• Legal & Policies
Privacy Policy
Overview
Natecho Enterprises Limited (“we,” “us,” “our”) is the data controller responsible for the personal information you provide when using our services. We are committed to protecting your personal data and being transparent about how we handle it.
This policy applies to all personal data collected through our website, consultations, service engagements, phone calls, emails, and any other interaction with our business.
Data We Collect
We collect only the data necessary to provide our services. This includes:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, passport number | Provided directly by you |
| Contact Data | Email address, phone number, residential address | Provided directly by you |
| Academic Data | Educational qualifications, transcripts, certificates | Provided directly by you |
| Financial Data | Proof of funds, bank statements (for visa purposes) | Provided directly by you |
| Travel Data | Passport copies, prior travel history, visa records | Provided directly by you |
| Communication Data | Emails, WhatsApp messages, call records | Generated during service delivery |
| Usage Data | IP address, browser type, pages visited on our website | Automatically collected via cookies |
We do not collect sensitive personal data (such as health information or biometric data) unless strictly required for a specific service and only with your explicit consent.
How We Use Your Data
We use your personal data for the following purposes:
- •To provide the education and travel support services you have engaged us for.
- •To prepare application documents, including statements of purpose, cover letters, and visa support letters.
- •To communicate with you about the progress of your application or travel preparation.
- •To send you relevant information about our services, updates, or promotional offers (only with your consent).
- •To comply with our legal obligations and respond to lawful requests from regulatory authorities.
- •To improve our website and services based on usage analytics.
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.
Legal Basis for Processing
Under the NDPR 2019, we process your personal data on the following legal grounds:
- •Contract: Processing is necessary to perform the services you have contracted us for.
- •Consent: Where you have given explicit consent, such as for marketing communications.
- •Legitimate Interests: Where processing is in our legitimate business interests, provided those interests do not override your rights.
- •Legal Obligation: Where we are required by law to process your data.
Data Sharing & Disclosure
We do not sell your personal data. We may share your data with:
- •Educational Institutions: Universities, colleges, or schools as part of your application process, with your knowledge and instruction.
- •Government Authorities: Embassies and immigration authorities as required for visa applications.
- •Service Providers: Trusted third-party vendors (e.g., courier services, cloud storage providers) who process data on our behalf under strict confidentiality agreements.
- •Legal Requirements: Where required by law, court order, or regulatory authority.
Any third parties we engage are required to handle your data securely and in accordance with applicable data protection laws.
Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including:
- •For the duration of your engagement with us and a period of 5 years thereafter, to fulfil any legal, accounting, or reporting obligations.
- •Application documents and correspondence may be retained for up to 3 years after your last interaction with us.
- •Website usage data is retained for a maximum of 12 months.
After the applicable retention period, your data will be securely deleted or anonymised. You may request earlier deletion subject to our legal obligations.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:
- •Encrypted storage and transmission of sensitive documents.
- •Access controls limiting data access to authorised personnel only.
- •Regular review of our security practices and staff training on data protection.
While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. We encourage you to communicate sensitive information through secure channels we recommend.
Your Data Rights
Under the NDPR 2019, you have the following rights regarding your personal data:
- •Right of Access: Request a copy of the personal data we hold about you.
- •Right to Rectification: Request correction of inaccurate or incomplete data.
- •Right to Erasure: Request deletion of your data where there is no lawful reason for continued processing.
- •Right to Restriction: Request that we restrict processing of your data in certain circumstances.
- •Right to Data Portability: Request transfer of your data in a structured, machine-readable format.
- •Right to Object: Object to processing of your data for direct marketing or where processing is based on legitimate interests.
- •Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting prior processing.
To exercise any of these rights, please contact us at info@natechoenterprises.com. We will respond within 30 days. We may need to verify your identity before processing your request.
Cookies
Our website uses cookies — small text files stored on your device — to improve your experience. We use:
- •Essential Cookies: Necessary for the website to function. These cannot be disabled.
- •Analytics Cookies: Help us understand how visitors interact with our site (e.g., pages visited, time on site). These are only set with your consent.
- •Preference Cookies: Remember your settings and preferences for a better experience.
You can control cookies through your browser settings. Disabling non-essential cookies will not affect your ability to access our services.
Children's Privacy
Our services are not directed at children under 18 years of age. If a parent or guardian is engaging our services on behalf of a minor, the parent or guardian must provide their own consent and take responsibility for supervising the minor's involvement in our service process. We do not knowingly collect personal data directly from children under 18 without verifiable parental consent. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or by posting a prominent notice on our website at least 14 days before the changes take effect. The “Effective Date” at the top of this policy indicates when it was last revised. We encourage you to review this policy periodically.
Contact & Complaints
For any privacy-related questions, requests, or complaints, please contact our Data Protection Officer:
- •Email: privacy@natechoenterprises.com
- •Phone: +234 000 000 0000
If you are unsatisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).