Privacy Policy

SUDOL Oil and Gas Limited (“SUDOL”) is the controller of personal information submitted through this website. This notice explains that processing in line with the Nigeria Data Protection Act 2023.

What we collect

If you send a business enquiry, we collect the details you choose to provide: your name, company, business email, telephone number, country, enquiry type, product or service, estimated volume, and message. You must confirm that we may use those details to respond. We also keep a record that this confirmation was given.

Staff who sign in to the website backroom have an account: name, email address, a hashed password, and the time of the last sign-in.

Why we use it

Enquiry details are used to reply to you, to carry out due diligence appropriate to a commercial energy discussion, and, where you and SUDOL both wish to continue, to progress that discussion. The lawful basis is your consent, given on the form, and SUDOL’s legitimate interest in responding to business enquiries. Account data is used only to secure and operate the backroom.

We do not sell personal information. We do not use it for advertising profiles. This website is not directed at children.

Email delivery

Enquiry messages and password-reset messages are sent through an email delivery provider (Resend). That provider processes the message, including the recipient and the contents, so it can be delivered. Resend may process this data outside Nigeria. We use it only as a processor for sending email, under its terms, and only for this purpose.

How long we keep it

Enquiry correspondence is kept for as long as needed to handle the enquiry and to meet legal, regulatory, and accounting duties, and is then deleted. Backroom session records expire after seven days. Password-reset links expire after one hour. Invite links expire after seven days.

Cookies and local storage

The public website does not set tracking cookies and does not use analytics. A theme preference may be stored in your browser’s local storage so the site can match your choice on the next visit. That value stays on your device. The backroom sets one httpOnly session cookie after a successful sign-in. It is not available to page scripts.

Your rights

You may ask SUDOL for a copy of your personal information, for a correction, or for deletion, and you may withdraw consent for an enquiry. Withdrawal does not affect processing that already happened. You may also complain to the Nigeria Data Protection Commission (https://ndpc.gov.ng).

Send privacy requests to the email address published on the contact page. We may need to confirm that the request comes from you.

Security

Passwords are stored only as salted hashes. Backroom sessions are httpOnly cookies. Enquiry forms are rate-limited. No method of transmission or storage is perfectly secure.