Privacy notice.
This notice explains how VarsiTech Limited (“VarsiTech”, “we”) handles personal data collected through this website. It is written to meet the Nigeria Data Protection Act 2023 (NDPA) and, where applicable, the EU General Data Protection Regulation (GDPR) and the UK GDPR.
Who we are
VarsiTech Limited (RC 7741168) is a cybersecurity, governance-risk-and-compliance, and software consultancy registered in Nigeria, with its registered office in Abuja, Nigeria (full registered address available on request). VarsiTech is the data controller for personal data collected through this website. For any privacy matter — including the requests described below — contact our privacy team at privacy@varsitech.org.
What we collect
The only personal data this website collects is what you choose to submit through the contact form:
- Your name, work email address, and organisation
- The nature of your enquiry and any message you write
Our hosting and email providers also process standard technical data — such as IP address, browser type, and request time — to operate and secure the site.
Cookies and analytics
This website sets no advertising or marketing cookies and does not track you across other websites. We use privacy-friendly, cookieless analytics (Vercel Web Analytics) to understand aggregate traffic — which pages are visited and where visitors arrive from. It stores no advertising identifiers and does not identify you individually, so no cookie-consent banner is required. We do not buy, sell, rent, or “share” (as that term is used under the California CCPA/CPRA and similar US state laws) your personal data.
Why we process it
- To respond to your enquiry — our legitimate interest in corresponding with prospective clients, and steps taken at your request before entering a contract
- To keep records of business correspondence — our legitimate interest in maintaining accurate business records
- To keep the website secure and reliable — our legitimate interest in protecting our systems
Who processes it on our behalf
- Vercel Inc. — website hosting, serverless infrastructure, and cookieless analytics (United States and global edge network)
- Resend — delivery of contact-form submissions to our mailbox (United States)
Each operates under its own data-processing terms. Where personal data is transferred outside Nigeria, the EEA, or the UK, those transfers rely on the processors' published safeguards, including Standard Contractual Clauses.
Visitors in the EU, EEA and UK
VarsiTech is established in Nigeria and has no establishment in the EU or the UK. The processing carried out through this website — responding to occasional business enquiries — is limited and low-risk, so under Article 27(2) of the GDPR and the equivalent UK GDPR provision we are not required to appoint an EU or UK representative. EU, EEA and UK data subjects may contact us directly at privacy@varsitech.org, and may lodge a complaint with their local supervisory authority (or, in the UK, the Information Commissioner's Office). We review this position as our processing changes.
How long we keep it
Enquiry correspondence is retained for up to 24 months from last contact, unless it leads to an engagement — in which case it is retained as part of the engagement record — or you ask us to delete it sooner.
Your rights
Under the NDPA, the GDPR and the UK GDPR you may request access to, correction of, or deletion of your personal data; object to or restrict processing; request portability of the data you provided to us; and withdraw consent where processing is based on it. Write to privacy@varsitech.org and we will respond within 30 days. You may also complain to the Nigeria Data Protection Commission (NDPC), the UK Information Commissioner's Office, or your local EU/EEA supervisory authority.
Security
Form submissions travel over TLS. Access to correspondence is limited to the people who need it to respond. We practise what we sell.
Changes
If this notice changes, the effective date below changes with it. We do not water down commitments retroactively.
Effective date: 22 September 2026.