Legal

Privacy Policy

Last updated: 27 September 2026

This policy explains how Jonspire handles your personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and, where applicable, the EU/UK GDPR.

1. Who we are

Jonspire ("we", "us") is the data controller for personal data collected through this website. Contact: Jonspire, Lagos, Nigeria · jonspirelimited@gmail.com.

2. What we collect and why

• Newsletter survey — name, email, optional profile (role, how you heard about us, topics of interest). Purpose: to send the newsletter and promotional emails you asked for, and tailor their content. Lawful basis: your consent.
• Advisory bookings — name, email, optional phone and company, chosen topic, date/time and notes. Purpose: to arrange and deliver your session. Lawful basis: steps taken at your request before entering into a contract, and your consent.
• Advisory chatbot — the messages you type are processed by Cloudflare Workers AI to generate a reply. We do not store chat conversations. Please do not enter personal or financial identifiers.
• Technical data — to prevent abuse, we keep a scrambled (one-way hashed) form of your IP address for up to 24 hours to limit repeated submissions. It cannot be turned back into your IP address and is never stored with your records.

3. Cookies

We use only strictly necessary cookies: __Host-jcsrf, which protects our forms against cross-site request forgery (expires after 7 days), and, for staff only, __Host-jsid, which keeps staff signed in (expires after 8 hours). They contain no tracking data. We do not use advertising or analytics cookies, so no cookie consent is required.

4. Sharing

We do not sell your data. We share it only with service providers that help us run the website — our hosting, storage and chatbot provider (Cloudflare) and our email provider (Google Gmail — newsletters and updates are sent from jonspirelimited@gmail.com) — under contracts that require them to protect it. Some providers may process data outside Nigeria; where they do, we rely on appropriate safeguards as required by the NDPA and GDPR.

5. How long we keep it

• Newsletter data: until you unsubscribe. We keep your email on a suppression list so we don't contact you again.
• Booking data: 24 months after your session, then deleted, unless the law requires us to keep it longer.

6. Your rights

You may request access to, correction of, or deletion of your personal data; withdraw consent at any time; object to processing; and request data portability. Unsubscribe links are included in every email. To exercise any right, email jonspirelimited@gmail.com. You may also complain to the Nigeria Data Protection Commission (NDPC) or your local data protection authority.

7. Security

We protect your data with encrypted connections (HTTPS), strict access controls for authorised staff only, hashed passwords, security headers, rate limiting and audit logging.

8. Changes

We will post any changes to this policy on this page and update the date above.