1. Introduction
Kobahost Web Services, a trading name of DexGlobal Digital Nigeria Ltd, is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services.
This policy is designed to comply with the Nigeria Data Protection Regulation (NDPR) issued by the National Information Technology Development Agency (NITDA), as well as other applicable data protection laws.
We do not sell your personal data. We do not share your personal data with advertisers. Your data is used only to provide and improve our services to you.
2. What Information We Collect
2.1 Information You Provide
- Account information: Name, email address, phone number, WhatsApp number, and billing address when you register
- Payment information: Billing details processed securely via Paystack and Stripe โ we do not store full card numbers
- Support communications: Messages you send us via email, WhatsApp, or our contact form
- Domain registration data: WHOIS information required for domain registration
2.2 Information We Collect Automatically
- Log data: IP address, browser type, pages visited, and timestamps when you access our website or client portal
- Usage data: Hosting resource usage (disk, bandwidth, CPU) to manage your account and enforce plan limits
- Cookies: Session cookies and preference cookies as described in Section 6
2.3 Information from Third Parties
We may receive information from payment processors (Paystack, Stripe) to confirm transactions, and from domain registrars (Namecheap) to manage your domain registrations.
3. How We Use Your Information
We use your personal data for the following purposes:
- To create and manage your hosting account
- To process payments and issue invoices
- To provide technical support and respond to enquiries
- To send service notifications (invoices, renewal reminders, downtime alerts)
- To send our newsletter and blog updates โ only with your consent
- To detect and prevent fraud, abuse, and security threats
- To comply with legal obligations
- To improve our services based on aggregated usage patterns
We process your data on the following legal bases: contract performance (to deliver the services you purchased), legitimate interests (security, fraud prevention), legal obligation (tax records, regulatory compliance), and consent (marketing communications).
4. Who We Share Your Information With
We do not sell your personal data. We share your data only with the following categories of third parties, and only as necessary to provide our services:
- Payment processors: Paystack and Stripe for secure payment processing
- Domain registrars: Namecheap for domain registration (WHOIS data as required)
- Hosting infrastructure: Server providers for the infrastructure your websites run on
- Email delivery: Brevo (formerly Sendinblue) for transactional emails
- Legal authorities: Where required by Nigerian law or court order
All third-party providers we use are bound by their own data protection policies and applicable law.
5. Data Storage & Retention
Your personal data is stored on servers located in Europe (Germany). This is where our hosting infrastructure is based. By using our services, you consent to your data being transferred to and stored in these locations.
We retain your personal data for as long as your account is active. Upon account termination:
- Account data is retained for 90 days to allow account reactivation
- Financial records (invoices, payment history) are retained for 7 years as required by Nigerian tax law
- Support communications are retained for 2 years
- Website data (files, databases) is deleted within 14 days of account closure
6. Cookies
Our website and client portal use cookies to function properly and improve your experience. We use the following types of cookies:
- Essential cookies: Required for the client portal to function โ session management and authentication. Cannot be disabled.
- Preference cookies: Remember your settings and preferences across visits.
- Analytics cookies: Help us understand how visitors use our website (Google Analytics โ anonymised). You may opt out.
You can control non-essential cookies through your browser settings. Disabling cookies may affect the functionality of our client portal.
7. Your Rights
Under the Nigeria Data Protection Regulation (NDPR) and applicable law, you have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data (subject to legal retention requirements)
- Right to data portability: Request your data in a machine-readable format
- Right to object: Object to processing based on legitimate interests or for marketing purposes
- Right to withdraw consent: Withdraw consent for marketing at any time
To exercise any of these rights, contact us at legal@kobahost.com. We will respond within 30 days.
8. Children's Privacy
Our services are not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at legal@kobahost.com and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email to your registered address. The date at the top of this page always reflects when the policy was last updated. Your continued use of our services after any changes constitutes your acceptance of the updated policy.
10. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data:
- Data Controller: DexGlobal Digital Nigeria Ltd (trading as Kobahost Web Services)
- Email: legal@kobahost.com
- Address: Ibadan, Oyo State, Nigeria
- WhatsApp: +234 806 272 9636