← Back to Tools
Last updated: July 18, 2026
NDPR Compliant
GDPR Compliant
1. Data We Collect
Personal Data
- Full name
- Email address
- Phone number (WhatsApp/Telegram)
- Location (city, country)
- Payment information (processed by Paystack, Stripe, or bank transfer — we do not store card details)
Usage Data
- Products purchased and download history
- Messages sent to our WhatsApp/Telegram
- Pages visited on our website
- CRM interaction history (inquiry type, response sent)
2. How We Use Your Data
- To process and deliver your digital product purchases
- To respond to your inquiries via WhatsApp, Telegram, or email
- To send purchased products and download links
- To provide customer support for 7 days after purchase
- To send newsletter updates (only if you subscribe)
- To process affiliate commission payments
- To improve our products and services
- To comply with Nigerian legal requirements (FIRS, CAC)
3. Legal Basis for Processing
Under the Nigeria Data Protection Regulation (NDPR) 2019 and GDPR:
- Contract: Processing your purchase and delivering products
- Consent: You voluntarily provide your contact information
- Legal obligation: Tax records and financial compliance
- Legitimate interest: Customer support and service improvement
4. Data Sharing
We do NOT sell your data. We share only with:
- Payment processors (Paystack, Stripe) — for transaction processing
- Bank (UBA) — for bank transfer verification
- Getly — for digital product delivery
- FIRS — for tax compliance when legally required
We never share your data with marketing companies or third-party advertisers.
5. Data Storage & Security
- Data stored on secure cloud servers (Base44, GitHub, Vercel)
- All connections encrypted via HTTPS/SSL
- Payment data never stored on our servers — handled by PCI-compliant processors
- Access restricted to authorized personnel only
- 20 secrets/keys managed via secure vault
- Daily encrypted backups to GitHub
6. Your Rights
Under NDPR and GDPR, you have the right to:
- Access — request a copy of your data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — limit how we process your data
- Portability — receive your data in a portable format
- Objection — object to data processing
- Withdraw consent — at any time
To exercise any right, email harzco.business@gmail.com or WhatsApp 08028687857.
7. Cookies
Our website uses minimal cookies:
- localStorage — saves your tool preferences (goal tracker, expense tracker)
- Service worker — enables offline access to chat app
- No tracking cookies or advertising pixels
8. Data Retention
- Customer purchase records: 7 years (FIRS requirement)
- CRM inquiry records: 2 years
- Newsletter subscriber data: Until you unsubscribe
- Affiliate records: 5 years
- Support chat logs: 90 days after resolution
9. Children's Privacy
Our services are for businesses and individuals 18+. We do not knowingly collect data from children under 16. If you believe a child has provided data, contact us immediately.
Harz Digital Services — RC 321424 | NDPR & GDPR Compliant Privacy Policy