How Sonestack Core Technologies collects, uses and protects personal data on this website, and the rights you have under the Nigeria Data Protection Act 2023.
Last updated 5 November 2026
Who we are
This website is run by Sonestack Core Technologies Limited, a company registered in Nigeria with RC number 9988113. Our registered office is at 28 Wale Fajemisin Street, Ojodu, Lagos State, Nigeria.
We are the data controller for personal data collected through this website. You can reach us about privacy at info@sonestack.com.
What we collect
When you contact us. If you use the contact form or email us, we collect your name, email address, organisation, the type of enquiry and anything you write in your message.
When you visit the site. Our hosting provider records technical information for each request, such as your IP address, browser type, the page requested and the time. We use these logs to keep the site secure and working.
Cookies. This website does not use advertising or analytics cookies. If that changes, we will update this policy and ask for your consent where the law requires it.
We do not knowingly collect data from anyone under 18, and the site is not directed at children.
Why we use it
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and preparing a proposal | Your consent, and steps you ask us to take before a contract |
| Keeping the website secure and fixing faults | Our legitimate interest in running a safe website |
| Meeting tax, audit and legal duties | Legal obligation |
We do not sell personal data, and we do not use it for automated decisions about you.
Who we share it with
We use a small number of service providers to run this website:
- Google Cloud hosts the website and stores its server logs.
- Resend delivers contact form messages to our inbox.
- Our email provider stores the messages we send and receive.
Some of these providers process data outside Nigeria. Where they do, we rely on the safeguards the Nigeria Data Protection Act 2023 requires for transfers abroad.
We may also disclose data where the law requires it, for example to a regulator or court.
How long we keep it
- Enquiries that do not lead to work: up to 24 months, then deleted.
- Enquiries that lead to a contract: for the length of the contract and the period tax and company law require after it.
- Server logs: about 30 days.
Your rights
Under the Nigeria Data Protection Act 2023 you can ask us to:
- tell you what personal data we hold about you and give you a copy
- correct data that is wrong or incomplete
- delete your data
- restrict or stop how we use it
- give you your data in a portable format
- stop using data we hold on the basis of your consent, at any time
Email info@sonestack.com to use any of these rights. We will reply as soon as we can and within the time the law allows.
If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.
How we protect it
We limit access to personal data to the people who need it, use encrypted connections for this website and our email, and choose providers with recognised security standards.
Changes to this policy
We will post any change on this page and update the date at the top.