Privacy Policy

1. Introduction

Welcome to Lakesoft Solutions. This Privacy Policy describes how Lakesoft Solutions, a trading name of Lakesoft Technologies Limited (RC 9454230), a company registered in the Federal Republic of Nigeria under the Companies and Allied Matters Act, 2020 ("we," "us," or "our") collects, uses, shares, and protects personal information when you visit our website (www.lakesoft-solutions.com), use our software products, or interact with our services.

We collect and process your personal data only where we have a lawful basis to do so. For non-essential cookies and marketing activities, we rely on your explicit consent, which you may provide or withdraw at any time through our Cookie Preference Centre. For service delivery, we rely on contractual necessity. You may withdraw consent at any time without affecting the lawfulness of processing already carried out. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us, including:

Category	Examples
Account Information	Name, email address, username, password, phone number
Payment Information	Billing address, payment method (processed securely by third parties), not card details
Profile Information	Company name, job title, preferences, profile picture
Communication Data	Support tickets, emails, survey responses, feedback
Order Information	Purchase history, download records, license keys

2.2 Information Automatically Collected

When you use our website or software, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns
• Location Data: General geographic location based on IP address
• Software Telemetry: Performance metrics, crash reports, feature usage
• Log Data: Access times, error logs, referrer URLs

2.3 Information from Third Parties

We may receive information about you from:

• Payment processors (transaction details, payment status)
• Analytics providers (website usage statistics)
• Marketing partners (with your consent)
• Social media platforms (if you connect your account)

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Delivery

• Process orders and deliver purchased software
• Provide license keys and download access
• Manage your account and preferences
• Provide customer support and technical assistance
• Send transactional emails (order confirmations, receipts, updates)

3.2 Service Improvement

• Analyze usage patterns to improve our products
• Identify and fix bugs and technical issues
• Develop new features and functionality
• Conduct research and analytics
• Personalize user experience

3.3 Communication

• Send important notices about your account or services
• Respond to your inquiries and support requests
• Send marketing communications (with your consent)
• Provide product updates and announcements
• Conduct surveys and request feedback

3.4 Security and Compliance

• Detect and prevent fraud, abuse, and security incidents
• Enforce our Terms of Service and policies
• Comply with legal obligations and regulations
• Protect our rights, property, and safety
• Verify identity and prevent unauthorized access

3.5 Lawful Basis for Processing

In accordance with the Nigeria Data Protection Act 2023 (NDPA), GDPR, and other applicable regulations, we process your personal data under the following lawful bases:

Processing Activity	Lawful Basis
Account creation and service delivery	Contract performance
Payment processing and billing	Contract performance + Legal obligation
Security and fraud prevention	Legitimate interest
Marketing communications	Consent (explicit opt-in only)
Analytics and product improvement	Legitimate interest
Legal compliance and tax records	Legal obligation
Customer support communications	Contract performance + Legitimate interest
Software telemetry and crash reports	Legitimate interest (with opt-out option)

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us with:

• Payment processing (Flutterwave, KUDA Bank, etc.)
• Email delivery (Google Workspace / Gmail)
• Analytics (Google Analytics)
• Customer support tools

These providers are bound by confidentiality agreements and can only use your information as instructed by us.

4.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal process or government requests
• Enforce our Terms of Service
• Protect against fraud or security threats
• Protect our rights, property, or safety
• Protect the rights and safety of our users

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website of any change in ownership.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, such as when integrating with third-party services or participating in partner programs.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device that help us improve your experience on our website. We use both session cookies (temporary) and persistent cookies (remain after you close your browser).

5.2 Types of Cookies We Use

• Essential Cookies: Required for website functionality (login, shopping cart)
• Performance Cookies: Collect anonymous usage statistics
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track ad effectiveness (with your consent)

5.3 Cookie Management

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block all cookies (not recommended)
• Clear cookies when closing the browser

6. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: SSL/TLS encryption for data in transit
• Secure Storage: Encrypted databases with access controls
• Authentication: Multi-factor authentication options
• Regular Audits: Security assessments and penetration testing
• Employee Training: Staff trained on data protection practices
• Access Controls: Limited access on a need-to-know basis
• Monitoring: 24/7 security monitoring and incident response

While we take reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6.1 Data Breach Response

In the event of a personal data breach, we will:

• Notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of the breach, where feasible
• Notify affected users within 7 working days where the breach is likely to result in high risk to their rights and freedoms
• Notify relevant EU supervisory authorities within 72 hours where EU residents' data is affected
• Notify affected California residents without unreasonable delay where California personal information is compromised
• Document all breaches internally in our breach register, regardless of whether external notification is required
• Take immediate remediation steps to contain and mitigate the impact of any breach

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records

Typical retention periods:

• Account Data: Duration of account plus 2 years
• Transaction Records: 7 years (legal requirement)
• Support Tickets: 3 years
• Marketing Data: Until you unsubscribe plus 30 days
• Analytics Data: 26 months

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

8.1 Access and Portability

• Request a copy of your personal data
• Receive your data in a machine-readable format
• Transfer your data to another service provider

8.2 Correction and Update

• Update inaccurate or incomplete information
• Correct errors in your account data

8.3 Deletion and Erasure

• Request deletion of your personal data
• Close your account permanently

8.4 Restriction and Objection

• Restrict how we process your data
• Object to certain types of processing
• Opt out of marketing communications

8.5 How to Exercise Your Rights

To exercise any of these rights:

1. Log in to your account and access Account Settings
2. Email us at dpo@lakesoft-solutions.com with your request
3. Contact our Data Protection Officer (see contact details below)

We will acknowledge your request within 72 hours and respond fully within 30 days. In complex cases, we may extend this by a further 30 days with prior written notification. Nigerian users may also lodge complaints directly with the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng. EU residents may contact their local supervisory authority.

9. Children's Privacy

Our services are not directed to children under 13 years of age (or under 16 in the European Union, and as defined under the Nigeria Data Protection Act 2023 which recognises special protections for minors in digital services). We do not knowingly collect personal information from children.

If we discover that we have collected information from a child without parental consent, we will delete that information immediately. If you believe we have collected information from a child, please contact us at dpo@lakesoft-solutions.com.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. As a Nigerian company serving global users, we ensure adequate protection of your data through:

• Standard Contractual Clauses (SCCs) approved by the European Commission for transfers involving EU personal data
• Adequacy decisions where the destination country has been recognised as providing adequate data protection
• Binding Corporate Rules where required for intra-group transfers
• Consent-based transfers where you have explicitly agreed to the transfer after being informed of the risks
• Adequate security measures including encryption during all cross-border data transfers
• Compliance with the Nigeria Data Protection Act 2023 (NDPA) and its General Application and Implementation Directive (GAID 2025), GDPR (EU), CCPA (California), and other applicable data protection regulations

For transfers of Nigerian personal data abroad, we comply with the cross-border transfer provisions of the Nigeria Data Protection Act 2023 (NDPA) and its GAID 2025, including maintaining a record of countries where data is transferred and the applicable safeguards in each jurisdiction.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending email notifications to registered users
• Displaying a notice on our website

We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes take effect constitutes acceptance of the revised policy.

12. Contact Us