Privacy Policy

1. Who we are

Novacraft is a software engineering and design studio. Our registered address is Lagos, Nigeria, with operational presence in Miami (USA), Nairobi (Kenya), and Accra (Ghana). References to "Novacraft", "we", "us", or "our" in this policy refer to this entity.

Questions about this policy can be directed to privacy@contact.novacraft.africa.

2. What we collect

We only collect information you voluntarily give us. This includes:

• Contact information — name, email address, phone number — when you submit a project enquiry or register for the Academy.
• Project details — budget, timeline, brief, reference links — when you use our contact form.
• Academy registration data — preferred track, experience level, cohort preference — when you register for a training programme.
• Usage data — pages visited, time on site, browser and device type — collected automatically via analytics. We do not use tracking cookies or fingerprinting.

3. How we use your information

We use your information to:

• Respond to project enquiries and quote requests.
• Manage Academy cohort enrolment and send cohort communications.
• Improve the content and performance of this website.
• Comply with legal obligations where applicable.

We do not sell, rent, or trade your personal information to third parties. We do not use your data for profiling or automated decision-making.

4. Legal basis for processing (GDPR)

Where GDPR applies, we process personal data on the following bases:

• Contract performance — processing necessary to respond to your enquiry or deliver Academy services.
• Legitimate interests — site analytics to improve our offering, where these interests are not overridden by your rights.
• Consent — where you have explicitly opted in to receive marketing communications.

5. Data retention

We retain enquiry and contact data for up to 24 months after last contact. Academy enrolment records are kept for 5 years for certification purposes. You may request deletion at any time (see section 8).

6. Cookies and analytics

This website uses privacy-respecting analytics. We do not use third-party advertising trackers or social media pixels. Session data is anonymised and aggregated — no individual is identified.

Strictly necessary cookies (session management, security) are set automatically. No consent is required for these. No marketing or tracking cookies are set.

7. Third-party services

We use a small number of third-party services to operate this website:

• Vercel — hosting and edge network. Data processed in accordance with Vercel's Privacy Policy.
• Email delivery — contact form submissions are forwarded via a transactional email provider. Your email is not added to any mailing list without consent.

We do not use Google Analytics, Meta Pixel, or similar mass-surveillance tools.

8. Your rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your data where there is no overriding legal obligation to retain it.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, email privacy@contact.novacraft.africa. We will respond within 30 days.

9. Security

We take the security of your data seriously. Our systems are hosted on SOC 2-compliant infrastructure, communications are encrypted in transit (TLS 1.3), and access to personal data is restricted to personnel who need it to carry out their responsibilities.

10. Changes to this policy

We may update this policy from time to time. Material changes will be noted at the top of this page with a revised date. Continued use of the site after any change constitutes acceptance of the updated policy.