Privacy - Kobahost Web Services

1. Introduction

Kobahost Web Services, a trading name of DexGlobal Digital Nigeria Ltd, is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services.

This policy is designed to comply with the Nigeria Data Protection Regulation (NDPR) issued by the National Information Technology Development Agency (NITDA), as well as other applicable data protection laws.

We do not sell your personal data. We do not share your personal data with advertisers. Your data is used only to provide and improve our services to you.

2. What Information We Collect

2.1 Information You Provide

Account information: Name, email address, phone number, WhatsApp number, and billing address when you register
Payment information: Billing details processed securely via Paystack and Stripe — we do not store full card numbers
Support communications: Messages you send us via email, WhatsApp, or our contact form
Domain registration data: WHOIS information required for domain registration

2.2 Information We Collect Automatically

Log data: IP address, browser type, pages visited, and timestamps when you access our website or client portal
Usage data: Hosting resource usage (disk, bandwidth, CPU) to manage your account and enforce plan limits
Cookies: Session cookies and preference cookies as described in Section 6

2.3 Information from Third Parties

We may receive information from payment processors (Paystack, Stripe) to confirm transactions, and from domain registrars (Namecheap) to manage your domain registrations.

3. How We Use Your Information

We use your personal data for the following purposes:

To create and manage your hosting account
To process payments and issue invoices
To provide technical support and respond to enquiries
To send service notifications (invoices, renewal reminders, downtime alerts)
To send our newsletter and blog updates — only with your consent
To detect and prevent fraud, abuse, and security threats
To comply with legal obligations
To improve our services based on aggregated usage patterns

We process your data on the following legal bases: contract performance (to deliver the services you purchased), legitimate interests (security, fraud prevention), legal obligation (tax records, regulatory compliance), and consent (marketing communications).

We do not sell your personal data. We share your data only with the following categories of third parties, and only as necessary to provide our services:

Payment processors: Paystack and Stripe for secure payment processing
Domain registrars: Namecheap for domain registration (WHOIS data as required)
Hosting infrastructure: Server providers for the infrastructure your websites run on
Email delivery: Brevo (formerly Sendinblue) for transactional emails
Legal authorities: Where required by Nigerian law or court order

All third-party providers we use are bound by their own data protection policies and applicable law.

5. Data Storage & Retention

Your personal data is stored on servers located in Europe (Germany). This is where our hosting infrastructure is based. By using our services, you consent to your data being transferred to and stored in these locations.

We retain your personal data for as long as your account is active. Upon account termination:

Account data is retained for 90 days to allow account reactivation
Financial records (invoices, payment history) are retained for 7 years as required by Nigerian tax law
Support communications are retained for 2 years
Website data (files, databases) is deleted within 14 days of account closure

6. Cookies

Our website and client portal use cookies to function properly and improve your experience. We use the following types of cookies:

Essential cookies: Required for the client portal to function — session management and authentication. Cannot be disabled.
Preference cookies: Remember your settings and preferences across visits.
Analytics cookies: Help us understand how visitors use our website (Google Analytics — anonymised). You may opt out.

You can control non-essential cookies through your browser settings. Disabling cookies may affect the functionality of our client portal.

7. Your Rights

Under the Nigeria Data Protection Regulation (NDPR) and applicable law, you have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Request correction of inaccurate or incomplete data
Right to erasure: Request deletion of your personal data (subject to legal retention requirements)
Right to data portability: Request your data in a machine-readable format
Right to object: Object to processing based on legitimate interests or for marketing purposes
Right to withdraw consent: Withdraw consent for marketing at any time

To exercise any of these rights, contact us at legal@kobahost.com. We will respond within 30 days.

8. Children's Privacy

Our services are not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at legal@kobahost.com and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email to your registered address. The date at the top of this page always reflects when the policy was last updated. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

10. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data:

Data Controller: DexGlobal Digital Nigeria Ltd (trading as Kobahost Web Services)
Email: legal@kobahost.com
Address: Ibadan, Oyo State, Nigeria
WhatsApp: +234 806 272 9636

PrivacyPolicy.