Privacy notice

Who we are

BonafID and this website, bonafid.africa, are run by Datasphir Solutions Limited ("Datasphir", "we"). We are the data controller for the personal data described here, under the Nigeria Data Protection Act 2023. For any privacy question, email helpdesk@bonafid.africa.

This notice covers this website only. Signing in to BonafID itself, at cloud.bonafid.africa, is covered by the privacy terms of that service and of your institution.

What we collect

When you express interest

The form on our home page asks for:

• your full name, institution, phone number and email address;
• whether your institution already has an identity and access management system;
• the products you are interested in;
• whether you want product updates from us (only if you tick the box).

To stop automated abuse, we also keep a one-way scrambled version of your IP address, which cannot be turned back into the address, and delete it after 30 days.

When you visit the site

We measure visits with Matomo, which Datasphir runs on its own servers. It is set up without cookies and shortens your IP address before storing it, so it does not identify you. We use the totals to improve the site.

Why we use it

• To answer your enquiry and discuss BonafID with your institution. This is in our legitimate interest and yours, as a step you asked us to take.
• To send product updates, only if you agreed. You can withdraw that consent at any time from any update email or by writing to us.
• To keep the site secure and stop spam, which is in our legitimate interest.

We do not sell your data and we do not use it for advertising.

Who else handles it

• Datasphir staff who answer enquiries, on a need-to-know basis.
• Cloudflare, whose Turnstile check confirms the form is being filled in by a person. Cloudflare processes technical details such as your IP address and browser for this purpose.
• The email service we use to send you a confirmation and to notify our team.

How long we keep it

• Enquiries: 24 months from the last contact, then deleted automatically.
• Consent to product updates: until you withdraw it.
• The scrambled IP address: 30 days.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or withdraw consent. Email helpdesk@bonafid.africa and we will respond within the time the law requires. If you are not satisfied, you can complain to the Nigeria Data Protection Commission.

Cookies

The public website sets no cookies. The staff dashboard uses essential cookies to keep staff signed in; these are never set for visitors.

Changes to this notice

If we change this notice, we will update the date at the top of this page.