Privacy Policy

Version 2026-10-02. This policy explains how iDeskHubs Ltd (RC 8912360), trading as iDeskHubs, of Port Harcourt, Rivers State, Nigeria ("we", "us") collects and uses personal data when you visit ideskhubs.com, use the client area or buy our Services. We are the data controller for this data and we comply with the Nigeria Data Protection Act 2023 (NDPA) and the regulations of the Nigeria Data Protection Commission (NDPC).

1. What we collect

• Account and contact details: name, email, phone, company, job role, password (stored only as a one-way hash).
• Billing details: invoices, amounts, payment references, tax identification numbers you give us, purchase order numbers. Card details are entered on Flutterwave's page; we never receive your full card number.
• Domain registrant details: name, organisation, postal address, email and phone of the domain owner.
• Enquiries and support: messages, tickets, chat conversations and form submissions.
• Technical data: IP address, browser and device type, pages visited and timestamps, collected through server logs and essential cookies.
• Consent records: the version of our terms you accepted, when, and from which IP address.

2. Why we use it, and our lawful basis

• To provide the Services you order, including registering domains, processing payments, sending invoices and receipts, and support: performance of a contract.
• To keep tax and accounting records and respond to lawful requests: legal obligation.
• To secure our systems, prevent fraud and enforce our terms: legitimate interests.
• To tell you about product updates and offers: your consent, which you can withdraw at any time using the link in our emails or by contacting us.

3. Who we share it with

We do not sell personal data. We share it only with service providers who process it for us under contract, and where the law requires:

• Flutterwave (payment processing, Nigeria and other jurisdictions).
• Porkbun LLC (domain registrar, United States), domain registries and, where the extension does not support privacy, the public WHOIS/RDAP directory.
• Cloud hosting and database providers, including our server host in the European Union and MongoDB Atlas.
• Email delivery providers used to send account, invoice and support emails.
• Professional advisers, auditors, tax authorities, regulators and law enforcement where required by law.

4. International transfers

Some providers above store or process data outside Nigeria, including in the United States and the European Union. We transfer data only where the NDPA permits it: to countries with adequate protection, under contractual safeguards with the recipient, or where the transfer is necessary to perform our contract with you (for example, registering a domain requires sending registrant details to the registrar and registry).

5. How long we keep it

• Account and service data: for as long as you have an account or active Service, and up to 30 days afterwards for export, then deleted.
• Invoices, payment and tax records: at least 6 years, as required by Nigerian tax law.
• Domain registrant records: for the life of the registration and as long as the registrar and ICANN require afterwards.
• Enquiries and leads with no purchase: up to 2 years from the last contact.
• Server security logs: up to 12 months.

6. Your rights

Under the NDPA you can ask us to: give you a copy of your personal data; correct it; delete it; restrict or object to how we use it; give it to you in a portable format; and withdraw consent at any time (without affecting earlier processing). Email privacy@ideskhubs.com. We respond within 30 days and may need to verify your identity. Some data cannot be deleted while we must keep it by law. If you are not satisfied, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

7. Security

We use encryption in transit (HTTPS), hashed passwords, access controls limited to staff who need them, signed payment notifications and regular updates. If a personal data breach is likely to put your rights at risk, we will notify the NDPC within 72 hours of becoming aware of it and tell you without undue delay.

8. Cookies

We use essential cookies to keep you signed in and to protect forms against abuse. These are needed for the site to work and do not require consent. If we add analytics or marketing cookies, we will ask for your consent first and update this policy.

9. Children

Our Services are for businesses and are not directed at children under 18. We do not knowingly collect their data.

10. Data Protection Officer and contact

Data Protection Officer: privacy@ideskhubs.com, Port Harcourt, Rivers State, Nigeria.

11. Changes

We will post any changes here with a new version and date, and notify you by email of material changes.

Version 2026-10-02 · Last updated 2 October 2026