Privacy Policy

1. Who We Are

Alphastrive Company Limited is a technology company operating across Africa and the United Kingdom, building products in fintech, edtech, agritech, commerce, and social. Our website is alphastrive.co.uk.

For the purposes of UK GDPR and the NDPR, Alphastrive is the data controller of any personal data collected through this website.

2. Scope of This Policy

Because Alphastrive operates in both the United Kingdom and Nigeria, we have designed this policy to meet the requirements of two data protection regimes at once:

• The UK General Data Protection Regulation (retained EU law version of the GDPR, as it forms part of UK law) and the Data Protection Act 2018, supervised by the Information Commissioner's Office (ICO).
• The Nigeria Data Protection Regulation 2019 (NDPR), issued by the National Information Technology Development Agency (NITDA).

3. Data We Collect

We keep the data we collect deliberately minimal. The only personal data we currently collect is what you choose to give us through the contact form on our website:

We may also automatically receive limited technical data (such as IP address and browser type) generated by ordinary website hosting logs, used solely to keep the site secure and functioning.

4. How We Use Your Data & Lawful Basis

We only use the data you submit to respond to your enquiry and manage our relationship with you. We rely on the following lawful bases:

• Consent — by submitting the contact form, you consent to us processing your details for the purpose of replying to you (Art. 6(1)(a) UK GDPR / NDPR Art. 2.2).
• Legitimate interests — where relevant, we process enquiry data to operate and grow our business relationships, in a way that does not override your rights and interests (Art. 6(1)(f) UK GDPR).

We do not use your data for automated decision-making or profiling, and we do not sell personal data to any third party.

5. Cookies & Tracking

If this changes in the future — for example, if we introduce analytics — we will update this policy and, where required by law, request your consent via a cookie banner before any non-essential cookies are set.

6. Data Retention

We only keep personal data for as long as necessary to fulfil the purpose it was collected for:

After the applicable retention period, personal data is securely deleted or anonymised.

7. Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share limited data only with:

• Trusted service providers who help us run our website and email (e.g. hosting and email delivery providers), bound by appropriate data processing agreements.
• Regulators, law enforcement, or courts where we are legally required to disclose information.
• A successor entity in the event of a merger, acquisition, or restructuring of Alphastrive, subject to the same confidentiality obligations set out in this policy.

8. Data Security

We apply appropriate technical and organisational measures — including access controls, encrypted transport (HTTPS), and restricted internal access — to protect personal data against unauthorised access, loss, misuse, or alteration, in line with Art. 32 UK GDPR and Part 2.6 of the NDPR.

9. Your Rights

Depending on where you are based, you have rights under UK GDPR and/or the NDPR, including the right to:

• Access a copy of the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Eraseyour data ("right to be forgotten"), where applicable.
• Restrict or object to certain processing of your data.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with a supervisory authority.

UK Data Subjects

You may complain to the Information Commissioner's Office (ICO) at ico.org.uk or by phone on 0303 123 1113.

Nigerian Data Subjects

You may complain to the National Information Technology Development Agency (NITDA) at nitda.gov.ng. Note that, as of 2023, day-to-day data protection oversight in Nigeria is exercised by the Nigeria Data Protection Commission (NDPC), which now carries out the supervisory functions formerly performed by NITDA under the NDPR.

We would appreciate the chance to address your concerns before you approach a regulator — please contact us first using the details in Section 13.

10. International Transfers

Because Alphastrive operates across Nigeria and the United Kingdom, personal data may be transferred between the two jurisdictions. Where this occurs, we take steps to ensure an equivalent level of protection is maintained, including relying on adequacy decisions, standard contractual clauses, or equivalent safeguards recognised under UK GDPR and the NDPR.

11. Children's Privacy

Our website and services are intended for businesses, institutions, and adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this page periodically.