Privacy Policy

Gwer Intelligent Tech Solutions (GITS) is a digital software studio providing custom software, web experiences, AI automation, internal tools, and API integrations. We are a remote-first agency based in Abuja, Nigeria, serving clients worldwide.

For data protection purposes, GITS is the data controller responsible for your personal data collected through this website.

We only collect data you provide directly through our contact form:

• Full name
• Email address
• Company or organisation name (optional)
• Your message or enquiry content
• Any attachments or additional details you choose to include

We do not use analytics, advertising trackers, or cookies of any kind. We do not collect IP addresses, device fingerprints, or behavioural data.

Contact form submissions are used solely to:

• Respond to your enquiry, quote request, or project brief
• Follow up on discussions about working together
• Maintain a record of our pre-contractual communications

We do not use your data for marketing without explicit consent, and we never sell, rent, or trade your personal data to any third party.

Under GDPR Article 6, we process your data on the following grounds:

• Legitimate interests (Art. 6(1)(f)) — responding to a contact request you initiated
• Pre-contractual necessity (Art. 6(1)(b)) — where your enquiry relates to a service agreement
• Consent (Art. 6(1)(a)) — where you have explicitly opted in to further communication

We retain contact form submissions for a maximum of 24 months from receipt, or for the duration of any business relationship — whichever is longer.

We do not sell your data. Your information may only be accessed by:

• GITS team members directly involved in responding to your enquiry
• Email service providers (e.g. Google Workspace) bound by data processing agreements
• Regulatory or law enforcement bodies if required by applicable law

As a data subject, you have the following rights:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data ('right to be forgotten')
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is consent-based, withdraw at any time

To exercise any right, contact [email protected]. We respond within 30 days per GDPR Article 12.

We take reasonable technical and organisational measures to protect your data — including encrypted communications, access controls, and regular review of our practices.

In the event of a breach likely to affect your rights, we will notify affected individuals within 72 hours as required by GDPR Article 33.

Our services are not directed at individuals under 16. We do not knowingly collect data from minors. If you believe we hold data from a child, contact [email protected] and we will delete it promptly.

We may update this policy from time to time. The "Last updated" date always reflects the most recent revision. Continued use of our website after changes constitutes acceptance.

For all privacy enquiries, data subject requests, or concerns:

We acknowledge all requests within 5 business days and resolve them within 30 days.