Privacy Policy & Data Protection

1. Overview & Scope

Diatom Technologies Ltd ("Diatom", "we", "our", or "us") respects your corporate and personal privacy. This Privacy Policy details how we collect, process, and secure information gathered through our website (diatomtechnologiesltd.com.ng), proposal forms, and direct enterprise engagements.

We operate in compliance with the Nigeria Data Protection Act (NDPA 2023) and the Nigeria Data Protection Regulation (NDPR).

2. Information We Collect

We only collect data necessary to prepare technical proposals, communicate with prospective business clients, and provide agreed services:

• Contact Information: Full name, organizational role, institutional email address, and direct telephone/WhatsApp number.
• Project Specifications: System requirements, location counts, user numbers, and technical briefs submitted via proposal forms.
• Technical Logging: IP addresses, browser types, and standard access logs strictly for server security, intrusion prevention, and performance diagnostics.

3. Customer-Owned Hosting & Data Sovereignty

A core commercial foundation of Diatom Technologies Ltd is Data Sovereignty. For proprietary software deployments including Mivas Hotels, Mivas Estates, and Mivas Schools:

• The system database is installed directly on your organization's designated server or cloud environment.
• Diatom does not sell, broker, or monetize your hotel guest records, school pupil grades, or estate resident logs.
• Your organization remains the exclusive Data Controller of your operational records.

4. How We Use Information

We process collected information solely for legitimate business operations:

• Generating technical feasibility proposals and software scope documentation.
• Coordinating on-site deployment surveys, network installations, or staff orientation.
• Transmitting critical security notices and service status updates.

5. Data Retention & Security Measures

We apply industry-standard security headers (HSTS, X-Content-Type-Options, strict referrer policies), encrypted SSL/TLS transport, and restricted administrative access to safeguard communication channels. Inquiry data is retained only for the duration required to evaluate business engagements.

6. Contact Data Protection Desk

For inquiries concerning your data rights or to request data removal from our inquiry log, contact our compliance desk: