PrivacyPolicy

1. Who is responsible for your data

NGUERA SENEGALENSIS TECH is the digital arm of the sole proprietorship NGUER AMADOU, trading as NGUERA SENEGALENSIS GROUP. That business is the controller of the personal data described in this policy. We operate remote-first, serving clients in the United Kingdom and internationally.

Sole proprietorship registered with the Dakar trade and personal property credit register (RCCM) under number SN.DKR.2025.A.19512, tax identification number (NINEA) 012152550. Registered address: Guédiawaye, Senegal. Legal representative and publication director: Amadou Nguer.

2. What we collect, and when

We only collect personal data that you actively give us. There is no hidden collection, no advertising pixel, and no third-party analytics on this site.

When you submit the contact form, we collect: your full name, email address, and — if you choose to provide them — your company name, phone number, country, the service you are interested in, your project description, indicative budget, timeline, and preferred contact method. We also record your language and currency preference, and whether you gave consent.

3. Your IP address is never stored in readable form

To prevent spam and abuse of the contact form, we record a one-way cryptographic hash of your IP address, salted with a secret value. The hash cannot be reversed to recover your IP address, and we never store the address itself.

We also log each submission attempt — successful or not — with its outcome, so we can detect abuse. This log contains no message content.

4. Why we process your data

To reply to your enquiry and discuss your project. This is our legitimate interest in responding to someone who contacted us, and it is also necessary to take steps towards a possible contract.

To send you occasional updates about our work — only if you ticked the separate optional box. This is based on your consent, and you can withdraw it at any time without affecting anything else.

To protect the form against spam and abuse, using the hashed record described above. This is our legitimate interest in keeping the service available.

5. Who else processes your data

We use a small number of service providers, each bound by a contract to process data only on our instructions:

• Vercel — hosting and delivery of this website.
• Supabase — database, authentication and file storage. The database for this project is hosted in Ireland (eu-west-1).
• Resend — sending the confirmation email you receive after submitting the form, and the internal notification to our team.
• Trigger.dev — running scheduled internal maintenance tasks that read our own records.
• Anthropic — AI assistance used internally by our team to prepare responses and commercial documents. Every output is reviewed by a person before it is used; nothing is sent to you automatically.

Some of these providers are established outside the United Kingdom and the European Economic Area. Where that involves an international transfer of your data, it is covered by the safeguards those providers offer, such as standard contractual clauses. We do not sell your data, and we do not share it for advertising.

6. How long we keep it

We keep enquiry data for as long as needed to respond and, if we work together, for the duration of that relationship plus any period required for accounting and legal obligations.

We have not yet fixed a single published retention period for enquiries that do not lead to a project. If you would like your data deleted sooner, ask us and we will do it.

7. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our using it. You can withdraw marketing consent at any time. These requests are free, and we will respond within one month.

If you are in the United Kingdom and you are not satisfied with how we handled your data, you can complain to the Information Commissioner's Office (ico.org.uk). If you are in the European Union, you can complain to your national data protection authority.

Because our controller is established in Senegal, you may also complain to the Commission de Protection des Données Personnelles (CDP), established by Law No. 2008-12 of 25 January 2008 on the protection of personal data.

8. Security

Your data is transmitted over an encrypted connection. Access to our internal portal requires authentication and is limited by role, every sensitive action is logged, and uploaded files are stored in private buckets served only through short-lived signed links.

No system is perfectly secure, and we will not claim otherwise. If a breach ever affects your data and creates a real risk to you, we will tell you and the relevant regulator as required.

9. Changes to this policy

If we change how we handle personal data, we will update this page and change the review date above. Significant changes will be communicated directly where we hold your contact details.

How to contact us

Email nguerasenegalensis-tech@proton.me, or call +44 7451 259737 (UK) or +221 76 440 35 11 (Senegal), Monday to Friday, 9am–6pm GMT. We reply within 48 working hours.