Privacy Policy

1. Who we are

ENB TECHNOLOGIES LIMITED (“ENB Technologies”, “we”, “us”) is a technology company based in Nigeria, with offices in Lagos and Owerri. Our registered contact address is No 81, Umuomara Street, Ndegwu Umunwoha, Imo State, Nigeria (registered office, RC 7714368). For the purposes of the Nigeria Data Protection Act 2023 (NDPA) and, where it applies, the EU/UK General Data Protection Regulation (GDPR), we are the data controller for the personal information described in this policy, except where section 6 says we act as a data processor.

2. What this policy covers

This policy applies to:

• our website enbtechnologies.com and its online tools (for example the repair symptom checker and eSIM store);
• computer and laptop repairs, data recovery and IT support;
• sales of computers, accessories and software licences;
• eSIM data plans;
• training, cloud, cybersecurity, website and other business IT services; and
• our email & WhatsApp marketing platform at app.enbtechnologies.com (the “Platform”), including its API.

3. Information we collect

Information you give us

• Contact details: name, phone number, WhatsApp number, email address, delivery or business address.
• Orders and bookings: the device, product, eSIM plan or service you ask for, fault descriptions, quotes, invoices and receipts.
• Payments: the amount, date, reference and method. Card and bank payments are handled by our payment providers (such as Flutterwave and Paystack); we do not see or store your full card number.
• Platform account details: your name, email, password (stored only as a secure one-way hash), business name, postal address, logo, website, team members and settings.
• Messages: what you send us by WhatsApp, email, phone or forms, and your feedback.

Information we collect when you use our services

• Devices you give us for repair: our technicians may need to access your device to diagnose and test it. We do not look through, copy or keep your personal files except where needed for the job you asked for (for example data recovery), and we delete any temporary copies when the job is complete.
• Technical data: IP address, browser and device type, pages viewed and times, collected by our servers and, on the website, by analytics tools (see section 13).
• Platform activity: sign-in times, security events (for example two-factor sign-in), actions taken in your account (an audit log), and usage counts such as emails, WhatsApp messages and API requests sent.

Information from others

• If you sign in with Google, Google shares your name, email address and whether it is verified.
• If you connect a WhatsApp Business number, Meta shares the account and number details needed to send messages for you (see section 7).
• Payment providers confirm whether a payment succeeded.
• Email providers tell us whether an email was delivered, bounced or reported as spam.

4. How we use your information

• To provide what you asked for: repairs, deliveries, eSIM activation, software licences, training and Platform features.
• To communicate with you about your order, repair, account, plan, security and service changes.
• To take payments, issue invoices and receipts, and keep business and tax records.
• To keep our services and customers safe: preventing fraud, spam and abuse, and enforcing our Terms of Service.
• To improve our services, using usage statistics that are aggregated where possible.
• To send you news and offers only if you agreed. You can opt out at any time using the unsubscribe link or by replying STOP on WhatsApp.
• To meet legal obligations and respond to lawful requests from authorities.

We do not sell personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you.

5. Our legal bases

6. The email & WhatsApp marketing platform

Businesses (our “Customers”) use the Platform to send email and WhatsApp messages, run automations, collect sign-ups and send invoices to their own contacts.

• For Customer account data (the people who sign up and use the Platform), we are the controller.
• For the contact lists and messages Customers upload or collect (their subscribers, customers and recipients), the Customer is the controller and we are a processor. We process that data only to provide the Platform on the Customer’s instructions. We do not use it for our own marketing, and we do not share it with other Customers.
• Customers must have a lawful basis, usually consent, for every message they send. They must honour unsubscribes and opt-outs, which the Platform applies automatically. They must also include their own business identity and postal address in marketing emails.
• To protect deliverability for everyone, we keep a list of addresses that bounced or reported spam, and block sending to them. We also track whether each message was delivered, opened, clicked, bounced or marked as spam, to report to the Customer and to monitor for abuse.
• If you received a message from one of our Customers and want your data removed, contact that business first (every marketing email has an unsubscribe link). You can also contact us and we will help (see Data Deletion).

7. WhatsApp and Meta

The Platform uses Meta’s official WhatsApp Business Platform (Cloud API). When a Customer connects their WhatsApp Business number through Meta’s sign-up, Meta gives us access to send and receive messages on that number for that Customer only.

• We store the connected number’s details, message templates, and messages sent and received, so the Customer can see their inbox and reports.
• The access token Meta issues is encrypted when stored.
• WhatsApp messages are also processed by Meta under its own terms and privacy policy.
• People can stop WhatsApp messages from a business at any time by replying STOP, or with the opt-out button where offered.
• A Customer can disconnect their number in the Platform at any time. Disconnecting removes our access token.

Our use of information received from Meta follows the Meta Platform Terms and Developer Policies. We use it only to provide the features the Customer asked for.

8. Who we share information with

We share personal information only with service providers who help us run our services, under contracts that require them to protect it. We may also share it where the law requires.

If ENB Technologies is involved in a merger or sale, your information may move to the new owner under the same protections. We will tell you if that happens.

9. International transfers

Some of our providers store or process data outside Nigeria. For example, Platform emails are sent through Amazon’s servers in the European Union. Where this happens, we use providers with strong safeguards (such as standard contractual clauses and security certifications), as the NDPA and GDPR require.

10. How long we keep information

• Platform accounts: while your account is open. After you close it, we delete account data, contact lists and messages within 30 days. Backups are overwritten within a further 14 days.
• Invoices, receipts and payment records: for as long as tax and accounting laws require.
• Repair and order records: for as long as needed for warranty, support and legal claims.
• Suppression records (addresses that unsubscribed, bounced or complained): kept so they are never messaged again against their wishes, which is in the person’s own interest.
• Security logs: for up to 12 months, unless needed longer to investigate an incident.

11. How we protect information

We use industry-standard measures, including:

• encryption in transit (HTTPS/TLS);
• encryption at rest for sensitive secrets such as access tokens and two-factor keys;
• hashed passwords;
• optional two-factor sign-in;
• role-based access for team members;
• audit logs, firewalls, automatic security updates and daily backups.

No system is perfectly secure. If a breach puts your rights at risk, we will notify you and the Nigeria Data Protection Commission as the law requires.

12. Your rights

Under the NDPA (and the GDPR where it applies), you can:

• ask for a copy of your personal information;
• ask us to correct it;
• ask us to delete it (see Data Deletion);
• ask us to restrict how it is used, or object to it being used;
• receive your data in a portable format (Platform Customers can export contacts as a spreadsheet at any time);
• withdraw consent at any time; and
• complain to the Nigeria Data Protection Commission (ndpc.gov.ng), or to your local data protection authority.

Email info@enbtechnologies.com from the address linked to your account or order. We will respond within 30 days, and may need to confirm your identity first.

13. Cookies and similar technologies

• Platform: only essential cookies, to keep you signed in, protect forms (CSRF) and remember your chosen workspace.
• Website: Google Tag Manager and analytics, to understand how visitors use the site. You can block these in your browser settings without affecting the site’s main features.
• Emails sent through the Platform may include a tiny image and tracked links, so the sender can see opens and clicks. Many email apps let you block images.

14. Children

Our services are not directed at children under 18, and the Platform may only be used by adults acting for a business. If you believe a child has given us personal information, contact us and we will delete it.

15. Changes to this policy

We may update this policy. When we make significant changes, we will update the date at the top and, where appropriate, tell Platform Customers by email or in the app.

16. Contact us

ENB TECHNOLOGIES LIMITED
No 81, Umuomara Street, Ndegwu Umunwoha, Imo State, Nigeria (registered office, RC 7714368)
Email: info@enbtechnologies.com
Phone / WhatsApp: +234 902 730 1128