Legal
Privacy notice
Last updated: 30 October 2026
This notice explains how Revafort Ltd (RC 9302596), a company registered in Nigeria ("Revafort", "we", "us"), collects and uses personal data when you visit revafort.com or contact us. We are the data controller for this information under the Nigeria Data Protection Act 2023 ("NDPA").
What we collect
- Enquiry details you submit through the contact form or by email: your name, work email, company, the service you are interested in and anything you write in your message.
- Technical and security data needed to deliver and protect the website: IP address, browser and device information, and request logs. These are processed by our hosting and security provider, Cloudflare, including its Turnstile check that helps us block automated spam.
We do not use advertising or analytics trackers, and we do not set cookies of our own. Cloudflare may set strictly necessary security cookies to protect the site.
Why we use it and our lawful basis
| Purpose | Lawful basis (NDPA s.25) |
|---|---|
| Replying to your enquiry and arranging a scoping call | Steps you ask us to take before entering into a contract; your consent to be contacted, given when you submit the form |
| Keeping the website secure and preventing spam and abuse | Our legitimate interests in operating a secure service |
| Keeping records we are required to keep | Compliance with a legal obligation |
We do not sell your personal data, use it for automated decision-making, or add you to marketing lists without asking you first.
Who we share it with
- Cloudflare, Inc. — website hosting, security and spam protection.
- Microsoft Corporation — business email (Microsoft 365), where enquiries are delivered and stored.
- Professional advisers, regulators or law enforcement, only where the law requires it or to protect our legal rights.
These providers act on our instructions and are bound by contractual data protection terms.
International transfers
Our service providers may process data on servers outside Nigeria. Where this happens, we rely on the safeguards permitted by Part VIII of the NDPA, such as the providers' contractual data protection commitments.
How long we keep it
- Enquiries that do not lead to an engagement: deleted within 12 months of our last contact.
- Enquiries that lead to an engagement: kept with the client record for as long as the contract and our legal obligations require.
- Security and request logs: kept by Cloudflare for its standard, limited retention periods.
How we protect it
Data is encrypted in transit, access is limited to the people who need it and protected with multi-factor authentication, and the form only collects what we need to reply to you.
Your rights
Under the NDPA you can ask us to:
- give you a copy of the personal data we hold about you;
- correct inaccurate or incomplete data;
- delete your data, or restrict how we use it;
- stop processing your data where we rely on legitimate interests;
- provide your data in a portable format; and
- withdraw your consent at any time (this does not affect processing already carried out).
To exercise any of these rights, email hello@revafort.com. We will respond within the time limits set by the NDPA. If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
Changes to this notice
We may update this notice from time to time. The date at the top shows when it last changed.
Contact
Revafort Ltd, Lagos, Nigeria · hello@revafort.com