Privacy policy

This policy explains how Krystallx Model Design Concept Limited (“Krystallx”, “we”) handles personal data collected through krystallxmodeldesign.com. We are a licensed Data Protection Compliance Organisation and apply the Nigeria Data Protection Act 2023 (NDPA) to our own website.

Who is responsible for your data

Krystallx Model Design Concept Limited, No. 7 Rufus Nduba Crescent, Dawaki, Abuja, Nigeria. CAC RC 1722266. Contact: info@krystallxmodeldesign.com.

What we collect

• Messages you send us. If you email or phone us we receive your name, contact details and whatever you choose to tell us.
• Basic server logs. Our hosting provider records technical data such as IP address, browser type and the pages requested, for security and reliability.

This website has no user accounts, no advertising trackers and no analytics or marketing cookies. It does not use cookies to identify you.

Why we use it, and our lawful basis

• To reply to your enquiry and provide requested services (steps taken at your request, and our legitimate interest in running our business).
• To keep the site secure and working (legitimate interest).
• To meet legal obligations (legal obligation).

We do not sell your personal data and we do not use it for automated decision-making.

Who we share it with

Only with service providers that help us run the site and our email (for example our hosting and email providers), under appropriate safeguards, and with authorities where the law requires. Some providers may process data outside Nigeria; where they do, we require protections consistent with the NDPA.

How long we keep it

Enquiries are kept for as long as needed to respond and for a reasonable period afterwards, then deleted. Server logs are kept for a short period set by our hosting provider.

Your rights

Under the NDPA you may ask to access, correct or delete your personal data, object to or restrict its use, and withdraw consent where we rely on it. Write to info@krystallxmodeldesign.com and we will respond within the time the law allows. You may also complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

Security

We use encryption in transit (HTTPS) and limit access to the small number of people who need it.

Children

Our services are for organisations and adults. We do not knowingly collect children’s data.

Changes

We will post any changes here with a new “last updated” date.