Exploits Mediatech
Legal

Privacy Policy

How Exploits Mediatech collects, uses, shares and protects personal data when you use our website, apps, and social media and messaging integrations.

Effective date: October 30, 2026  ยท  Last updated: October 30, 2026

1.Who we are

Exploits Mediatech ("Exploits Mediatech", "we", "us", "our") is a digital solutions company based in Lagos, Nigeria. We build AI solutions, SaaS and software products, web and mobile applications, and operations automation for local and international clients. We are the data controller for the personal data described in this policy, unless we tell you otherwise.

This policy applies to exploitsmediatech.com, our client and admin portals, and the apps and tools we operate, including our social media and messaging integrations. It does not cover third-party websites that we link to.

2.Data we collect

CategoryExamplesSource
Contact and enquiry dataName, email address, phone number, project type and the message you sendYou, through our contact and project inquiry forms, email or WhatsApp
Client and account dataBusiness name, billing details, domains, hosting and service records, invoices and receiptsYou, when you become a client
Technical and usage dataIP address, browser and device type, pages viewed, referring page, approximate locationAutomatically, through cookies and similar technologies
Messaging and social media dataPublic profile name and ID, message content and timestamps, comments and replies sent to our business accountsMeta platforms (Facebook, Instagram, WhatsApp) and similar services, as described in section 3

We do not intentionally collect sensitive personal data (such as health, biometric or financial account credentials) through our website. Please do not send it to us in free-text messages.

3.Social media and messaging platforms

We operate tools that help manage and respond on our business Facebook Pages, Instagram professional accounts and WhatsApp Business number. When you message, comment on, or otherwise interact with those accounts, the platform shares limited information with us through its official APIs, such as your public profile name, user or sender ID, the content of your message or comment, and timestamps.

  • We use this data only to read, respond to, and manage conversations and content on our own business accounts.
  • We do not sell this data, and we do not use it for advertising profiling or to build unrelated user profiles.
  • Where we receive data through Meta products, our handling of it is also subject to the Meta Platform Terms and Developer Policies.
  • You can ask us to delete data we hold about you from these platforms at any time. See our Data Deletion page.

4.How and why we use your data

  • To respond to you and provide quotes, proposals and support (performance of a contract or steps before entering one).
  • To deliver our services to clients, including hosting, domains, invoicing and renewals (performance of a contract).
  • To run and secure our website, prevent spam and abuse, and fix problems (legitimate interests).
  • To understand how our site is used and improve it, using analytics (consent or legitimate interests, depending on your location).
  • To meet legal obligations, such as tax and accounting rules.
  • To send updates or newsletters, only where you have asked for them or consented. You can unsubscribe at any time.

5.Who we share data with

We do not sell your personal data. We share it only with service providers who process it on our behalf and under appropriate safeguards, and where the law requires it:

  • Hosting and infrastructure providers that run our website, servers and email.
  • Analytics and tag services, including Google Tag Manager and Microsoft Clarity, which help us understand site usage.
  • Security services, including Cloudflare Turnstile, which protects our forms from bots.
  • Database and cloud services, including Google Firebase, used by parts of our site and client tools.
  • Messaging and social platforms, such as Meta, when you interact with us there.
  • Professional advisers, regulators and authorities, where required by law or to protect our rights.

If we ever sell or restructure the business, personal data may be transferred to the successor, who must honour this policy.

6.How long we keep data

We keep personal data only as long as needed for the purpose it was collected, and for as long as the law requires.

  • Enquiries and messages that do not lead to a project: generally up to 24 months.
  • Client and billing records: for the duration of the relationship and the period required by tax and accounting law.
  • Social media and messaging data: kept while it is needed to manage the conversation, and deleted on a verified request.
  • Analytics data: according to the retention settings of the analytics provider.

7.How we protect data

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, bot protection on forms and limiting access to people who need it. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your rights, we will notify you and the relevant authority as the law requires.

8.Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you and receive a copy;
  • correct inaccurate or incomplete data;
  • delete your data ("right to erasure");
  • restrict or object to certain processing, including direct marketing;
  • withdraw consent at any time, without affecting earlier processing;
  • data portability, where it applies;
  • lodge a complaint with a data protection authority.

Nigeria (Nigeria Data Protection Act 2023)

You have the rights above under the Nigeria Data Protection Act 2023. You may complain to the Nigeria Data Protection Commission (NDPC).

European Economic Area and United Kingdom (GDPR)

Our legal bases are described in section 4. You may complain to your local supervisory authority.

California (CCPA/CPRA)

California residents may request to know, delete or correct personal information we hold, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioural advertising, and we will not discriminate against you for exercising these rights.

To exercise any right, email projects@exploitsmediatech.com. To delete your data, use our Data Deletion page. We aim to respond within 30 days and may need to verify your identity first.

9.International transfers

We are based in Nigeria, and our service providers may process data in other countries, including where their servers are located. Where we transfer personal data internationally, we take steps to ensure it remains protected as required by applicable law, for example through contractual safeguards.

10.Children

Our services are not directed to children under 13 (or the higher age required in your country), and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

11.Cookies and changes to this policy

Our website uses cookies and similar technologies for analytics and security. You can block or delete cookies in your browser settings, though some features may not work properly.

We may update this policy from time to time. The "Last updated" date above shows the latest version, and we will take reasonable steps to notify you of material changes.

12.Contact us

Exploits Mediatech
Lagos, Nigeria
Email: projects@exploitsmediatech.com
Phone / WhatsApp: +234 706 119 6352
Website: exploitsmediatech.com

Request data deletion