1. Who we are
This Privacy Policy explains how Rosper Solutions (“Rosper”, “we”, “us”, “our”) collects and uses personal data when you visit rosper.ng, contact us, request a quotation, leave a review, become a client, or are contacted by us as a business prospect.
Rosper is the data controller for the personal data described here, with its principal place of business at Asaba, Delta, Nigeria. When we process personal data on behalf of a client (for example, customer records inside software we build or host for them), we act as that client's data processor under a written agreement, and the client's own privacy notice applies.
We comply with the Nigeria Data Protection Act 2023 (“NDPA”) and the regulations and guidance issued by the Nigeria Data Protection Commission (“NDPC”). Where we offer services to people in the United Kingdom or European Union, we also apply the UK GDPR and EU GDPR.
2. The personal data we collect
Information you give us
- Enquiries and quotations: your name, email address, phone or WhatsApp number, company, job role, location, industry, the services you are interested in, budget, timeline and anything you write in your message.
- Reviews: your name, optional company and role, rating and review text (published), and your email address (never published; used only to verify the review).
- Clients: contact and billing details, project information, files you share with us, and correspondence.
- Job applicants and staff: details provided during recruitment or employment, handled under separate internal notices.
Information collected automatically
- Technical and security data: a pseudonymised (keyed-hash) form of your IP address, browser user agent and the page from which you submitted a form. We use this to prevent spam, abuse and fraud. We do not store raw visitor IP addresses alongside form submissions.
- Usage data: our own first-party analytics records which pages are visited, how the visitor arrived (for example a search engine, an AI assistant, social media or another website), approximate location (country, region and city, derived from the network connection — the IP address itself is not stored), device type, browser, time on page and clicks on buttons such as “Get a quote”. A random visitor ID is kept in your browser's local storage so we can count unique visitors. We do not use third-party analytics or advertising trackers, and we never sell this data.
Information from other sources
- Business prospecting: publicly available business information such as a company's name, listed phone number, business email, website, address, category, ratings and public social media pages. We obtain it from official APIs (for example Google Maps Platform), the business's own website, and lists we are lawfully entitled to use. See section 5.
We do not intentionally collect special categories of personal data (such as health, religious or biometric data) through this website. Please do not include them in messages.
3. How we use personal data and our legal bases
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and preparing quotations | Steps at your request before entering a contract; your consent |
| Delivering projects, support and hosting; invoicing | Performance of a contract |
| Publishing and verifying reviews | Consent (which you can withdraw at any time) |
| Keeping the website and our systems secure; preventing spam and fraud | Legitimate interests |
| Contacting businesses that may benefit from our services (B2B outreach) | Legitimate interests, balanced against your rights, with an easy opt-out |
| Improving our website and services | Legitimate interests; consent for non-essential cookies |
| Keeping accounting and tax records; responding to lawful requests | Legal obligation |
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You can ask us for details of that assessment.
4. Artificial intelligence and automated processing
We use software, including AI models provided by trusted vendors, to audit public business websites, summarise publicly available business information and draft messages and proposals. A member of our team reviews any outreach before it is sent.
Internal lead scores help us prioritise our own sales work. They do not produce legal or similarly significant effects on anyone, and no decision about an individual is made solely by automated means. Our AI providers are contractually prohibited from using our data to train their models.
5. Business prospecting and your right to opt out
We research businesses, not private individuals. We only use contact details a business has made public for business purposes, or details from sources we are lawfully entitled to use. We never buy or sell scraped personal data, and we do not use social networks in breach of their terms.
Every outreach message identifies Rosper and explains how to stop further contact. If you reply “STOP”, ask us to stop, or email rospersolutions@gmail.com, we add your email address, phone number or domain to a permanent suppression list within 48 hours. Suppressed contacts are excluded from future research and outreach.
8. International transfers
Some of our providers store or process data outside Nigeria, including in the European Union, the United Kingdom and the United States. When we transfer personal data internationally, we do so in line with Part VIII of the NDPA. That means relying on an adequacy decision, or on appropriate safeguards such as standard contractual clauses, together with the security measures described below. You can ask us for a copy of the relevant safeguards.
9. How long we keep data
| Data | Retention |
|---|---|
| Enquiries and quotations that do not become projects | Up to 24 months after our last contact |
| Client and project records, contracts, invoices | Duration of the relationship plus 6 years (legal, tax and limitation periods) |
| Published reviews | Until you ask us to remove them, or we stop displaying reviews |
| Business prospecting records | Reviewed regularly; deleted within 24 months if there is no engagement |
| Suppression (opt-out) list | Kept indefinitely so we can honour your request |
| Security logs | Up to 12 months |
| Website analytics (visits, pages, clicks) | 25 months, then deleted automatically |
10. How we protect data
We use technical and organisational measures appropriate to the risk. These include encryption in transit (HTTPS/TLS) and at rest, hashed passwords, two-factor authentication for staff, role-based access with least-privilege permissions, audit logging, private storage for client files, regular backups and staff confidentiality obligations. If a personal data breach is likely to result in a risk to you, we will notify the NDPC within 72 hours and inform you without undue delay where required.
11. Your rights
Subject to the conditions in the NDPA (and, where applicable, the UK/EU GDPR), you have the right to:
- be informed about how your data is used (this policy);
- access the personal data we hold about you and obtain a copy;
- have inaccurate or incomplete data corrected;
- have your data erased where there is no good reason for us to keep it;
- restrict or object to processing, including at any time to direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier lawful processing;
- not be subject to a decision based solely on automated processing that significantly affects you.
To exercise any right, contact rospersolutions@gmail.com. We may need to verify your identity. We respond within 30 days and do not charge a fee unless a request is manifestly unfounded or excessive.
12. Children
Our website and services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
13. Complaints
If you have concerns, please contact us first and we will try to resolve them. You also have the right to complain to the Nigeria Data Protection Commission. If you are in the UK, you can contact the Information Commissioner's Office. If you are in the EU, you can contact your local supervisory authority.
14. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top shows when it was last revised. If we make significant changes, we will highlight them on this page or contact you directly where appropriate.
15. Contact us
For privacy questions or requests, contact our data protection lead:
- Rosper Solutions
- Asaba, Delta, Nigeria
- Email: rospersolutions@gmail.com
- Phone: +2348130138602