Privacy Policy

Host Engines · hostengines.com · Effective 28 October 2026 · Governing law: Federal Republic of Nigeria

Host Engines respects your privacy and is committed to protecting personal data in accordance with the Nigeria Data Protection Act 2023 (“NDPA”) and the regulations and guidance issued by the Nigeria Data Protection Commission (“NDPC”). This policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights.

1. Who We Are

Host Engines [Registered Business Name / RC Number], [Registered Office Address], Lagos, Nigeria, is the data controller for personal data collected through hostengines.com and in connection with the Promo Package. Data Protection contact: [name / title], [privacy email].

2. Personal Data We Collect

Identity and contact data: name, job title, business name, email address, phone and WhatsApp number, business address;
Business and registration data: business registration details (for example, RC number), industry, services, social-media handles, staff or director names you choose to publish;
Website content: logos, photographs, text, testimonials and other materials you submit through the Details Form;
Domain data: information required by domain registries, such as registrant name, address, email and phone;
Payment data: transaction reference, amount, date and status. Card and bank details are processed directly by our PCI-compliant payment processor, [Paystack / Flutterwave / other], and are not stored by us;
Technical data: IP address, browser type, device information, pages visited and referring pages, collected through cookies and server logs;
Communications: messages, support requests and feedback you send us.

3. How and Why We Use Your Data

We process personal data only where we have a lawful basis under the NDPA:

Performance of a contract — to process your order, build, host and support your Website, register your domain and issue your SSL certificate;
Legal obligation — to keep financial records, respond to lawful requests and comply with tax and regulatory requirements;
Legitimate interests — to secure our systems, prevent fraud and abuse, improve our services and communicate about your order, where these interests are not overridden by your rights;
Consent — for marketing communications and non-essential cookies, which you may withdraw at any time.

4. Who We Share Data With

We do not sell personal data. We share data only as needed with:

domain registries and registrars (including NiRA for .ng domains), whose rules require registrant details;
hosting, SSL certificate, email-delivery and infrastructure providers;
our payment processor and banks;
professional advisers, auditors, insurers, and law-enforcement or regulatory authorities where required by law;
a successor business in a merger or acquisition, subject to the same protections. All service providers are required to protect data and process it only on our instructions.

5. Information Published on Your Website

Content you submit for your Website (such as business address, phone number and staff photographs) will become publicly visible once the Website goes live. You are responsible for ensuring you have the right to publish it, and that any individual whose personal data you provide has consented where required.

6. International Transfers

Some providers may store or process data outside Nigeria. Where personal data is transferred abroad, we ensure it is done in line with the NDPA, using countries or organisations that provide an adequate level of protection or, otherwise, appropriate safeguards such as contractual clauses.

7. Data Retention

We keep personal data only as long as necessary for the purposes described. Order and financial records are retained for at least six (6) years or as required by law. Website content is retained while the services are active and for the retention period in our Domain, Hosting and SSL Policy. Marketing data is kept until you unsubscribe. When data is no longer needed, we delete or anonymise it securely.

8. Data Security

We apply appropriate technical and organisational measures, including encryption in transit (SSL/TLS), access controls, regular backups and staff confidentiality obligations. No system is completely secure. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the NDPC within seventy-two (72) hours of becoming aware of it, and notify affected individuals without undue delay where the risk is high, as required by the NDPA.

9. Your Rights

Subject to the NDPA, you have the right to:

be informed about how your data is used and to access your personal data;
request correction of inaccurate or incomplete data;
request deletion of your data where there is no overriding reason for us to keep it;
restrict or object to processing, including direct marketing;
receive your data in a structured, commonly used, machine-readable format (data portability);
withdraw consent at any time, without affecting earlier lawful processing;
not be subject to a decision based solely on automated processing that significantly affects you. To exercise any right, contact us at [privacy email]. We will respond within the period required by law. You also have the right to lodge a complaint with the Nigeria Data Protection Commission.

10. Children

Our services are intended for businesses and persons aged eighteen (18) and above. We do not knowingly collect personal data from children. If you believe a child’s data has been provided to us, please contact us so that we can delete it.

11. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

12. Third-Party Links

Our website and client websites may link to third-party sites, including WhatsApp, which have their own privacy practices. We are not responsible for their content or policies.

13. Changes to this Policy

We may update this policy to reflect legal or operational changes. The current version, with its effective date, is always available at hostengines.com.