Privacy Policy
Your privacy matters to us.
This Privacy Policy describes how NexusX CRM ("we", "us", or "our") collects, uses, and shares information about you when you use our services, website, and software.
Our privacy promise
We respect your privacy by design. Concretely, that means:
- Consent first. We never send marketing over email, SMS, or WhatsApp without your prior consent, and withdrawing consent is as easy as giving it.
- One-click opt-out on every channel. Every marketing message includes a working unsubscribe link, and you can opt out of email, SMS, and WhatsApp independently.
- You stay in control. You can access, correct, export, or delete your data, and object to processing — we respond within 30 days.
- Data minimization. We collect only what we need to deliver and support the service, and we secure it with encryption and strict access controls.
How We Respect Your Privacy
Privacy is a fundamental right under the Nigeria Data Protection Act (NDPA) 2023, and we have built our platform to honour it by default:
- Lawful basis & consent (NDPA s.24, s.28). We process personal data only where we have a lawful basis — typically your consent for marketing, or legitimate interest / contract for delivering support.
- Right to object & withdraw consent (NDPA s.34, s.40). You can object to direct marketing and withdraw consent at any time. Withdrawal stops future marketing immediately and is never penalised.
- Per-channel opt-outs. Email, SMS, and WhatsApp each have an independent opt-out register. Opting out of one channel never affects your other communications (e.g. essential service messages).
- Transparency & accountability (NDPA s.24, s.40). We keep a record of the consents you grant and withdraw, so we can prove we are processing lawfully.
- Data subject requests within 30 days. Access, rectification, erasure, restriction, portability, and objection requests are actioned and acknowledged within the statutory 30-day window.
- Security. Data is protected in transit and at rest, access is role-restricted, and all access and changes are recorded in immutable audit logs.
Information We Collect
We collect information you provide directly to us, including:
- Account information (name, email, company)
- Tickets and communications you submit
- Survey responses and feedback
- Usage data and analytics
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send technical notices, updates, and support messages
- Respond to your comments and questions
- Monitor and analyze usage patterns
Data Ownership
You own your data. If you self-host NexusX CRM, all your data remains on your servers. We do not have access to your data unless you explicitly share it with us through our cloud services.
Data Sharing
We do not sell your personal information. We may share information with:
- Service providers who assist in our operations
- Legal authorities when required by law
- Business partners with your consent
Data Security
We implement industry-standard security measures to protect your data, including encryption, access controls, and regular security audits.
Your Rights (NDPA 2023)
Under the Nigeria Data Protection Act (NDPA) 2023, you have the right to:
- Be informed about how your data is used
- Access the personal data we hold about you
- Rectification of inaccurate or incomplete data
- Erasure (the "right to be forgotten")
- Object to processing, including direct marketing
- Restrict processing of your data
- Data portability — receive your data in a portable format
- Withdraw consent at any time (as easy as giving it)
Exercise your rights
We respond to all data-protection requests within 30 days, as required by the NDPA.
Cookies
We use cookies and similar technologies to operate our services. You can control cookie preferences through your browser settings.
Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact our Data Protection team:
Email: privacy@nexusxcrm.9jaoncloud.com.ng
Data Protection Officer: dpo@nexusxcrm.9jaoncloud.com.ng
Postal: NexusX CRM — Data Protection Office, Lagos, Nigeria
For any request to access, correct, export, or delete your data, or to object to processing, use the Data Request Center — we acknowledge within 30 days as required by the NDPA.