Privacy Policy

1. Introduction

Max-Tech I.T Solutions ("we," "our," or "us") is a data controller based in Lagos, Nigeria. We respect your privacy and are committed to protecting your personal data in line with the Nigeria Data Protection Act, 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR) where still applicable, the 1999 Constitution of the Federal Republic of Nigeria, and our operational practices.

This Privacy Policy explains how we collect, use, disclose, retain, and safeguard personal data when you visit www.mtechitng.net, buy products or services, subscribe to Device Care, or otherwise deal with us.

If you do not agree with this policy, please do not use our website or services. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

For privacy requests, contact info@mtechitng.net. You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC).

1A. Lawful Bases for Processing

Under the NDPA, we process personal data only where a lawful basis applies, including:

• Contract: to provide quotes, repairs, hosting, Device Care, sales, and support you request
• Consent: for optional marketing emails, non-essential cookies, and similar choices you control
• Legal obligation: tax, accounting, consumer, and regulatory requirements in Nigeria
• Legitimate interests: securing our systems, preventing fraud/abuse, improving services, and defending legal claims, balanced against your rights
• Vital interests: rare cases involving urgent safety or security threats

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number, mailing address)
• Business information (company name, job title, industry)
• Technical information about your devices when providing repair services
• Device Care Subscription enrollment data (plan tier, term, Personal or Small Business selection, device counts for All-In-One PC, CPU, Laptop, Mobile Phone, Tablet, Handheld, Camera, Printer, Photocopier, Monitor, Gaming Console, and related notes you provide)
• Payment information for transactions
• Communication preferences and feedback

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and location data
• Browser type and version
• Pages visited and time spent on our site
• Referring website information
• Device information and operating system

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide and maintain our IT services and support
• Administer Device Care Subscriptions, schedule maintenance, and communicate plan-related updates
• Process transactions and send related information
• Respond to your inquiries and provide customer support
• Send you technical updates, security alerts, and administrative messages
• Improve our website and services based on your feedback
• Comply with legal obligations and protect our rights
• Send marketing communications (with your consent)

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and employee training
• Secure data storage and backup procedures

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

5.1 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly
• Analytics Cookies: Help us understand how visitors interact with our website
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.

For more information about our cookie practices, please visit our Cookie Policy.

6. Third-Party Services

Our website and services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

6.1 Third-Party Services We Use

• Payment Processors: For processing payments (e.g., Paystack, bank transfers)
• Analytics Services: To analyze website usage and improve our services
• Email Services: For sending communications and newsletters
• Cloud Storage: For secure data storage and backup
• Customer Support Tools: For managing customer inquiries and support tickets

These third-party services have their own privacy policies addressing how they use your information. We recommend reviewing their policies.

7. Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Customer Data: Retained for the duration of our business relationship and for a period of (Seven) 7 years after the last transaction for legal and accounting purposes
• Marketing Data: Retained until you opt-out or request deletion
• Website Analytics: Retained for up to (Twenty-six) 26 months
• Support Communications: Retained for (Three) 3 years after the last interaction

When we no longer need your personal information, we will securely delete or anonymize it in accordance with our data retention policies.

8. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information.

9. Cross-Border Data Transfers

We primarily process and store personal data in Nigeria. Some tools we use (for example payment processors, email delivery, analytics, or cloud hosting) may process data outside Nigeria.

Where personal data is transferred outside Nigeria, we do so in line with the NDPA, including appropriate safeguards, contractual protections with processors, and, where required, your consent or another permitted basis.

Processors we may use include payment providers (such as Paystack), email and infrastructure vendors, and analytics providers, each bound to protect personal data under contract and applicable law.

10. Your Rights under Nigerian Law

If you are a data subject under the NDPA (including individuals in Nigeria whose data we process), you have rights that may include:

• Access: request confirmation and a copy of personal data we hold about you
• Rectification: request correction of inaccurate or incomplete personal data
• Erasure: request deletion where the NDPA allows (subject to legal retention duties)
• Portability: receive personal data you provided in a structured, commonly used format where applicable
• Objection / restriction: object to or request restriction of certain processing, including direct marketing
• Withdraw consent: where processing is based on consent, withdraw it at any time
• Lodge a complaint: contact us first, and if unresolved, complain to the Nigeria Data Protection Commission (NDPC)

To exercise these rights, email info@mtechitng.net. We will respond within (Thirty) 30 days where practicable, or as otherwise required by the NDPA.

We may need to verify your identity before processing a request.

Personal data breaches: where a breach is likely to result in a risk to your rights and freedoms, we will notify the NDPC within (Seventy-two) 72 hours of becoming aware of it where required, and notify affected individuals without undue delay when the NDPA requires that notice.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

For material changes, we will notify you by email (if you have provided one) or through a prominent notice on our website before the change becomes effective.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For privacy-related inquiries, please include "Privacy Policy Inquiry" in the subject line of your email for faster processing.