Last updated: 15 October 2026
This Privacy Policy explains how Riophany Services Ltd (“Riophany”, “we”, “us”), based in Ikeja, Lagos, Nigeria, collects, uses and protects personal information when you visit riophany.com, contact us, book a call or message us on WhatsApp. We are the data controller for this information.
1. Information we collect
We collect information you give us directly, through our website forms, booking tools, email and WhatsApp:
- Your name
- Your email address
- Your phone or WhatsApp number
- Your company name and role
- The content of your messages and any details you share about your business needs
When you browse the site we may also collect technical information such as your IP address, browser type, pages visited and referring site, through cookies and similar technologies (see section 7).
2. How we use your information
- To reply to your enquiry and arrange calls or meetings you request
- To prepare proposals and deliver services you engage us for
- To keep records of our communications and business relationship
- To send occasional updates or insights, only where you have agreed or where the law allows, with an easy way to opt out
- To understand how the website is used and improve it
- To meet legal, tax and accounting obligations
3. Lawful bases
We rely on the following lawful bases under the Nigeria Data Protection Act 2023 (NDPA) and, where it applies, the UK General Data Protection Regulation (UK GDPR):
- Consent: for marketing messages and non-essential cookies. You can withdraw consent at any time.
- Contract: to take steps you request before entering a contract, and to perform a contract with you.
- Legitimate interests: to respond to business enquiries, run and secure our website and manage client relationships, where these interests are not overridden by your rights.
- Legal obligation: to keep records required by law.
4. How long we keep it
We keep enquiry and contact information for up to 24 months after our last interaction, unless you become a client. Client records are kept for the duration of the engagement and up to 6 years afterwards to meet legal and accounting requirements. Marketing preferences are kept until you withdraw consent. We then delete or anonymise the data.
5. Who we share it with
We do not sell your personal information. We share it only with service providers (processors) who help us run our business, under contracts that require them to protect it, including:
- Google (Workspace email, Analytics and Site Kit)
- Hostinger (website hosting)
- CRM and business software providers we use to manage enquiries and client work, such as Zoho, HubSpot or Salesforce
- Meta (WhatsApp), when you choose to contact us on WhatsApp
- Scheduling and communication tools used to book and hold meetings
We may also disclose information where required by law or to protect our legal rights.
6. International transfers
Some of our providers store or process data outside Nigeria and the United Kingdom, including in the European Union and the United States. Where we transfer personal data internationally, we rely on safeguards recognised under the NDPA and UK GDPR, such as adequacy decisions, standard contractual clauses or the provider’s own approved transfer mechanisms.
7. Cookies
Our website uses essential cookies needed for it to work, and, with your consent, analytics cookies that help us understand how visitors use it. You can accept or decline non-essential cookies through the cookie banner and change your choice at any time. You can also block cookies in your browser settings.
8. Your rights
Under the Nigeria Data Protection Act 2023 and the UK GDPR, depending on where you are, you have the right to:
- Access the personal information we hold about you
- Ask us to correct inaccurate or incomplete information
- Ask us to delete your information
- Object to or restrict certain processing, including direct marketing
- Receive your information in a portable format
- Withdraw consent at any time, without affecting earlier processing
- Complain to a regulator: the Nigeria Data Protection Commission (NDPC) in Nigeria, or the Information Commissioner’s Office (ICO) in the UK
To exercise any of these rights, email us. We will respond within the time required by law, normally within one month.
9. Security
We use reasonable technical and organisational measures to protect your information, including access controls and encrypted connections. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page with the date it was last updated.
11. Contact us
Riophany Services Ltd, Ikeja, Lagos, Nigeria
Email: lazarus@riophany.com
This policy is a plain-language summary of how we handle personal information. It is not legal advice.