Privacypolicy.

01Who we are

Aravus Strategy Partners ("Aravus", "we", "us") is a legal, compliance, and strategic advisory firm based in Lagos, Nigeria. We are the data controller for the personal data described in this policy, which covers this website and any enquiries you make through it.

We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the regulations and guidance issued by the Nigeria Data Protection Commission (NDPC).

02What we collect

We collect only what we need to respond to you and to run this website:

• Contact form: your name, email address, and message, plus your company and area of interest if you choose to provide them.
• Direct contact: the details and content of any email or phone call you make to us.
• Technical data: when you visit, our hosting provider automatically processes your IP address, browser type, and the pages you request, so the site can be delivered and kept secure.

The Compliance Readiness Quiz runs entirely in your browser. Your answers are not stored and are not sent to us. If you click "Contact us" after finishing, your score and number of gaps are added to the contact form, where you can edit or delete them before sending.

We do not use analytics, advertising, or tracking cookies, and we do not collect sensitive personal data through this website.

03How we use it, and why

We use personal data only for the purposes below, each with a lawful basis under the NDPA:

• Responding to your enquiry: because you asked us to, and to take steps at your request before any engagement.
• Providing our services if you engage us: to perform our contract with you.
• Operating and securing this website: our legitimate interest in running a reliable, secure site.
• Meeting legal and regulatory obligations: where the law requires us to keep or disclose information.

We do not sell personal data, and we do not send marketing messages unless you have asked to receive them.

04Who we share it with

We share personal data only with service providers who help us operate, and only as far as they need it:

• Formspree, which delivers contact form submissions to us.
• Vercel, which hosts this website.
• Our email provider, which stores the messages we send and receive.
• Professional advisers, such as auditors or lawyers, under a duty of confidentiality.
• Regulators, courts, or law enforcement, where we are legally required to disclose information.

05International transfers

Some of our service providers, including Formspree and Vercel, are based outside Nigeria, so your data may be processed in other countries such as the United States. Where this happens, we take the steps the NDPA requires to ensure your data remains adequately protected, including relying on our providers' contractual data protection commitments.

06How long we keep it

• Enquiries that do not lead to an engagement: up to 24 months, so we can follow up on your request, then deleted.
• Client records: for as long as our professional and legal obligations require.
• Technical data: for the short periods our hosting provider needs to deliver and secure the site.

07How we protect it

This website is served over an encrypted (HTTPS) connection, and access to enquiries is limited to the people at Aravus who need it to respond. No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to protect your data, and we will notify you and the NDPC of a breach where the law requires.

08Your rights

Under the NDPA you have the right to:

• be informed about how your personal data is used;
• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted, or its use restricted;
• object to our use of your data, including where we rely on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on it.

To exercise any of these rights, email us at contact.aravus@gmail.com. We will respond within the time the law requires. If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission.

09Cookies

This website does not currently set analytics, advertising, or tracking cookies.

When you first visit, we ask whether you accept optional analytics cookies. We will only set them if you accept, and choosing Reject never limits what you can see or do on the site. You can change your choice at any time using "Cookie settings" in the footer.

We store your choice in your browser so we do not have to ask on every visit. It contains no personal data and is not used for tracking, and you can clear it at any time through your browser settings.

10Children

This website and our services are intended for businesses and professionals. We do not knowingly collect personal data from anyone under 18.

11Changes to this policy

We may update this policy as our practices or the law change. The effective date at the top of this page shows when it was last revised.