Who we are
This website, clouddimex.com, is run by Cloud Dimex LTD ("Cloud Dimex", "we", "us"), an AWS cloud consulting company at 7, John Ijeh Close, Okota, Lagos State, Nigeria. We are the data controller for the personal data described in this policy.
We follow the Nigeria Data Protection Act 2023 (the "NDPA") and the rules issued under it by the Nigeria Data Protection Commission. For any question about this policy or your data, email info@clouddimex.com.
Summary
- You can read this website without giving us any personal data.
- We collect what you send us through the contact form, live chat, email, phone or WhatsApp, and use it only to reply and to discuss working together.
- Google Analytics runs only if you select "Accept analytics" in the cookie banner. You can change your choice at any time.
- Live chat loads only when you select "Chat with us".
- We do not sell your data, and we do not use it for advertising.
- You have rights over your data, including access, correction and deletion, and you can complain to the Nigeria Data Protection Commission.
What we collect and why
Contact form
When you send the form on our contact page we receive your full name, work email, company, phone number (optional), the service you are interested in, your message, and a note that you confirmed you have read this policy. We use it to reply to your enquiry, to prepare for a consultation and, if you choose to work with us, to prepare a proposal.
The form is delivered by Web3Forms, which receives the submission and forwards it to our email inbox. Web3Forms also checks submissions for spam. See the Web3Forms privacy policy (opens in a new tab).
Spam protection (hCaptcha)
To stop automated spam, the contact form uses hCaptcha. It is loaded only once you start filling in the form: when you first select or type in any of its fields (including when your browser fills them in for you), or when you select "Send message". If you only read the contact page, hCaptcha is not loaded and receives nothing. Once loaded, hCaptcha collects technical information such as your IP address, browser and device details, and how you interact with the page, to tell people from bots. It may set cookies on its own domain. See the hCaptcha privacy policy (opens in a new tab). The form also contains a hidden field that only bots fill in; it holds no personal data.
Email, phone and WhatsApp
If you email, call or message us on WhatsApp, we receive your contact details and whatever you choose to share, and use them to reply. Our email is hosted by Zoho Mail. WhatsApp messages are handled by WhatsApp under the WhatsApp privacy policy (opens in a new tab).
Live chat (Zoho SalesIQ)
Our chat is provided by Zoho SalesIQ. When you open a page, only our own "Chat with us" button is shown; the chat itself loads when you select it. From then on Zoho receives your messages, any name or email you give, and technical information such as your IP address, browser, approximate location and the pages you view while the chat is open. Zoho sets cookies to keep the conversation going (see Cookies and browser storage below). See the Zoho privacy policy (opens in a new tab).
Website analytics (Google Analytics 4)
Only if you select "Accept analytics" in the cookie banner, we use Google Analytics 4 to understand which pages are useful. It records the pages you visit, clicks on our "Book a consultation" and similar buttons, whether a contact form was sent or had errors (never what you typed), the page that referred you, your browser and device type, and an approximate location at city or country level. IP addresses are not stored in Google Analytics 4, and advertising features are switched off.
If you select "Reject analytics", or later change your choice to reject, Google Analytics is not loaded and we delete its cookies from your browser. See the Google privacy policy (opens in a new tab).
Hosting and security logs
The website is hosted by Vercel. Like any web server, it processes technical data for every request, such as your IP address, browser and the page requested, to deliver the site and protect it from abuse. See the Vercel privacy policy (opens in a new tab). Our fonts are hosted on this website, so loading a page does not send your data to a font provider.
Lawful basis and how long we keep it
The NDPA allows us to process personal data only on a lawful basis. This table shows the basis we rely on for each use, and how long we keep the data.
- Purpose
- Replying to your contact form, email, phone or WhatsApp enquiry
- Lawful basis
- Steps you ask us to take before entering into a contract, and our legitimate interest in answering business enquiries
- How long we keep it
- 24 months after our last contact, unless you become a client
- Purpose
- Delivering and managing our services if you become a client
- Lawful basis
- Performance of our contract with you or your company
- How long we keep it
- For the length of the contract, then as long as Nigerian law requires us to keep business, accounting and tax records
- Purpose
- Live chat
- Lawful basis
- Your consent, given when you choose to start the chat
- How long we keep it
- 12 months after the conversation
- Purpose
- Spam protection (hCaptcha)
- Lawful basis
- Our legitimate interest in keeping the form free of spam and abuse
- How long we keep it
- As set by hCaptcha, see its privacy policy
- Purpose
- Website analytics (Google Analytics 4)
- Lawful basis
- Your consent, given with "Accept analytics"
- How long we keep it
- Event data is kept for 2 months; analytics cookies last up to 2 years unless you reject or clear them
- Purpose
- Hosting and security logs
- Lawful basis
- Our legitimate interest in running a secure website
- How long we keep it
- A short period set by Vercel
- Purpose
- Complying with the law and defending legal claims
- Lawful basis
- Legal obligation, and our legitimate interest in protecting our rights
- How long we keep it
- As long as the obligation or claim requires
Where we rely on legitimate interests, we have weighed them against your rights and interests, and you can object at any time (see Your rights). When the retention period ends we delete the data or make it anonymous.
International transfers
Our service providers store and process data on servers outside Nigeria, including in the United States and the European Union. When your data is transferred outside Nigeria, we rely on the grounds the NDPA allows: the protection offered by the provider (such as its contractual safeguards and security certifications), and where needed the fact that the transfer is necessary to answer your request or perform a contract with you. You can ask us for more information about these safeguards.
How we protect it
The website is served only over HTTPS, and all forms and third party services use encrypted connections. Access to enquiries and client data is limited to the team members who need it, and our accounts are protected with strong passwords and two factor authentication where available.
If a personal data breach is likely to put your rights at risk, we will report it to the Nigeria Data Protection Commission within 72 hours of becoming aware of it and, where the risk is high, tell you without undue delay.
Your rights
Under the NDPA you have the right to:
- be told how your personal data is used, which is the purpose of this policy;
- get a copy of the personal data we hold about you;
- have inaccurate or incomplete data corrected;
- have your data deleted when we no longer have a reason to keep it;
- ask us to restrict how we use your data;
- object to our use of your data based on legitimate interests, and to any direct marketing (we do not send any);
- receive the data you gave us in a common, machine readable format, or have it sent to another organisation;
- withdraw your consent at any time, for example by changing your cookie settings, without affecting what was done before;
- not be subject to decisions based only on automated processing that significantly affect you (we make none).
How to make a request or complaint
Email info@clouddimex.com with the subject "Data request", or write to us at 7, John Ijeh Close, Okota, Lagos State, Nigeria. We may ask you to confirm your identity before we act. We reply within 30 days and do not charge for a reasonable request.
If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission (opens in a new tab). We would appreciate the chance to resolve your concern first.
Children
Our services are for businesses. This website is not intended for anyone under 18, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, email info@clouddimex.com and we will delete it.
Changes to this policy
We update this policy when the website or the law changes. The date at the top shows the latest version. If a change significantly affects how we use your data, we will say so on this website.
Contact
Cloud Dimex LTD, 7, John Ijeh Close, Okota, Lagos State, Nigeria. Email info@clouddimex.com. Phone +234 816 667 7770, Mon to Fri, 9am to 5pm WAT.