Privacy Policy

2. Information We Collect

We collect personal data from you through several channels to provide high-quality services and maintain optimal security. The categories of information we collect include, but are not limited to, the following:

• Identity and Contact Data: This includes your full name, email address, telephone number, business name, and physical address when you fill out our contact forms, request estimates, or initiate WhatsApp chats.
• Usage and Technical Data: When you navigate our site, we automatically record technical metadata, including your IP address, browser type and version, operating system, geolocation coordinates, page loading speeds, referral sources, and interaction tracking.
• Transaction and Billing Data: If you enter into contract retainers or purchase specific services, we collect billing details and contract terms. We do not store raw credit card details directly; all payments are securely processed through PCI-DSS compliant third-party gateways.

3. How We Use Your Data

Thinknex processes your personal information for specific, legitimate business purposes. We will never sell, trade, or lease your personal data to third parties. We use your data for the following essential business reasons:

• Service Delivery and Client Management: To process your inquiries, draft accurate project scopes, communicate milestone updates, and deliver customized software, SEO layouts, or advertising campaigns.
• Technical Operations and Optimizations: To monitor website traffic, analyze server loads, optimize page transitions, fix visual or backend errors, and ensure our pre-compiled pages remain stable on all user browsers globally.
• Communication and Marketing: To respond to your direct messages, send technical notifications, process newsletters if you have explicitly subscribed, and manage target lead lists for active contract options.
• Legal and Regulatory Compliance: To enforce our terms of service, protect our systems against hacking attempts, prevent financial fraud, and comply with binding national and international legal orders.

4. Legal Basis for Processing

We ensure that all data processing is performed under a valid legal framework. Our data operations comply directly with two major regulatory standards:

Nigeria Data Protection Regulation (NDPR): For our domestic clients and users in Nigeria, we process data in strict accordance with the NDPR. Our legal bases include your explicit consent (such as filling out a local contact form), the performance of a binding software contract, or compliance with local statutory obligations in Nigeria.

General Data Protection Regulation (GDPR): For our international remote clients and European visitors, we process data under the GDPR. This processing is based on your explicit consent, our legitimate interests in protecting our web networks, or our legal obligation to fulfill agreed-upon project deliverables.

5. Data Retention & Storage

We only retain your personal data for as long as is strictly necessary to fulfill the business purposes for which it was originally collected, including satisfying any legal, accounting, reporting, or contract requirements.

Your physical data and contact records are processed and stored on secure, encrypted cloud servers. By interacting with our digital networks, you acknowledge and consent that your technical metadata may be transferred and stored across globally distributed edge networks to guarantee fast page loads and continuous availability.

6. Data Security Measures

Data security is one of Thinknex's core values. We implement robust, industry-standard technical and organizational security measures to protect your personal data from accidental loss, unauthorized access, alteration, disclosure, or destruction.

All web connections to our frontend are encrypted using modern Secure Socket Layer (SSL) certificates. Furthermore, by using compiled, decoupled static codebases (such as Astro), we eliminate traditional database connection vulnerabilities on our frontend, providing you with high security against common cross-site scripting (XSS) and code injection threats.

7. Third-Party Sharing

In certain operational scenarios, we utilize trusted third-party service providers to help manage and optimize our business. These third parties are legally bound to protect your data and are strictly prohibited from using it for any other purpose:

• Payment Processing: Transactions and billing are processed through secure payment gateways (such as Paystack or Flutterwave) which adhere to rigorous PCI-DSS compliance regulations.
• Web Analytics: We use tools like Google Analytics to compile anonymized browser behavior metadata, helping our growth engineers optimize layout rendering speeds and content performance.
• Cloud Hosting and CDNs: Our static pages and databases are distributed globally through secure edge hosting networks to ensure optimal server speeds.

8. Your Data Protection Rights

Under both GDPR and NDPR frameworks, you possess strong rights regarding how your personal information is stored and processed. You have the right to request:

• Access and Portability: You may request a complete, readable copy of all personal data we hold about you.
• Correction or Rectification: You may request that we correct any inaccurate, incomplete, or outdated personal details.
• Erasure (The Right to be Forgotten): You may request that we permanently delete your contact details and transaction records from our systems, subject to any binding legal retention obligations.
• Restriction of Processing: You may object to the processing of your data for direct marketing or promotional purposes at any time.

9. Cookies & Pixels

Our website utilizes cookies and similar tracking pixels to differentiate you from other users, map navigation behavior, and optimize your overall browsing experience. A cookie is a tiny text file stored on your browser or hard drive that remembers your preferences.

You can configure your browser to decline cookies, or block cookies entirely. However, please note that disabling cookies may affect certain interactive states or prevent contact form configurations from processing smoothly.

10. Children's Privacy

Our services, web platforms, and marketing campaigns are designed strictly for operating businesses, founders, and adult individuals. Thinknex does not knowingly collect, process, or store personal information from children under the age of 18. If we discover that a minor under 18 has submitted personal details through our intake forms, we will take immediate, corrective action to delete that information permanently from our active files.

11. Changes to This Privacy Policy

Thinknex reserves the right to edit, modify, or update this Privacy Policy at any time to reflect changing technical workflows, updated security measures, or updates to national and international legislation.