Verifod Website Privacy Policy

Last updated: July 2025

1. Introduction

Verifod ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard information when you visit our website (www.verifod.com) (the "Site") or engage with our content, sign up for newsletters, request a demo, or apply to our design partner program.

This policy applies solely to the Verifod website. If you use our continuous assurance platform, a separate Services Privacy Policy and Data Processing Agreement govern the handling of compliance data.

We comply with the Nigeria Data Protection Act (NDPA) 2023, the Nigeria Data Protection Regulation (NDPR) 2019, and other applicable data protection laws. Where relevant, we also adhere to the EU General Data Protection Regulation (GDPR) for visitors located in the European Economic Area.

2. Information We Collect

We may collect the following types of personal data:

A. Information You Provide Voluntarily

• Contact details — name, email address, phone number, company name, and job title when you fill out a contact form, request a demo, or sign up for our newsletter.
• Communications — messages, feedback, or survey responses you send us.
• Partner applications — information you submit when applying to our design partner program or other partner initiatives.

B. Information Collected Automatically

• Usage data — IP address, browser type, operating system, referring URLs, pages visited, time spent on pages, and clickstream data.
• Cookies and similar technologies — see Section 4 for details.

C. Information from Third Parties

We do not currently collect personal data about you from third parties for use on our website. If this changes, we will update this policy.

3. How We Use Your Information

We use your personal data for the following purposes:

Purpose	Legal Basis (NDPR/GDPR)
To respond to your inquiries, demo requests, or support questions	Performance of a contract or pre-contractual steps; legitimate interest in providing customer service
To send you newsletters, product updates, and marketing communications (with your consent)	Consent
To process and evaluate your application for our design partner program	Pre-contractual steps; legitimate interest in selecting partners
To improve and personalise your experience on our Site	Legitimate interest in improving our services
To analyse website usage and performance	Legitimate interest in monitoring and improving our Site
To comply with legal obligations or protect our rights	Legal obligation; legitimate interest in protecting our interests

You may withdraw consent for marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us at [email protected].

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience and collect usage data.

What Are Cookies? Cookies are small text files placed on your device when you visit a website. They may be session-based (deleted when you close your browser) or persistent (remain on your device for a set period).

Types of Cookies We Use:

• Essential cookies — necessary for the Site to function (e.g., security, session management). These cannot be disabled.
• Analytics cookies — help us understand how visitors interact with the Site (e.g., Google Analytics). We only place these with your consent.
• Functional cookies — remember your preferences (e.g., language selection).

You can manage cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may affect the functionality of the Site. For more detail, see our Cookie Notice (available on the Site).

5. How We Share Your Information

We do not sell, trade, or rent your personal data. We may share your information in the following limited circumstances:

• Service providers — trusted third parties who help us operate the Site and deliver our services (e.g., hosting provider, email marketing platform, analytics provider). They are contractually bound to process data only on our instructions and with appropriate security.
• Legal compliance — if required by law, regulation, or legal process, or to protect our rights, property, or safety, or that of others.
• Business transfers — in connection with a merger, acquisition, or sale of all or part of our assets, your data may be transferred as part of that transaction.

6. International Data Transfers

Our website is hosted and operated from Nigeria. If you are located outside Nigeria, your information may be transferred to and processed in Nigeria or other jurisdictions where our service providers operate. We ensure that any such transfer is subject to appropriate safeguards in accordance with the NDPA and, where applicable, the GDPR (e.g., adequacy decisions, standard contractual clauses).

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

• Contact form inquiries — retained for up to 12 months after the conversation concludes, unless you become a customer or partner.
• Marketing subscriptions — retained until you unsubscribe.
• Website analytics data — anonymised or aggregated after 26 months.

At the end of the retention period, we securely delete or anonymise your data.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS 1.3)
• Secure hosting infrastructure with access controls
• Regular vulnerability assessments
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Your Data Protection Rights

Under the NDPA and NDPR, you have the following rights regarding your personal data:

• Right to be informed — about how we collect and use your data.
• Right of access — to request a copy of your personal data.
• Right to rectification — to correct inaccurate or incomplete data.
• Right to erasure — to request deletion of your data under certain conditions.
• Right to restrict processing — to limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, commonly used format.
• Right to object — to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — at any time, where processing is based on consent.
• Right to complain — to the Nigeria Data Protection Commission (NDPC) if you believe we have violated your rights.

If you are in the EEA, you also have the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at [email protected]. We will respond within one month, in line with applicable law.

10. Children's Privacy

Our Site is not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.

11. Links to Third-Party Websites

Our Site may contain links to external websites, such as social media platforms or partner sites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read their privacy policies before providing any personal data.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your data.

For significant changes, we will provide a more prominent notice (e.g., email notification or website banner).

13. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your data, please contact:

Verifod Data Protection Team
Email: [email protected]
Website: www.verifod.com

You may also contact our Data Protection Officer at the same email.

This policy is designed to be clear, transparent, and compliant with Nigerian data protection laws. For any questions about our platform-specific data processing, please refer to our Services Privacy Policy or contact us.