Legal

Privacy Policy

How INFRAPRO LIMITED collects, uses, stores and protects your personal data.

Effective Date: November 2026  |  Last Updated: November 2026
Incorporated in Nigeria  |  Operating across Nigeria, the Middle East and Africa

This Privacy Policy explains how INFRAPRO LIMITED (“we”, “us” or “our”) collects, uses, stores and protects personal data when you interact with our website at infrapro.ltd or contact us through any channel. We are committed to handling your personal data responsibly and transparently, in accordance with applicable data protection laws, including the Nigeria Data Protection Act 2023 (NDPA) and the regulations issued under it by the Nigeria Data Protection Commission (NDPC) and, where applicable, the EU General Data Protection Regulation (GDPR) and the UK GDPR.

By using our website or submitting your information through our contact form, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

INFRAPRO LIMITED is a Nigerian infrastructure and technical services company established in 2011. We provide integrated infrastructure engineering, managed services operations, energy solutions, operational consultancy and business transformation services to organizations in Nigeria, the Middle East and Africa.

2. What Personal Data We Collect

We collect personal data only when you voluntarily provide it to us. The data collected through our website contact form includes:

  • Full name
  • Company or organization name
  • Business email address
  • Phone number
  • Country or location
  • The service you are interested in
  • The description of your project or inquiry
  • Your preferred contact method

When you visit the website, our hosting provider may also automatically record limited technical information, such as your IP address, browser type and the pages you visit, for security and operational purposes.

We do not collect sensitive personal data (such as health information, financial data, racial or ethnic origin, or political opinions). We do not knowingly collect data from children under the age of 18.

3. How We Use Your Personal Data

We process your personal data for the following purposes:

  • To respond to your inquiry or request for information
  • To provide you with information about our services
  • To assess the suitability of a potential business engagement
  • To maintain records of our client and prospect communications
  • To operate, secure and improve our website and services

We do not use your personal data for automated decision-making or profiling. We do not sell, rent or trade your personal data to third parties for marketing purposes.

4. Legal Basis for Processing

Under the NDPA and, for individuals in the European Economic Area (EEA) or the United Kingdom, the GDPR and UK GDPR, we rely on the following legal bases:

  • Consent: where you tick the consent checkbox on our contact form, you consent to us processing your data for the purpose of responding to your inquiry and contacting you about our services.
  • Legitimate interests: we process your contact data to respond to business inquiries and manage our client relationships. This processing is necessary for our legitimate business interests and does not override your fundamental rights.
  • Pre-contractual measures: where your inquiry relates to entering into a contract with us, we process your data to take steps at your request before entering into that contract.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Inquiry data: retained for up to 24 months from the date of last contact
  • Client data: retained for the duration of the business relationship and for up to 5 years thereafter, in accordance with applicable legal and accounting obligations
  • Data that is no longer required is securely deleted or anonymized

6. Who We Share Your Data With

We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

  • Internal team members: employees and contractors of INFRAPRO LIMITED who need access to process your inquiry
  • Technology service providers: website hosting and form processing, email and communication tools used to operate our business
  • Professional advisors: legal or financial advisors where required
  • Authorities: where we are required to do so by law

All service providers are required to process your data in accordance with applicable data protection laws and are bound by appropriate data processing terms where required.

7. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

  • Right of Access: you may request a copy of the personal data we hold about you.
  • Right to Rectification: you may request that we correct any inaccurate or incomplete data.
  • Right to Erasure: you may request that we delete your personal data, subject to certain legal obligations.
  • Right to Restriction: you may request that we restrict the processing of your data in certain circumstances.
  • Right to Object: you may object to our processing of your data based on legitimate interests.
  • Right to Data Portability: you may request a copy of your data in a structured, machine-readable format.
  • Right to Withdraw Consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at roland-boughosn@hotmail.com. We will respond to your request within 30 days.

If you are in Nigeria, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC). If you are located in the EEA, you may complain to your local supervisory authority, and in the UK to the Information Commissioner’s Office (ICO).

8. Cookies and Tracking Technologies

Our website does not currently use advertising or tracking cookies. If we introduce website analytics in the future to understand how visitors use the site, we will update this Policy and, where required by law, ask for your consent first. You can control or disable cookies at any time through your browser settings.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or disclosure. These include:

  • Secure encrypted communications (HTTPS)
  • Access controls limiting data access to authorized personnel only
  • Regular review of our data handling practices

While we take reasonable precautions, no method of transmission over the internet is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant authorities and affected individuals in accordance with applicable law.

10. International Data Transfers

INFRAPRO LIMITED operates across Nigeria, the Middle East and Africa, and some of our technology service providers process data on servers outside Nigeria. Where personal data is transferred outside Nigeria, or outside the EEA or UK for residents of those territories, we ensure that appropriate safeguards are in place, as required by the NDPA and, where applicable, the GDPR, such as adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.

11. Third-Party Links

Our website may contain links to third-party websites or services. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices of external websites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we do, we will update the “Last Updated” date at the top of this page. Material changes will be communicated through a notice on our website or by email where we hold your contact details.

13. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or our data processing practices, please contact us:

This Privacy Policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act 2023, and, where applicable, by the EU General Data Protection Regulation (GDPR) and the UK GDPR. In the event of any conflict between applicable laws, the most protective standard for the data subject shall apply.