Privacy Notice

Crimson Strande is the data controller for personal information processed through the Service. Contact the data protection team at privacy@crimsonstrande.com.

• Account data — name, email, phone, company, billing address.
• Service requests — the service you selected, brief description, location, urgency, and any attachments you upload.
• Payment evidence — the proof-of-payment file you upload after a bank transfer. We do not store card details.
• Communications — emails we send you and support messages you send us.
• Technical data — IP address, user agent, and standard server logs used for security and reliability.

• To fulfil your service request, dispatch technicians, and issue invoices.
• To send you transactional emails: booking confirmation, quote, payment confirmation, scheduling, and completion.
• To authenticate you and secure your account (sign-in alerts, rate limiting, honeypot).
• To comply with tax, accounting, and legal obligations in Nigeria.
• To improve the Service, only where you have accepted analytics cookies.

• Contract — processing needed to deliver the service you requested.
• Legal obligation — tax records, invoice retention.
• Legitimate interest — fraud prevention, service security, and dispute handling.
• Consent — optional analytics; you can withdraw at any time.

We share personal information only with processors needed to run the Service. Current subprocessors are listed in our Trust page. We do not sell your data.

• Account and ticket records: for the life of the account plus 12 months.
• Invoices and tax records: 7 years, as required by Nigerian tax law.
• Deletion requests: soft-deleted immediately, hard-deleted after 30 days (invoice records retained per above).
• Server logs: 90 days.

You have the right to access, correct, delete, restrict, or object to processing of your data, and to data portability. Signed-in customers can:

• Download a copy of their data from the Privacy tab of their account.
• Request account deletion from the same page.

You may also contact us at privacy@crimsonstrande.com to exercise any right. You may lodge a complaint with the Nigeria Data Protection Commission (NDPC) or, in the EU/UK, your local supervisory authority.

Data may be processed on infrastructure located outside Nigeria (see our Trust page for the current list). Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

We apply role-based access controls, database row-level security, encrypted transport (TLS), encrypted storage at rest, and audit logging of privileged actions. Report suspected vulnerabilities to security@crimsonstrande.com.

We will post material changes on this page and update the "last updated" date above.