Regulatory Data Protection & Governance

Privacy Policy & NDPR / GDPR Governance Notice

Effective Date: October 2026 · Scope: harrisonyakubu.resolyticsai.com & Resolytics Advisory

1. Data Controller Identity & Contact

This website and its associated inquiry workflows are operated by Harrison Yakubu, Technology Entrepreneur and Founder of Resolytics, based in Lagos, Nigeria.

Data Controller: Harrison Yakubu (Resolytics)

Primary Email: harry@resolyticsai.com

Jurisdiction: Federal Republic of Nigeria & International Standards

2. Regulatory Compliance Framework (NDPR & GDPR)

We design and operate our data processing operations in rigorous accordance with:

Nigeria Data Protection Regulation (NDPR / NDPA 2023): Governing the lawful collection, processing, and protection of personal data of Nigerian citizens and residents.
General Data Protection Regulation (EU GDPR / UK GDPR): Ensuring international visitors, European partners, and global grant foundations receive tier-one data protection, confidentiality, and explicit rights.

3. Principles of Processing & Lawful Basis

In line with Article 5 of the GDPR and Section 2.1 of the NDPR, all data processing satisfies:

•Lawfulness, Fairness & Transparency: Data is collected solely upon explicit consent or legitimate interest for professional collaboration.
•Purpose Limitation: Contact details are used exclusively to evaluate, reply to, and schedule discussions related to your submitted message.
•Data Minimization: We only collect what is strictly required (name, email, organization, inquiry details). We do not collect sensitive demographic, financial, or biometric data.
•Storage Limitation: Submissions are retained only as long as necessary for active business communication or archival compliance, and may be purged upon request.

4. Technical, Cryptographic & Penetration Safeguards

We implement robust technical and organizational security controls to protect personal data against unauthorized disclosure, interception, or destruction:

Encryption in Transit & at Rest

All website communications utilize modern TLS 1.3 / HTTPS. Database records are stored with AES-256 storage-level encryption in Supabase PostgreSQL infrastructure.

IP Anonymization by Design

In compliance with GDPR and NDPR data minimization rules, client IP addresses are cryptographically hashed and truncated with salted HMACs before storage, preventing human re-identification while preserving bot abuse prevention.

Anti-Penetration Headers & CSP

Production systems enforce Strict Content Security Policy (CSP), Clickjacking defenses (X-Frame-Options: DENY), MIME sniffing blocks (X-Content-Type-Options: nosniff), and HSTS.

Brute-Force & Injection Defense

API endpoints implement strict sliding-window rate limiters with exponential lockouts, constant-time authentication checks, honeypot filters, and parameterized query execution immune to SQL injection.

5. Your Rights as a Data Subject

Under both the NDPR and GDPR, you possess comprehensive legal rights concerning your personal information:

Right of Access: Request a copy of any personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete contact details.
Right to Erasure (“Right to be Forgotten”): Request the permanent deletion of your inquiry submission from our database.
Right to Restrict or Object: Object to further processing or marketing communications at any time.
Right to Data Portability: Request that your records be provided in a structured, machine-readable CSV format.

To exercise any of these rights, email Harrison directly at harry@resolyticsai.com with the subject line “Data Protection Request”. We will process and confirm your request within 30 days without charge.

If you believe your personal data has been handled inconsistently with regulatory requirements, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng, or your respective national European Data Protection Authority under the GDPR.