Privacy Policy

1. Who we are

PromptHall.space ("PromptHall", "we", "us") provides a managed website monitoring service. We watch a client’s website from the outside, explain problems in plain language and re-check after a fix. This policy explains what personal data we collect, why, and the choices you have. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA).

Operated by: [Registered business name], [Registered address], Nigeria. Contact: [privacy email address].

2. Who this policy covers

• Visitors to our website.
• People who contact us or sign up for the 14-day free pilot.
• Clients who use the paid monitoring service, and their named contacts.

3. What we collect

• Contact details: name, business name, email address and phone number, given when you enquire, sign up or contact us.
• Account and service details: website address, pages to monitor, chosen package, alert and report preferences, and your notes or requests.
• Billing details: invoice records and payment status. Card or bank details are handled by our payment provider, and we do not store full card numbers.
• Monitoring data: results of our checks on your public website, such as availability, response times, SSL status, page errors and broken links. We run these checks from outside the site and do not log in or access hosting, servers or code.
• Website usage data: basic technical data when you visit our site, such as IP address, device and browser type, pages visited and time of visit, collected through cookies or similar tools.
• Communications: emails and messages you send us, and our replies and alerts.

We do not intentionally collect personal data about your own website’s visitors. If your site’s public pages happen to contain personal data, we only see what any member of the public could see.

4. How and why we use it

• To provide the service: run checks, send alerts and reports, explain issues and verify fixes. (Basis: performing our contract with you.)
• To run the pilot and respond to enquiries: set up your pilot, reply to questions and follow up. (Basis: your consent or steps taken at your request before a contract.)
• To bill and keep records: issue invoices, manage payments and meet tax and accounting duties. (Basis: contract and legal obligation.)
• To improve and secure the service: fix bugs, prevent misuse and understand how our website is used. (Basis: our legitimate interests, balanced against your rights.)
• To send updates: service notices, and marketing only where you have agreed. You can opt out at any time. (Basis: consent.)

We do not sell your personal data.

5. Who we share it with

We share personal data only where needed, with:

• Service providers who help us operate, such as email, hosting, analytics, payment and customer-support tools, under duties of confidentiality and security.
• Professional advisers such as lawyers and accountants.
• Regulators, courts or law enforcement where the law requires it.
• A buyer or successor if our business is sold or restructured, with the same protections.

6. Transfers outside Nigeria

Some of our providers may store or process data outside Nigeria. Where this happens, we take steps to make sure the data is protected to a level the NDPA requires, for example through appropriate contract terms and safeguards.

7. How long we keep it

• Monitoring data and service records: kept while the service is active and for up to 90 days after it ends, then deleted or anonymised.
• Pilot sign-ups that do not continue: kept for [30] days, then deleted unless you ask us to keep them.
• Billing and tax records: kept for as long as the law requires.
• Website usage data: kept for [period] then deleted or anonymised.

8. How we protect it

We use reasonable technical and organisational measures such as access controls, encryption in transit and limits on who can see data. No system is completely secure, so we cannot guarantee absolute security. If a breach is likely to put your rights at risk, we will notify the Nigeria Data Protection Commission (NDPC) and affected people within the time the law requires.

9. Your rights

Under the NDPA you may, in the cases the law provides:

• ask for access to the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data or restrict how we use it;
• object to processing based on our legitimate interests or to direct marketing;
• withdraw consent at any time, without affecting earlier lawful use;
• receive your data in a portable format; and
• not be subject to a decision made only by automated means that significantly affects you.

To use any of these rights, email [privacy email address]. We will respond within the time the law requires and may ask you to confirm your identity first.

10. Cookies

Our website uses cookies and similar tools to make the site work, remember preferences and understand usage. You can block or delete cookies in your browser settings, though some parts of the site may not work properly. Our website uses Google Analytics to understand usage. Booking a call takes you to Calendly, which processes your booking details under its own privacy policy.

11. Children

Our service is for businesses and is not aimed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.

12. Links to other sites

Our website or reports may link to third-party websites. We are not responsible for their privacy practices, so please read their policies.

13. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new effective date, and tell active clients by email if the changes are significant.

14. Contact and complaints

Questions or requests: [privacy email address], [phone number if any], [registered address].

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Nigeria Data Protection Commission (NDPC).