no message is sent to the AI provider. For anything important, please contact our team directly.

8. Sharing and Security

Your data is accessible only to the Galucy Niels Enterprises team members who handle enquiries, and to the service providers that host our website and email under confidentiality obligations. We may disclose data where the law requires it, for example to a regulator or court.

We apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, in line with the NDPA 2023.

9. Your Rights

Under the NDPA 2023 you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: ask us to correct inaccurate or incomplete data
• Erasure: ask us to delete your data
• Objection: object to our processing, or ask us to restrict it
• Withdraw consent: withdraw any consent you previously gave

To exercise any of these rights, contact us using the details below. We will respond within the timelines set by the NDPA. If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

10. Changes to This Policy

We may update this policy from time to time as our services or the law change. The latest version will always be available on this page, with the date of the most recent update shown at the top.