Source: https://aquasops.com/privacy Last updated: 2026-10-29 > What personal data the website and the service collect, why, who handles it, how long we keep it and your rights under Nigerian law. # Privacy notice This notice explains what personal data AquaOps ("we", "us") collects through this website and through the AquaOps service, why we collect it, who else handles it, how long we keep it and what rights you have. We handle personal data under the Nigeria Data Protection Act 2023 ("NDPA") and the rules of the Nigeria Data Protection Commission ("NDPC"). We have tried to write it in plain words. ## 1\. Who is responsible for your data - **This website and our own sales and support:** AquaOps is the data controller. Contact us at [support@aquasops.com](mailto:support@aquasops.com). - **The AquaOps service (the app, the portal and the phone apps):** each company that uses AquaOps ("the company", usually a water treatment company) is the controller of the data of its own clients, staff and technicians. We are the processor: we store and process that data for the company, on its instructions, under our [terms](https://aquasops.com/terms). If you are a client or a technician of a company, please ask that company first about your data; we will help it answer. For the sign-in account itself (your login, security, devices and sessions) we are also responsible for keeping it safe. ## 2\. This website ### What we collect - **The contact or demo form.** Your name, work email and company are required. Your phone or WhatsApp number, team size, what you work with and a message are optional. We also save which page you used the form on and what you asked for (a demo, a question or the early-access list). - **Server logs.** Like every website, the server that sends you this page sees your IP address, the pages requested, the time and your browser type. Our hosting keeps these in ordinary logs for running and protecting the site. - **Protection against spam.** When you send the form we briefly use your email address and network address to limit repeated sends. The form also has a hidden field and a timer that a person never triggers; they only help us ignore automated sends. ### Cookies and similar storage **Essential:** your choice of light or dark appearance and your analytics choice are kept in your browser's local storage (`aq-theme` and `aq-consent`). They stay on your device, are not cookies and are not sent to us. **Measuring visits (Google Analytics):** we use Google Analytics, provided by Google, to count which pages are visited and whether the contact form is sent or the Android app is downloaded, so we can improve the pages. **Without your consent** this is anonymous and cookieless: no analytics cookie is set and no identifier is stored in your browser, but, as with any website that loads Google's script, your browser still sends Google ordinary technical details such as your IP address, browser type and the page visited, and Google uses them to count visits and estimate the rest. **If you press Accept** in the bar at the bottom of the page, Google Analytics also sets cookies so it can recognise a returning visitor and count visits more accurately. We switch off advertising features, Google signals and user identifiers, and we ask Google to anonymise IP addresses. Google may process this data outside Nigeria. **Changing your mind:** press "Cookie settings" at the bottom of any page to see the choice again. "No thanks" keeps measurement cookieless and removes any Google Analytics cookies from this website. We use no advertising or tracking cookies of any kind. (The signed-in service uses cookies that it needs to work; see section 3.) ### Why we use it - To answer your message, give you a demo and send you one confirmation email: you ask us to, and it is needed to take steps at your request. It is also in our legitimate interest to run our business. - To keep the website and the form secure and free of spam: our legitimate interest. - To meet legal duties, for example answering a court or the NDPC. We do not sell your details, we do not use them for advertising and we do not send newsletters from this form. After the confirmation we write to you only about your message. If we want to use your details for anything else, we will ask you first. ## 3\. The AquaOps service This section applies if you use the service, or a company uses it for you. ### What the service holds - **Company staff and technicians:** name, work email, phone, role, profile picture, sign-in records (time, device type and network address), sessions, two-step verification setup, and a log of what each person changed. - **A company's clients:** name, email, phone, sites and addresses, the systems at each site, jobs and visits, readings, photos, notes, a signature where the company asks for one, invoices, quotes and payments, and support tickets and messages. A company may also hold sensitive fields such as a tax number; the service limits who in the company can see them. - **Technician location.** The phone shares the technician's position while they work a job (while the job is in a status the company has set for tracking) and, if the company turns it on, during the working days and hours that it chooses. The phone asks for location permission and the technician can always see that sharing is on. The company's office can see the position, and can share an arrival link with the client. That link shows only the technician's first name, a map position while they are on the way and an estimated arrival, and the company can turn it off at any time. Positions that look false or impossible are flagged and ignored. The company, as controller, decides whether and when to track its people, and must tell them and have a lawful basis for it. - **Payments.** When a client pays online, the card or bank details are entered at Paystack, not with us; we do not receive or store card numbers. We keep the amount, the reference, the status and who it was for. - **Cookies in the service.** The signed-in service uses HttpOnly cookies to keep you signed in and to protect forms (strictly necessary) and a cookie that remembers light or dark appearance. It uses no advertising cookies. ### Why we use it To provide the service the company has asked for, to keep accounts secure, to prevent fraud and abuse, to send messages the service needs (invitations, receipts, reminders, security alerts) and to meet legal duties. Messages to a company's clients are sent for the company, in its name. ## 4\. Who else handles personal data We use trusted outside services to run the website and the service, for example for payments, email, maps and hosting. They may use data only to provide their service to us, and we share only what each one needs. We may also share data where the law requires. Some providers process data outside Nigeria, and when we move data abroad we use the safeguards the NDPA allows. Ask us at [support@aquasops.com](mailto:support@aquasops.com) if you want to know more. ## 5\. How long we keep data - **Contact form messages:** while we are dealing with your request and, if you do not become a customer, for up to 24 months after our last contact. Then we delete or anonymise them. You can ask us to delete them sooner. - **Server logs:** a short time, for running and protecting the site. - **Service data:** for as long as the company uses the service, and then as the company instructs. Records are archived rather than destroyed while a company is active, and a person who leaves a company or closes their account is marked as removed. Security logs, invoices and money records may be kept longer where the law or fair record keeping requires it. - **Location history:** kept as part of the job record for the company. Clients see only the live arrival link. ## 6\. Keeping data safe Each company's data is kept apart from every other company's, access is by role, connections are encrypted, passwords are stored only as hashes, secrets are stored encrypted and changes are written to a log that cannot be edited. Read [how we protect data](https://aquasops.com/security). ## 7\. Your rights Under the NDPA you have the right to: be informed about how your data is used; see the data we hold about you and get a copy; have wrong data corrected; have data deleted where there is no reason to keep it; restrict or object to some uses; receive your data in a common format; withdraw consent you gave (this does not undo what was done before); and not be subject only to an automated decision with major effects (we make none). To use a right, write to [support@aquasops.com](mailto:support@aquasops.com). We may ask you to prove who you are, and we reply within one month. If your data is held for a company, we will pass your request to that company or help it answer. You can also complain to the Nigeria Data Protection Commission ([ndpc.gov.ng](https://ndpc.gov.ng)). We would like the chance to put it right first. ## 8\. Children The website and the service are for businesses and are not meant for anyone under 18. We do not knowingly collect data from children. ## 9\. Changes and contact We will update this notice when what we do changes. If a change matters to you, for example analytics on this website, we will say so on the page before it starts. Questions or requests: [support@aquasops.com](mailto:support@aquasops.com). Governing law: the laws of the Federal Republic of Nigeria.