1. Introduction

We respect your privacy and are committed to protecting your personal data. This privacy policy explains how ecoh power co. collects, uses, and safeguards your information when you visit our website ecohpower.co or use our energy management services, software, and smart-meter monitoring tools. This policy is designed to comply with the Nigeria Data Protection Act (NDPA) and the Nigeria Data Protection Regulation (NDPR).

2. The Lawful Basis for Processing Data

In accordance with the NDPA, we only process your personal data under the following lawful bases:

• Consent: You have given us clear consent to process your data for a specific purpose.
• Contractual Necessity: Processing is necessary to fulfill our service contract with you.
• Legal Obligation: Processing is necessary to comply with Nigerian laws (e.g., Nigerian Electricity Regulatory Commission regulations).
• Legitimate Interests: Processing is required for our legitimate business purposes, provided it does not override your fundamental rights.

3. Information We Collect

• Personal Identification Data: Name, email address, phone number, and billing/service address when you register or request an energy consultation.
• Energy Usage Data: Consumption metrics, smart grid/meter telemetry, and efficiency performance data collected through our services.
• Technical Data: IP address, browser type, operating system, and standard server log data collected automatically.

4. How We Use Your Information

• To provide, maintain, and improve our energy management solutions and utility audits.
• To communicate updates, service alerts, or customer support responses.
• To analyze aggregate site traffic and platform performance to optimize energy analytics tools.

5. Data Sharing, Disclosure, and International Transfers

We do not sell your personal data. We may share data with trusted third-party vendors (such as cloud hosting or analytics providers) under strict data processing agreements.

If any personal data is transferred outside Nigeria, we ensure that the recipient country provides an adequate level of data protection in line with NDPC guidelines, or we implement appropriate safeguards (such as Standard Contractual Clauses).

6. Data Security & Retention

We use robust administrative, technical, and physical safeguards (including data encryption) to protect your information against unauthorized access, alteration, or disclosure. We retain personal and energy data only as long as necessary to fulfill the purposes outlined in this policy or satisfy statutory retention periods under Nigerian law.

7. Your Data Privacy Rights

Under the NDPA, you have the following rights regarding your personal data:

• The right to access the personal data we hold about you.
• The right to request the correction of inaccurate or incomplete data.
• The right to request the erasure of your personal data ("right to be forgotten").
• The right to object to or restrict the processing of your data.
• The right to data portability (transferring your data to another provider).
• The right to withdraw consent at any time.

To exercise these rights, please contact us using the details below. If you believe your rights have been violated, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).