Legal
Privacy Policy
Last updated: 6 November 2026 (revision 5)
1. Who we are
Axiom Infrastructure Systems Limited (RC 9686664) (“Axiom”, “we”, “us” or “our”) is a Nigerian company with its registered office at 9A Constitution Avenue, Abuja, Federal Capital Territory, Nigeria. We are the data controller for personal data collected through our website at www.axiominfrasystems.com (the “Website”) and in connection with enquiries, feasibility assessments, proposals, contracts and aftercare.
We process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA), the General Application and Implementation Directive 2025 (GAID) issued by the Nigeria Data Protection Commission (NDPC), and other applicable Nigerian data-protection requirements.
Privacy contact. Privacy matters and requests about your personal data are handled through privacy@axiominfrasystems.com. Axiom has assessed that it is not currently a data controller or processor of major importance under the NDPA and the GAID. That assessment considers all of the designation criteria, not only the number of people whose data we process: we do not process the personal data of more than 200 individuals in any six-month period, we do not provide commercial ICT services on other people’s devices, and we do not operate in a designated sector. We document and review this assessment periodically. If it changes, we will register with the NDPC and publish our Data Protection Officer’s contact details in this Policy.
2. When this Policy applies
This Policy applies to personal data Axiom processes when you visit the Website, submit an enquiry, provide project documents, communicate with us, request or receive a feasibility assessment, enter into a contract, or receive warranty or aftercare services. It does not govern third-party websites or services that operate under their own privacy notices.
3. Personal data we collect
- Enquiry information: your name, email address, telephone or WhatsApp number, company or organisation, role, project type and stage, building type, project location, approximate area, preferred materials, target dates and message.
- Project files and links: drawings, specifications, 3D models, photographs and other documents you upload through the enquiry form (PDF, DWG, IFC, JPG or PNG, up to 25 MB in total) or make available through a cloud-storage link.
- Correspondence: emails, calls, messages, meeting notes and other communications with you.
- Assessment and contract records: quotations, accepted terms, agreements, invoices, payment confirmations, deliverables, and warranty and aftercare requests.
- Technical and usage information: IP address, browser and device information, pages visited, online identifiers and similar information collected by essential security technologies and, only where you consent, by analytics technologies.
Project documents may contain information about identifiable individuals, such as clients, employees, occupants or other third parties. Please provide only information you are authorised to share. Do not submit passwords, payment-card details or sensitive personal data through the Website or ordinary email unless Axiom has expressly agreed a secure and appropriate method with you.
4. Why we use personal data and our lawful bases
| Purpose | Lawful basis under the NDPA |
|---|---|
| Respond to an enquiry, review a project and take steps you request before a contract | Steps taken at your request before entering into a contract; and, where appropriate, our legitimate interests |
| Prepare quotations and deliver assessments, contracts, warranty and aftercare | Performance of a contract, or steps taken at your request before entering into one |
| Invoicing, accounting, tax and statutory records | Compliance with legal obligations |
| Operate and secure the Website, prevent spam and fraud, and protect our systems | Our legitimate interests, subject to a balancing assessment |
| Website analytics | Your consent, given through the cookie banner or Cookie settings |
| Send promotional communications about Axiom’s services | Your consent where required; you may withdraw it at any time |
| Establish, exercise or defend legal claims | Our legitimate interests and/or compliance with legal obligations, as applicable |
Where we rely on legitimate interests, we assess and document those interests against your rights and freedoms. We do not make decisions about you solely by automated means that produce legal or similarly significant effects.
5. Marketing communications
We send promotional emails or WhatsApp messages about Axiom’s services only where we have the consent or other permission required by law. You may withdraw consent or opt out at any time using the method in the message or by contacting privacy@axiominfrasystems.com. We do not make marketing consent a condition of receiving an unrelated service. Messages needed to respond to an enquiry or administer an existing project are not promotional messages.
6. Project documents and confidentiality
We use project documents to review enquiries, prepare proposals and deliver services. Access is limited to authorised personnel, professional advisers and service providers who need the information for that purpose and are subject to appropriate confidentiality and security obligations. Files submitted through the Website are not made publicly accessible.
Sending us a document does not transfer ownership of it or the intellectual property rights in it. We do not use identifiable project materials for marketing, portfolio or case-study purposes without your separate written permission. If your project needs further contractual confidentiality protection, the parties may enter into a separate non-disclosure agreement.
7. Who we disclose personal data to
We disclose personal data only where reasonably necessary for the purposes in this Policy, including to:
- the service providers listed in the table below, which support our Website, email, security and analytics;
- architects, engineers, specialist consultants, testing providers, fabricators and installers involved in a project, where disclosure is necessary for the agreed work and you have authorised it or it is otherwise lawful;
- professional advisers, including lawyers, accountants and auditors;
- courts, regulators, law-enforcement bodies or public authorities where required or permitted by law; and
- a buyer, successor or relevant adviser in connection with a proposed or completed restructuring or transfer of Axiom’s business, subject to appropriate protections.
| Provider | What it does for us | Personal data involved |
|---|---|---|
| Cloudflare | Hosts the Website; provides security and bot protection, including Turnstile on the enquiry form; stores the record of your cookie choice | IP address, browser and device signals, the anonymous consent record |
| Resend | Delivers each enquiry submitted through the Website, with its files, to our mailbox | Enquiry information and project files |
| Zoho | Hosts our business mailboxes (info@ and privacy@axiominfrasystems.com) in its United States data centre | Enquiries, files and correspondence |
| Google (Google Analytics) | Website analytics, only after you consent | Online identifiers, pages visited, device and browser details, approximate location |
| WhatsApp (Meta) | Messaging, only if you choose to contact us on WhatsApp | Your WhatsApp number and messages |
Where a provider processes personal data on our behalf, we rely on its data-processing terms and use appropriate contractual and organisational measures.
8. Transfers outside Nigeria
Some of these providers process personal data outside Nigeria. Resend stores enquiry data in the United States, and Zoho hosts our mailboxes, including the enquiries and correspondence in them, in its United States data centre. Google Analytics and Cloudflare may process data in the United States and other countries in which they operate.
Before making or permitting an international transfer, Axiom identifies the destination, recipient, data categories and purpose, and documents the transfer basis and safeguards required by sections 41 to 43 of the NDPA. Depending on the circumstances, this may be an adequacy decision, the contractual safeguards in the provider’s data-processing terms, or another transfer condition permitted by the NDPA. You may ask privacy@axiominfrasystems.com for more information about the safeguards for a particular transfer.
9. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, subject to legal, contractual, tax, accounting and claims-related requirements.
| Data category | Retention period |
|---|---|
| Enquiries that do not become a contract, including related files | 12 months after the last communication, or earlier where deletion is appropriate and no lawful reason for retention applies |
| Contracts, invoices and financial records | The life of the contract plus 7 years, subject to statutory requirements and claims needs |
| Engineering drawings, calculations and project design records | The life of the contract plus 12 years where reasonably required for later claims, with personal data in the technical record kept to a minimum |
| Portfolio material | Only where anonymised, or with separate written permission and for the period stated in that permission |
| Website analytics data | 14 months in our Google Analytics account (this is separate from how long the analytics cookies stay in your browser; see the Cookie Policy) |
| Cookie-consent records | 2 years after the choice is recorded; the record contains no name or IP address |
| Complaints, claims and disputes | Until resolved and any applicable limitation period or legal hold has ended |
We review retained information periodically and delete or anonymise it when it is no longer required, unless a lawful reason requires longer retention.
10. Cookies and similar technologies
Essential and security technologies help the Website and enquiry form operate and protect them against automated abuse. Analytics technologies are used only after you give consent. You can accept, reject or manage non-essential cookies through the banner, and change your choice at any time using the Cookie settings link in the Website footer. See the Cookie Policy for the full list and durations.
11. Security and personal data breaches
We use technical and organisational measures appropriate to the nature of the information and the risks, including access controls, account security, secure transfer methods, software updates and backups. No website, email service or storage platform can be guaranteed completely secure.
If a personal data breach occurs, we will assess, contain and document it, and notify the Nigeria Data Protection Commission and affected individuals where and as required by the NDPA, within the applicable statutory time limits.
12. Your data-protection rights
Subject to applicable law and its exceptions, you may request information about our processing, access to your personal data, correction, deletion or restriction; object to certain processing; request portability where applicable; withdraw consent; and exercise rights concerning solely automated decisions. These rights are not absolute; for example, we may need to keep certain records to comply with law or defend legal claims.
13. Requests and complaints
To make a request, contact privacy@axiominfrasystems.com with enough information for us to identify the relevant records. We may ask you to verify your identity. We will respond within the period required by law and explain where a request cannot be fulfilled because a statutory exception applies. You may also complain to the Nigeria Data Protection Commission.
14. Children
Our services are intended for businesses and professionals, and the Website is not directed at children. If you believe a child has provided personal data to us, contact privacy@axiominfrasystems.com so that we can assess the matter and take appropriate action.
15. Third-party websites and services
The Website may link to third-party websites or services, including cloud-storage providers you choose to use. Those providers operate under their own terms and privacy practices. Please review their notices before using them.
16. Changes to this Policy
We may update this Policy when our processing, service providers, Website or legal obligations change. The “Last updated” date shows the current version. We will highlight material changes on the Website and take any further steps required by law.
17. Contact
Axiom Infrastructure Systems Limited, 9A Constitution Avenue, Abuja, Federal Capital Territory, Nigeria.
Privacy enquiries: privacy@axiominfrasystems.com
General enquiries: info@axiominfrasystems.com
Telephone: +234 803 179 8313
