Website Privacy Policy

1. Introduction

EKOFIN Ltd. ("EKOFIN", "we", "our", or "us") is a multi-division Food and consumer company incorporated in the Federal Republic of Nigeria.

This Privacy Policy explains how we collect, use, store, protect, and share information about you when you visit our website, contact us online, or engage with our digital platforms. It applies to all visitors, customers, business partners, and other individuals who interact with EKOFIN through our website.

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of our website.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide to us, including:

• Name, job title, and company/organisation name
• Email address, phone number, and mailing address
• Enquiries, messages, and correspondence submitted via contact forms or email
• Order and transaction information when you engage us as a supplier or customer
• Account registration details where applicable

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical data, including:

• IP address and approximate geographic location
• Browser type, version, and device information
• Pages visited, time spent, and navigation paths
• Referring website or search terms that led you to our site
• Cookies and similar tracking technologies (see Section 7)

2.3 Information from Third Parties

We may receive information about you from third parties such as business partners, analytics providers, and publicly available commercial databases, where permitted by law.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and provide customer support
• To process and fulfil orders, contracts, and business transactions
• To send relevant product information, updates, and marketing communications where you have consented or where we have a legitimate business interest
• To improve our website functionality, content, and user experience
• To comply with applicable Nigerian laws, regulations, and legal obligations
• To detect, prevent, and respond to fraud, security incidents, or misuse of our services
• To conduct internal analytics, research, and business planning

We will not use your information for purposes incompatible with those stated above without providing prior notice or obtaining your consent where required.

4. Legal Basis for Processing

EKOFIN Ltd. processes personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR). The legal bases on which we rely include:

• Consent: Where you have given clear, informed consent to the processing of your data for a specific purpose.
• Contractual necessity: Where processing is necessary to fulfil a contract with you or to take steps at your request before entering into a contract.
• Legal obligation: Where we are required to process your data to comply with Nigerian law or regulatory requirements.
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

5. Data Sharing and Disclosure

EKOFIN Ltd. does not sell, rent, or trade your personal data to third parties. We may share your information in the following limited circumstances:

• Service providers: Third-party vendors who assist us in operating our website, processing payments, delivering products, or providing IT services, under binding data processing agreements.
• Business partners: Where necessary to fulfil orders or provide services you have requested, including logistics partners, distributors, and key account customers.
• Regulatory and legal authorities: Where required to comply with applicable Nigerian law, court orders, or regulatory investigations.
• Corporate transactions: In connection with a merger, acquisition, restructuring, or sale of assets, subject to appropriate confidentiality obligations.

In all cases, we require third parties to respect the security of your personal data and process it only in accordance with our instructions and applicable law.

6. International Data Transfers

EKOFIN Ltd. is headquartered in Nigeria and primarily processes data within Nigeria. Where we transfer personal data outside Nigeria, we do so only where:

• The destination country provides an adequate level of data protection as recognised by the Nigeria Data Protection Commission (NDPC), or
• We have implemented appropriate safeguards, such as contractual clauses approved by the NDPC, to protect your personal data.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather analytical data about how our site is used.

7.1 Types of Cookies We Use

• Essential cookies: Required for the website to function correctly. These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our website (e.g. Google Analytics or equivalent).
• Preference cookies: Remember your settings and choices to personalise your experience.
• Marketing cookies: Used to deliver relevant advertising, where applicable. These are only placed with your consent.

7.2 Managing Cookies

You may control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Where required by law, we will obtain your consent before placing non-essential cookies.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by Nigerian law and regulatory requirements. The specific retention periods we apply include:

• Customer and transaction records: 7 years in accordance with Nigerian tax and commercial law
• Marketing and communications data: Until you withdraw consent or object to processing
• Website analytics data: Up to 26 months from collection
• Correspondence and enquiry data: Up to 3 years from last interaction

When data is no longer required, we securely delete or anonymise it in accordance with our data management procedures.

9. Data Security

EKOFIN implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• Access controls and authentication requirements for systems holding personal data
• Encryption of data in transit using industry-standard protocols
• Regular review of our information security policies and practices
• Staff training on data protection and privacy obligations

While we take all reasonable steps to protect your information, no method of transmission over the internet or electronic storage is entirely secure. We cannot guarantee absolute security and encourage you to take appropriate steps to protect your own information.

10. Your Rights Under Nigerian Law

Under the Nigeria Data Protection Act 2023 (NDPA) and the NDPR, you have the following rights in relation to your personal data:

• Right of access: To obtain confirmation of whether we hold your personal data and to receive a copy.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data where it is no longer necessary for the purposes collected, subject to legal retention obligations.
• Right to restriction: To request that we limit the processing of your personal data in certain circumstances.
• Right to data portability: To receive your personal data in a structured, commonly used format where technically feasible.
• Right to object: To object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us using the details in Section 12. We will respond to your request within 30 days as required under applicable law. We may request proof of identity before processing your request.

11. Children's Privacy

Our website is not directed at children under the age of 13 years. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete such information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We take all privacy complaints seriously. If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will post the revised policy on our website with an updated effective date. We encourage you to review this policy periodically.

Your continued use of our website following any update constitutes your acceptance of the revised Privacy Policy.