Privacy

Who is responsible

Maple City, 12 Bakare Dawodu Street, Ifako Gbagada, Lagos, Nigeria, is the data controller for this website. Write to dpo@maplecityworks.com for anything on this page and we will respond.

To be straight about our stage: we are a new firm. Our registration with the NDPC and the formal appointment of a Data Protection Officer are in progress rather than complete, and we would rather say so here than let this page imply otherwise. The address above reaches us directly in the meantime, and the commitments below hold now.

What we collect

Only what you send us. If you use the contact form or email us, we hold your name, organisation, role, email address, and whatever you write, so that we can reply. We do not run analytics on this site, we set no advertising cookies, and we do not buy or enrich contact data.

What we do with it

We reply to you. That is all. We do not share it, sell it, or pass it to any third party for their own purposes, and we do not use it to train anything.

Where it is stored

Enquiries sent through this website are stored on Cloudflare infrastructure. Cloudflare does not currently offer a database region in Africa, so that storage is presently in North America. We would rather tell you that than leave it unsaid, because it is a fair question to ask a firm that argues about data residency as much as we do.

The lawful basis is your consent, which you give when you tick the box on the contact form, and you can withdraw it at any time by writing to us. We store the wording you agreed to alongside your enquiry, so we can show you exactly what you consented to rather than only that you did.

This applies to website enquiries only. It does not apply to client work. Data we process under an engagement is a different matter entirely, and for government records our commitment is that it stays in Nigeria. See below.

How long we keep it

For as long as the conversation is live, and for a reasonable period after in case you come back to us. Ask us to delete it and we will.

Your rights under the NDPA 2023

You can ask what we hold about you, ask us to correct it, and ask us to erase it. Write to dpo@maplecityworks.com and we will act on it. If we ever suffer a breach affecting your data, we will notify the NDPC within 72 hours and tell you.

Client and ministry data

Data we process on behalf of a client is governed by that engagement’s contract and data-processing agreement, not by this page, and it is never held in the website database described above. For government records our standing commitments are that the data stays in Nigeria, the institution owns the index and everything derived from it, and there is a written list of work we will not take on.