DATA PRIVACY & COMPLIANCE • NDPR / NDPC CERTIFIED 2024

Privacy Policy & Data Sovereignty

How NyanjaHost collects, safeguards, and respects your corporate and personal information in strict accordance with the Nigeria Data Protection Act (NDPA) and NDPR guidelines.

schedule Effective: October 14, 2024 verified_user Audited by NDPC Licensed DPCO terminal Version 3.4.1-LAGOS

gavel

Regulatory Audit NDPR Compliant

Full statutory adherence under NDPC Act 2023

language

Accreditation NiRA Accredited

Official Registry Channel Partner #418

dns

Infrastructure ISO 27001 DC

Tier-III Datacenter in Ikeja & Lekki, Lagos

lock

Cryptographic Layer 256-bit TLS / AES

Zero plaintext transit across IXPN backbones

Language: EN (Official) •

Scope & Sovereign Hosting Commitment

NyanjaHost Cloud Infrastructure Limited ("NyanjaHost", "We", "Our", or "Us") operates as a registered data controller and processor under Nigerian law. This Privacy Policy governs all domains, cPanel accounts, Cloud VPS, colocation cabinets, and DNS management services accessible via nyanjahost.com and related regional edge routers.

shield

Our Sovereign Cloud Pledge

We explicitly certify that data designated for our Lagos-Core Datacenter never leaves Nigerian sovereign borders without express written customer consent. Unlike global hyper-scalers that route African customer payloads across Frankfurt, London, or Ashburn, our core cPanel and VPS volumes remain physically and cryptographically hosted inside Nigeria under the jurisdiction of the Nigeria Data Protection Commission (NDPC).

This policy applies to enterprise CIOs, developers, agency partners, domain registrants, and individuals utilizing our self-service or managed compute clusters.

Information We Collect

In rendering sovereign cloud services, NyanjaHost adheres strictly to the Data Minimisation Principle set forth in Section 24 of the Nigeria Data Protection Act 2023. We collect only what is strictly necessary to route traffic, authenticate account administrators, and fulfill statutory telecommunication provisions.

badge Identity & Billing Info

check_circle Full Legal Name / RC or BN Number for Corporate accounts
check_circle Corporate/Personal billing email address & verified phone
check_circle Registered business physical address inside Nigeria or abroad

terminal Technical Telemetry

check_circle Source IPv4/IPv6 address and ASN allocation prefix
check_circle cPanel, SSH, and Client Portal authenticated access logs
check_circle KVM hardware virtualization resource telemetry & disk I/O

verified

Zero Sensitive Personal Data Stored

We NEVER collect, store, or process BVN, card PINs, biometric credentials, or health records.

Strict Standard

Lawful Basis for Processing

Under Part V of the NDPA 2023, every data processing activity executed by NyanjaHost is anchored in an unmistakable legal mandate:

1. Contractual Necessity

Provisioning hosting nodes, issuing cPanel credentials, configuring BGP routes.

NDPA Sec 25(1)(b)

2. Legal & Regulatory Mandates

NiRA WHOIS registries, NCC telecom routing records, FIRS invoice compliance.

NDPA Sec 25(1)(c)

3. Legitimate Operational Interest

Automated mitigation of Layer 3/4 and Layer 7 volumetric DDoS attacks across IXPN.

NDPA Sec 25(1)(f)

Datacenter Data Residency (Lagos DC)

NyanjaHost champions Nigeria's digital sovereignty. We operate compute clusters inside carrier-neutral, ISO 27001-certified Tier-III datacenter facilities situated in Lagos, Nigeria.

Sovereign Route Topology Physical Asset: MDXi MainOne / Rack Centre Ikeja

Cross-Border Routing: Strict 0% Leakage Guarantee

Backbone Redundancy: Equinix MDXi & Medallion

Jurisdiction: Federal Republic of Nigeria

Where a customer voluntarily chooses our optional backup cluster located in our Johannesburg or London point-of-presence (PoP), data transfers comply fully with NDPA Section 41 (Adequacy of Protection and Transfer Instruments).

WHOIS Privacy & Domain Registrant Protection

As an accredited NiRA (Nigeria Internet Registration Association) registrar holding Channel ID #418, NyanjaHost enforces automated privacy shields across all eligible .ng, .com.ng, and global top-level domains (gTLDs).

visibility_off

Automated Redaction

Public WHOIS lookups obfuscate your physical home or office address, personal phone number, and direct contact email address behind a generic privacyprotect.nyanjahost.ng forwarding proxy.

shield_person

Law Enforcement Exceptions

Registrant disclosures occur exclusively upon delivery of a certified, unappealable Court Order issued by a Nigerian Federal High Court or formal subpoena verified by the Economic and Financial Crimes Commission (EFCC) or Nigerian Police Force cybercrime divisions.

Third-Party Disclosures & Payment Gateways

NyanjaHost will never rent, monetize, or broker customer data sets. When sharing data with third-party service providers, it occurs purely to enable automated transaction fulfillment.

Partner	Operational Purpose	Transmitted Payload	Compliance Cert
Paystack Payments Ltd	NGN settlement via Cards, USSD & NIP Transfers	Billing Email, Invoice ID, Amount	PCI-DSS Level 1
NiRA (.ng Registry)	Top-Level Nigerian Domain delegation	Registrant Name, Nameservers	NiRA Registry Policy
cPanel Inc / WebPros	Software License Verification	Primary Node Public IP Address	GDPR / SOC-2

Data Subject Rights (NDPR Art 3)

The Nigeria Data Protection Regulation and NDPA confer inviolable rights upon all users. NyanjaHost provides seamless programmatic and administrative channels to exercise these rights:

download_for_offline

Right of Access

Export full cPanel backups, billing logs, and personal identity records in universal JSON or tar.gz format via our self-serve client dashboard.

Immediate Export

auto_delete

Right to Erasure

Upon service termination, request cryptographic wipe of your dedicated disk partitions and SSD pools in line with DoD 5220.22-M sanitization standards.

Processed < 72 Hours

sync

Right to Portability

Direct domain EPP authorization codes and automated cPanel-to-cPanel server migration transfers are available without penal administrative delays.

Free Instant EPP

timer

Statutory turnaround for formal data subject requests is strictly adhered to within 30 calendar days, as stipulated by Section 34 of the NDPA.

Data Protection Officer (DPO) Contact

NyanjaHost maintains an autonomous Data Protection Office registered with the Nigeria Data Protection Commission. For compliance inquiries, statutory audits, or rights enforcement, reach our certified lead officer directly:

Office of the Data Protection Officer verified

NyanjaHost Cloud Infrastructure Legal Division

Licensed DPCO Monitored Operations

mail dpo@nyanjahost.com

Lagos Office Physical Address

Plot 12, Commercial Block, Ikeja GRA, Lagos State, Nigeria

Supervisory Authority Escalation

Nigeria Data Protection Commission (NDPC) • info@ndpc.gov.ng