Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Last Updated: January 29, 2026 | Effective Date: January 1, 2026
Introduction
EFZ Solutions Ltd ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, store, and share your data when you:
- Visit our website (efzsolutions.com)
- Register for the BYTECH program
- Apply for partnership opportunities
- Use our services or contact us
By using our services, you agree to the collection and use of information in accordance with this policy. We comply with the General Data Protection Regulation (GDPR), UK Data Protection Act 2018, and Nigeria Data Protection Regulation (NDPR) 2019.
Information We Collect
Personal Information
When you register for our BYTECH program or use our services, we collect: name, email address, phone number, date of birth, educational background, employment history, UK Right to Work share code (for UK applicants), portfolio URLs, and uploaded documents (CV, certifications).
Automatically Collected Information
We automatically collect certain information when you visit our website: IP address, browser type, device information, pages visited, time spent on pages, and referral sources.
Cookies and Tracking
We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. See our Cookie Policy for details.
How We Use Your Information
Service Delivery
To process your BYTECH program application, manage your enrollment, provide training and mentorship, facilitate job placements, and communicate program updates.
Communication
To send you important notifications about your application status, program schedules, partnership opportunities, marketing communications (with your consent), and respond to your inquiries.
Improvement and Analytics
To analyze website usage, improve our services, personalize your experience, conduct research and development, and ensure platform security.
Data Storage and Security
Where We Store Data
Your data is stored on secure servers provided by Supabase (PostgreSQL database) with data centers in the EU and US. We implement industry-standard encryption both in transit (TLS/SSL) and at rest.
Security Measures
We employ: encrypted database connections, role-based access control, regular security audits, automated backup systems, firewall protection, and intrusion detection systems.
Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, typically: Active candidates - duration of program + 2 years; Inactive accounts - 3 years from last activity; Job placement records - 5 years for compliance.
Your Rights (GDPR Compliant)
Access and Portability
You have the right to request a copy of your personal data in a structured, machine-readable format.
Rectification
You can update or correct your personal information at any time through your account settings or by contacting us.
Erasure ("Right to be Forgotten")
You can request deletion of your personal data, subject to legal obligations we may have to retain certain information.
Restriction and Objection
You can restrict or object to certain processing activities, including marketing communications and automated decision-making.
Withdraw Consent
Where processing is based on consent, you can withdraw it at any time without affecting prior lawful processing.
Data Sharing and Third Parties
Partner Companies
We share candidate profiles with vetted partner companies for job placement purposes, only with your explicit consent.
Service Providers
We work with trusted third-party service providers: Supabase (database hosting), SendGrid/Resend (email delivery), Vercel (website hosting), and cloud storage providers. All providers are GDPR compliant and bound by data processing agreements.
Legal Requirements
We may disclose information when required by law, to protect our rights, prevent fraud, or ensure safety.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity with prior notice.
International Data Transfers
Cross-Border Processing
As we operate in Nigeria and the UK, your data may be transferred between these jurisdictions. We ensure adequate safeguards through: Standard Contractual Clauses (SCCs), adequacy decisions by relevant authorities, and encryption during transfer.
UK-Specific Rights
For UK residents, we comply with the UK GDPR and Data Protection Act 2018. You can contact the Information Commissioner's Office (ICO) for concerns.
Nigerian Data Protection
We comply with the Nigeria Data Protection Regulation (NDPR) 2019 and work with registered data protection compliance organizations.
Children's Privacy
Our BYTECH program is designed for individuals aged 18 and above. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any significant changes by:
- Posting the updated policy on our website
- Sending an email notification to registered users
- Displaying a prominent notice on our platform
Your continued use of our services after changes are posted constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Data Protection Officer
Email: privacy@efzsolutions.com
Phone: +234 (0) 800 EFZ DATA
UK Office
London, United Kingdom
Email: uk@efzsolutions.com
Nigeria Office
Lagos, Nigeria (HQ)
Email: nigeria@efzsolutions.com
Response Time
We aim to respond to all privacy inquiries within 30 days.