Last updated: 28 Oct 2025

1. Controller. For visits to this website (the “Site”), the data controller is NorthBrix Ltd (Nigeria) and NorthBrix FZCO (United Arab Emirates) (together, “NorthBrix”, “we”, “us”). Contact: privacy@northbrix.ai
2. Scope. This Policy explains how we collect, use, safeguard, and disclose information resulting from your use of the Site. It does not apply to any client platforms or services, which are covered by separate contractual terms and notices.
3. Information We Collect.

• You provide: name, business email, phone, company, and enquiry content submitted via forms.
• Technical: IP address, device/browser information, and basic usage metrics (e.g., pages viewed, timestamps).
• Cookies: essential cookies for operation and, where applicable, optional analytics subject to your choice (manage via your browser or our banner/settings).

4. Purposes and Legal Bases. We process personal data to: (a) operate, secure, and maintain the Site (legitimate interests); (b) respond to enquiries and send requested information (contract/legitimate interests); (c) measure and improve Site performance (legitimate interests/consent where required); and (d) comply with legal obligations (legal obligation).
5. Sharing (Processors). We use vetted service providers (e.g., hosting, analytics, email) acting on our instructions and subject to confidentiality and appropriate security measures. We do not sell personal data.
6. Location of Processing / Transfers. Site data is processed within Nigeria. We do not intentionally transfer personal data to any other country in connection with this Site. If this changes (e.g., a new provider), we will update this Policy in advance and apply appropriate safeguards.
7. Retention. We retain personal data only for as long as necessary for the purposes above, then delete or anonymize it (e.g., enquiry records kept for support/accounting periods; logs on a short rolling basis).
8. Your Rights. Subject to applicable law, you may request access, correction, deletion, portability, and restriction/objection. Email privacy@northbrix.ai. We may request information to verify your identity.
9. Security. We implement appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, monitoring, and vulnerability management.
10. Audience. The Site is intended for a business audience and is not directed to children.
11. Updates. We may update this Policy; the “Last updated” date will reflect changes. Continued use of the Site signifies acknowledgment of the updated Policy.