Privacy Policy
Your privacy and data protection are our top priorities
Last updated: January 1, 2024
Introduction
Ihe Holdings Limited ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in any way.
This policy complies with applicable data protection laws, including the General Data Protection Regulation (GDPR) for European users and the Nigerian Data Protection Regulation (NDPR) for Nigerian users.
Information We Collect
Personal Information You Provide
- Contact Information: Name, email address, phone number, postal address
- Account Information: Username, password, profile information
- Payment Information: Billing address, payment method details (processed securely by third-party providers)
- Business Information: Company name, job title, business address (for B2B customers)
- Communication Records: Messages, emails, and correspondence with our support team
- Training Records: Course enrollment, completion certificates, assessment results
Information Collected Automatically
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent on site, click patterns, search queries
- Location Data: General geographic location based on IP address
- Cookies and Tracking: Cookies, web beacons, and similar tracking technologies
- Analytics Data: Website performance metrics and user behavior analytics
Information from Third Parties
- Social Media: Information from social media platforms when you connect your accounts
- Payment Processors: Transaction information from payment service providers
- Business Partners: Information shared by our business partners and affiliates
- Public Sources: Information from publicly available sources for business purposes
How We Use Your Information
Service Provision
- Process orders and payments
- Provide customer support
- Deliver products and services
- Manage your account
- Conduct training programs
Communication
- Send order confirmations and updates
- Provide customer support
- Send newsletters and marketing communications (with consent)
- Notify you of important changes
- Respond to your inquiries
Business Operations
- Improve our products and services
- Conduct market research and analytics
- Prevent fraud and enhance security
- Comply with legal obligations
- Manage affiliate relationships
Legal Compliance
- Comply with applicable laws and regulations
- Respond to legal requests and court orders
- Protect our rights and interests
- Investigate potential violations
- Maintain business records
Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process your personal information based on the following legal grounds:
Consent
When you have given clear consent for us to process your personal information for specific purposes, such as marketing communications or newsletter subscriptions.
Contract Performance
When processing is necessary for the performance of a contract with you, such as providing products or services you have ordered.
Legitimate Interests
When we have a legitimate business interest in processing your information, such as improving our services, preventing fraud, or conducting analytics.
Legal Obligation
When we need to comply with a legal obligation, such as maintaining business records or responding to regulatory requests.
How We Share Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:
- Encryption: Data is encrypted in transit and at rest using industry-standard encryption protocols
- Access Controls: Strict access controls and authentication mechanisms
- Regular Audits: Regular security assessments and vulnerability testing
- Employee Training: Regular training on data protection and security best practices
- Secure Infrastructure: Secure servers and network infrastructure
- Incident Response: Comprehensive incident response procedures
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Your Rights and Choices
Access Rights
You have the right to request access to the personal information we hold about you, including information about how it is being processed.
Correction Rights
You have the right to request correction of inaccurate or incomplete personal information.
Deletion Rights
You have the right to request deletion of your personal information in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.
Portability Rights
You have the right to receive your personal information in a structured, commonly used format and to transmit it to another controller.
Objection Rights
You have the right to object to the processing of your personal information for certain purposes, such as direct marketing.
Restriction Rights
You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of the information.
How to Exercise Your Rights
To exercise any of these rights, please contact us at:
- Email: privacy@iheholdings.com
- Phone: +234-704-882-1509 / +234-706-505-0853
- Address: No 11 Joseph Street, Off Opebi Link-Road, Opebi, Ikeja, Lagos, Nigeria
We will respond to your request within 30 days (or as required by applicable law).
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us:
You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods include:
- Account Information: Retained for the duration of your account plus 3 years
- Order Information: Retained for 7 years for tax and legal compliance
- Marketing Communications: Retained until you unsubscribe or request deletion
- Training Records: Retained for 10 years for certification purposes
- Website Analytics: Retained for 26 months (Google Analytics default)
- Support Communications: Retained for 3 years for quality assurance
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers are subject to appropriate safeguards, including:
- Adequacy decisions by relevant data protection authorities
- Standard contractual clauses approved by the European Commission
- Certification schemes and codes of conduct
- Other appropriate safeguards as required by applicable law
Nigerian Data Protection Regulation (NDPR)
For Nigerian users, we comply with the Nigerian Data Protection Regulation (NDPR). Key provisions include:
- Lawful Processing: We process personal data lawfully, fairly, and transparently
- Purpose Limitation: We collect data for specified, explicit, and legitimate purposes
- Data Minimization: We collect only the data that is adequate, relevant, and necessary
- Accuracy: We take reasonable steps to ensure data accuracy
- Storage Limitation: We retain data only for as long as necessary
- Security: We implement appropriate security measures
- Accountability: We demonstrate compliance with NDPR principles
Children's Privacy
Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending an email notification to registered users
- Displaying a prominent notice on our website
- Updating the "Last Updated" date at the top of this policy
Your continued use of our services after any changes constitutes acceptance of the updated Privacy Policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Data Protection Officer
Email: privacy@iheholdings.com
Phone: +234-704-882-1509 / +234-706-505-0853
Mailing Address
Ihe Holdings Limited
No 11 Joseph Street, Off Opebi Link-Road
Opebi, Ikeja, Lagos, Nigeria
Attention: Data Protection Officer
Regulatory Information
If you are not satisfied with our response to your privacy concerns, you may contact the relevant data protection authority:
Nigeria
National Information Technology Development Agency (NITDA)
Website: https://nitda.gov.ng
European Union
Your local data protection authority
Find your authority: https://edpb.europa.eu/about-edpb/board/members_en