Privacy Policy
Last updated: 12 August 2026
1. Introduction & Data Controller
This Privacy Policy explains how Crestova ("we", "us", "our") collects, uses, and protects personal data in connection with this website. The data controller is Crestova, of 34 Isaac John Street, Ikeja GRA, Lagos 100271, Nigeria. Questions about this policy can be sent to [email protected].
Crestova processes personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA), and works under the oversight of the Nigeria Data Protection Commission (NDPC).
2. What Data We Collect and How
We collect data you provide directly, such as through the contact form (name, email, phone, message), and data collected automatically through cookies where you have given consent, such as analytics and personalization identifiers.
3. Purposes and Legal Basis
| Data Category | Purpose | Legal Basis |
|---|---|---|
| Contact form details | Responding to enquiries | Consent / legitimate interest |
| Analytics cookies | Understanding site usage | Consent |
| Functionality cookies | Core site operation | Legitimate interest |
4. Data Sharing & Third Parties
We do not sell personal data. Data may be shared with service providers who help us operate this site, and only to the extent necessary, all bound by confidentiality obligations.
5. Retention
Contact form submissions are retained only as long as needed to respond to your enquiry and for a reasonable period afterward for record-keeping, unless a longer period is required by law.
6. Security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.
7. International Transfers
Where personal data is transferred outside Nigeria, we take steps consistent with NDPA requirements to ensure an adequate level of protection.
8. Your Rights
Under the NDPA, you have the right to access, correct, or request deletion of your personal data, to object to certain processing, and to lodge a complaint with the Nigeria Data Protection Commission. To exercise these rights, contact us via the contact page.
9. Opt-Out & Data Deletion
Providing personal data through our forms is optional, though it may limit our ability to respond to your enquiry. You can disable non-essential cookies at any time through the Cookie Settings link in the footer. To request deletion of your data, contact us via the contact page.