Privacy Policy

Overview

This Privacy Policy explains how TriggerBolt Technologies Ltd ("TriggerBolt", "we", "us") collects and uses personal data when you visit https://www.triggerbolt.com, use our contact or project inquiry forms, or communicate with us. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and applicable guidance from the Nigeria Data Protection Commission (NDPC).

Data controller

• Entity: TriggerBolt Technologies Ltd
• Address: Abuja, Nigeria
• General contact: hello@triggerbolt.com
• Privacy contact: hello@triggerbolt.com

Personal data we collect

Depending on how you interact with us, we may collect:

• Identity & contact: name, email address, phone number, company name
• Inquiry content: project description, budget, timeline, and other details you submit in forms
• Technical: basic server logs (IP address, browser type, timestamps) for security and reliability

We do not knowingly collect data from children under 18 without parental consent.

Lawful basis (NDPA)

We rely on the following lawful bases:

• Consent — when you tick the privacy consent on our forms, you agree we may process your details to respond to your inquiry. You may withdraw consent at any time by emailing hello@triggerbolt.com.
• Legitimate interest — to operate and secure our website, prevent abuse, and follow up on business inquiries where consent applies or where you are an existing client.
• Contract / pre-contract steps — when processing is necessary to prepare or perform a services agreement you request.
• Legal obligation — where we must retain or disclose information to comply with Nigerian law.

How we use your data

• Respond to contact and project inquiries
• Schedule scoping calls and prepare proposals
• Store inquiry records in our secure database (when configured)
• Send internal email notifications to our team
• Improve site security and fix errors

Sharing and processors

We do not sell your personal data. We may share data with service providers who help us run the business, such as hosting (e.g. Vercel), email delivery (e.g. Resend or SMTP), and database hosting (e.g. Neon), under contracts that require appropriate safeguards. Some providers may process data outside Nigeria; where required, we use approved transfer mechanisms under the NDPA.

Retention

Inquiry records are kept for as long as needed to respond, pursue a commercial relationship, or resolve disputes, typically up to 24 months unless a longer period is required by law or an active contract. You may request deletion subject to legal retention duties.

Your rights

Under the NDPA, you may have the right to access, rectify, erase, restrict, or object to processing, and to data portability where applicable. You may also lodge a complaint with the NDPC.

To exercise your rights, contact hello@triggerbolt.com. We will respond within the timelines set by applicable law.

Cookies & analytics

We use Google Analytics 4 to measure site traffic and form conversions (page views and events such as inquiry submissions). GA4 may set cookies or use similar technologies; we configure it without advertising features. You can limit tracking via browser settings or opt-out tools provided by Google. Questions: hello@triggerbolt.com.

Security

We use technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), access controls, and reputable infrastructure providers. No method of transmission over the internet is 100% secure.

Changes

We may update this policy from time to time. The effective date at the top will change when we do. Material changes may be highlighted on this page or via email where appropriate.