Privacy Policy

01Who is responsible for your personal data

Vanora Partners Global Limited is the data controller for personal data processed for its own business purposes. When we process data solely on a client’s documented instructions, that client may be the controller and Vanora may act as a data processor.

02Personal data we may collect

The information depends on how you interact with us and may include:

• Identity and contact data: name, company, job title, business email, telephone or WhatsApp number, and business address.
• Company and professional data: sector, company size, responsibilities, priorities and discovery or delivery information.
• Assessment data: answers about lead generation, sales, proposals, collections, retention, automation and management reporting.
• Transaction and engagement data: enquiries, proposals, contracts, invoices, payments, meeting notes, support requests and service history.
• Marketing and preference data: newsletter choices, communication preferences, registrations, campaign interactions and consent records.
• Technical and usage data: IP address, browser, device, operating system, referring page, pages viewed, approximate location, timestamps, cookie identifiers and website activity.
• Content you provide: documents, messages, comments, survey responses, recordings or other material you choose to share.
• Public and permitted third-party data: professional information from lawful public sources, referrals, event partners, directories or reputable business-data providers.

03How we collect personal data

• Directly from you through forms, assessments, meetings, calls, email, WhatsApp, events, contracts and service delivery.
• Automatically through cookies, server logs and similar technologies when you use our websites.
• From your organisation, authorised representatives, referrals, event organisers and service partners.
• From lawful public sources and reputable business-information providers.

04Why we use personal data and our lawful bases

We process personal data only where we have a recognised lawful basis. Depending on the activity, this may be consent, performance of a contract or pre-contract steps you request, a legal obligation, vital interests, a public-interest task where applicable, or our legitimate interests after considering your rights and expectations.

• Respond to enquiries, prepare proposals, schedule consultations and provide requested services.
• Deliver the Vanora Revenue Growth Assessment and explain directional findings.
• Manage client relationships, projects, billing, payments, support and service quality.
• Operate, secure, troubleshoot and improve our websites, systems and services.
• Send relevant business updates, invitations and permitted marketing; you can opt out at any time.
• Measure campaign and website performance, subject to required cookie choices.
• Prevent fraud, spam, misuse, security incidents and unlawful activity.
• Meet legal, regulatory, audit, accounting, tax, dispute-resolution and record-keeping duties.
• Establish, exercise or defend legal claims and protect Vanora, our clients and others.

Our legitimate interests may include operating and growing our business, improving services, protecting systems, managing client relationships and communicating relevant B2B offerings. You may object where the law gives you that right.

05Vanora Revenue Growth Assessment and automated outputs

The assessment may use rule-based scoring to classify business-process areas as Strong, Needs Attention or High-Priority Gap. Its output is an initial, directional business diagnostic based on supplied answers. It is not financial, legal, investment or audit advice and is not a verified calculation of lost revenue.

We do not intend it to make decisions producing legal or similarly significant effects about individuals. Where a meaningful decision needs human judgement, a qualified person should review the facts. You may ask about the logic used, correct inaccurate input or request human review.

06Cookies and similar technologies

Our website may use strictly necessary cookies for security, navigation and core functions; preference cookies to remember choices; analytics cookies to understand performance; and marketing cookies to measure campaigns or support relevant advertising.

Where consent is required, non-essential cookies should not activate until you choose. You should be able to accept, reject or manage categories and withdraw consent as easily as you gave it. Blocking some cookies may affect optional features. A separate Cookie Notice may list current cookies, providers, purposes and lifetimes.

07Marketing communications

We may send business communications where you have consented or another lawful basis permits. Electronic marketing will provide a practical way to unsubscribe. You may also contact us to change your preferences. Opting out of marketing does not stop necessary service, contractual, security or administrative messages.

08When we share personal data

We do not sell personal data. We may disclose only what is reasonably necessary to service providers; authorised Vanora personnel, contractors and delivery partners subject to confidentiality; regulators, courts or authorities where lawful; or a genuine prospective buyer, investor or successor under suitable safeguards.

Technology providers

Depending on the services and features actually enabled, current or planned providers may include:

• HostingerWebsite hosting, server infrastructure, databases and related security when deployed.
• GitHubSource-code hosting, version control and deployment workflows; public submissions should not be stored in the repository.
• Microsoft 365Business email, documents, collaboration and internal administration where configured.
• CalendlyConsultation and meeting scheduling where a booking link or embedded scheduler is used.
• Google servicesAnalytics or Tag Manager only where enabled and subject to relevant cookie choices.
• Meta servicesFacebook, Instagram, Meta Pixel or WhatsApp Business where used, subject to applicable consent requirements.
• Form and CRM servicesFormspree only if temporarily activated, or a secure Vanora-hosted handler and selected CRM when implemented.

Providers may act as processors, sub-processors or independent controllers depending on the activity. Vanora will limit disclosures, configure services appropriately and apply suitable contractual and transfer safeguards. We will update this page when providers are added, removed or materially repurposed.

09International transfers

Some providers may process personal data outside Nigeria. Before a restricted transfer, we will use a lawful mechanism and appropriate safeguards, such as an adequacy basis, contractual protections, explicit consent where suitable, or another exception recognised by law. You may contact us for information about relevant safeguards, subject to lawful confidentiality limits.

10Data security

We use proportionate administrative, technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, unauthorised disclosure, access or destruction. These may include access controls, authentication, encryption where appropriate, secure backups, confidentiality duties, vendor reviews, logging, vulnerability management and incident-response procedures.

No internet or storage system is completely secure. If a personal-data breach occurs, we will assess, contain and document it and notify affected persons and the Nigeria Data Protection Commission where required.

11How long we keep personal data

We retain data only as long as reasonably necessary for the purposes described, including contractual, legal, tax, accounting, security and dispute-resolution requirements. When no longer required, we will securely delete, anonymise or isolate it unless lawful retention is necessary.

• Unsuccessful enquiries and assessment leads: normally up to 24 months after the last meaningful interaction, unless consent is withdrawn earlier or longer retention is justified.
• Client, contract, invoice and project records: for the relationship and applicable statutory or claims period afterward.
• Marketing suppression records: minimal details may be retained to respect an opt-out.
• Security logs: for a limited period proportionate to investigation and security needs.

These are policy targets and do not replace a formal operational retention schedule.

12Your data-protection rights

Subject to applicable law and exceptions, you may have the right to:

• Be informed about how your data is used.
• Request access to and a copy of your data.
• Ask us to correct inaccurate or incomplete data.
• Request deletion in appropriate circumstances.
• Restrict or object to certain processing, including direct marketing.
• Withdraw consent without affecting earlier lawful processing.
• Receive qualifying data in a structured, commonly used, machine-readable format and request portability where applicable.
• Object to certain solely automated decisions and request human intervention where applicable.
• Lodge a complaint with the Nigeria Data Protection Commission or seek another lawful remedy.

To exercise a right, contact us and describe your request. We may request proportionate information to verify identity and protect your data. We will respond within the period required by law and charge only where legally permitted.

13Children’s privacy

Vanora’s corporate services and assessments are not directed to children. We do not knowingly collect a child’s personal data through these services without appropriate authorisation and safeguards. If you believe a child has provided data improperly, contact us so we can investigate. Any future youth-focused programme will use a separate age-appropriate privacy notice and parent or guardian process where required.

14Client-controlled data

When Vanora processes data for a client, the client’s privacy notice generally explains how it is used. Requests relating to that data may need to be directed to the client. Vanora will assist the client as required by contract and law.

15Links and third-party services

Our websites may link to booking, payment, social-media, messaging or other services. Vanora does not control those parties’ independent processing. Review their privacy notices and settings before using them. A link does not, by itself, mean Vanora endorses every practice of the linked service.

16Changes to this Policy

We may update this Policy when our services, systems, providers or legal obligations change. We will post the revised version with a new “Last updated” date and provide additional notice where a material change requires it. Please review this page periodically.

17Contact and complaints

If we do not resolve your concern, you may lodge a complaint through the official channels of the Nigeria Data Protection Commission or seek another remedy available under applicable law.