Legal
Privacy policy
What we collect, why we have it, who else sees it, how long we keep it, and what you can make us do about it.
Who we are
AmtecHost Solutions provides managed hosting, domain management and business email services. We have been operating since 2007 and are registered in Nigeria.
AmtecHost Solutions is a business name registered with the Corporate Affairs Commission under the Companies and Allied Matters Act 2020.
- Business Name Registration No. 3711121, registered 21 July 2022
- Nature of business: web hosting and domain registration services
- Principal place of business: Office C6, Prime Hub Complex, Zoo Road, Kano, Kano State
For anything in this policy, write to support@amtechost.com or call 08062260006.
Two different roles
This matters more than it sounds, because it changes who is answerable for what.
We are the controller of our own data
When you browse this site, send us an enquiry, or become a client, we decide what to collect and why. We are the data controller, and this policy governs that.
We are a processor of your data
When we manage a server, mailbox or domain on your behalf, we handle personal data that belongs to your organisation: your staff, your customers, your correspondents. For that data you are the controller and we act only on your instructions. We do not read it, mine it, or use it for anything other than keeping your systems running and fixing them when they break.
The terms of that arrangement sit in your service agreement rather than in this policy.
If you visit this website
This site sets no cookies. There is no analytics, no advertising pixel, no tracking of any kind, and nothing is stored in your browser. We do not know who you are or that you came back.
The web server that delivers these pages keeps standard access logs, which include your IP address, the pages requested and the time. These are used for security and diagnosing faults, and for nothing else.
Lawful basis: our legitimate interest in operating a secure website (NDPA 2023, s.25(1)(f)).
If you contact us
The contact form asks for your name and email address, and optionally your organisation and phone number, along with whatever you write in the message. Emailing or calling us gives us the same sort of information.
Nothing you type into the form is stored on this website or written to a log. It is passed straight to Resend, the service that delivers our email, and from there into our mailbox. Resend is named in the table below along with everyone else who handles your data, and it is based in the United States, which is covered under transfers outside Nigeria.
We use it to answer you, to prepare a quote if you have asked for one, and to keep a record of what was discussed. We do not add you to a mailing list, and we do not pass your details to anyone else.
Lawful basis: taking steps at your request before entering a contract (s.25(1)(b)), and our legitimate interest in responding to enquiries (s.25(1)(f)).
If you are a client
To provide the service and invoice you, we hold:
- Contact details for the people we deal with at your organisation
- Billing details and payment records
- Technical details of what we manage: domains, servers, DNS, mailboxes
- Records of support requests and what we did about them
- Credentials needed to administer your systems, held securely
Lawful basis: performance of our contract with you (s.25(1)(b)), and compliance with legal obligations such as tax and company records (s.25(1)(c)).
Who else sees your data
We do not sell data and we do not share it for anyone else's marketing. Data reaches third parties only where the service cannot work otherwise:
| Who | What they receive | Why |
|---|---|---|
| Upstream hosting providers Including the platform behind our amtechost.net store | Account and technical details needed to provision what you have bought | They operate the infrastructure we manage on your behalf |
| Domain registrars and registries | Registrant details required for registration | Registering a domain is not possible without them |
| Banks and payment processors | Payment and invoice references | Taking payment |
| Resend Our email delivery provider, based in the United States | Anything you put in the contact form, and the content of email we send you | Delivering our email and telling us whether it arrived |
| Professional advisers and authorities | Only what is required | Where the law obliges us, or to establish or defend a legal claim |
No advertising or analytics companies receive anything from this site, because we do not use any. We do not set cookies and we do not track you between visits. Every file this site loads, including the typefaces, is served from our own servers, so simply reading these pages sends nothing to anyone but us.
Transfers outside Nigeria
Some infrastructure we resell is operated abroad, so data may be processed outside Nigeria. Our email delivery provider, Resend, is based in the United States, which means anything you send through the contact form leaves the country in order to reach us.
Where that happens we rely on the provisions for cross-border transfer in Part VIII of the NDPA 2023, and we transfer no more than the service requires. If you would rather nothing about your enquiry left Nigeria, call us on 08062260006 instead of using the form.
How long we keep it
| What | How long |
|---|---|
| Server access logs | 90 days |
| Enquiries that do not become clients | 12 months |
| Client records, during the engagement | For as long as we work together |
| Client records, after it ends | 6 years, to meet tax and company law requirements |
| Credentials for systems we manage | Destroyed at handover |
| Backups of client systems | Rolling, deleted 30 days after the engagement ends |
When a period ends we delete the data or anonymise it beyond recovery.
Your rights
Under the NDPA 2023 you may ask us to:
- Show you what personal data we hold about you
- Correct anything inaccurate or incomplete
- Delete it, where we have no continuing basis to keep it
- Restrict what we do with it while a dispute is resolved
- Hand it over to you or another provider in a usable format
- Stop processing you object to, including any direct marketing
- Withdraw consent where consent is what we relied on
We make no decisions about you by automated means, and we do not profile you.
Write to support@amtechost.com. We will respond within 30 days and we will not charge you for it. We may ask you to confirm your identity first, so that we do not hand your data to somebody else.
How we protect it
- Encryption in transit for everything we operate
- Access limited to the people who need it to do the work
- Credentials held in a password manager, never in plain text or email
- Operating systems and control panels patched on a schedule
- Backups taken off-site and periodically restored to confirm they work
No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that is likely to harm you, we will notify the Nigeria Data Protection Commission within 72 hours as the Act requires, and tell you directly where the risk to you is high.
Complaints
Tell us first, at support@amtechost.com or 08062260006. Most problems are faster to fix directly.
If we do not resolve it, you have the right to complain to the Nigeria Data Protection Commission, the regulator responsible for enforcing the NDPA 2023, at ndpc.gov.ng. You do not need our permission to do that, and we will not treat you differently for doing it.
Changes to this policy
When we change anything of substance we update the date at the top of this page and, if you are a client, tell you directly. We do not make changes retroactively.