Privacy Policy for NFORSHIFU234 Dev

Effective Date: February 24, 2026

Last Updated: July 03, 2026

NFORSHIFU LOGICFORGE LTD (CAC-registered company in Nigeria, hereinafter “we”, “us”, or “our”) operates the NFORSHIFU234 Dev brand. We are committed to protecting your privacy and processing your personal data lawfully, fairly, and transparently in accordance with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation 2019 (where still applicable), and other relevant laws.

This Privacy Policy applies to personal data processed through our Services, including:

• Website: https://nforshifu234dev.com
• Open-source libraries (e.g., nfsfu234-form-validation, nfsfu234-tour-guide)
• Related tools, content, inquiries, and communications

WishIT is a separate product with its own dedicated Privacy Policy at https://wish-it.app/legal/privacy, which supplements this one for WishIT-specific processing (e.g., tribute content, user collaborations). Refer to that for details on WishIT data practices.

By using our Services, you consent to the practices described here. If you disagree, please do not use the Services.

1. Who We Are (Data Controller)

Data Controller: NFORSHIFU LOGICFORGE LTD

Registered Address: [Lagos, Nigeria – required under NDPA Section 27(1)(a)]

Contact: [email protected]

Means of Communication: Email (preferred) or via our website contact form.

We act as the data controller for data processed under this Policy. For WishIT, we may act jointly or as a processor in some cases — see WishIT\\\'s policy.

2. Information We Collect

We collect only data necessary for legitimate purposes (data minimisation principle, NDPA Section 24).

Personal Data (directly from you):

• Contact details: Name, email, phone (e.g., inquiries, support, newsletters).
• Account/profile data: Username, hashed password, preferences (if registration applies).
• Google Sign-In data: If you sign in with Google, we receive your name, email address, and profile photo from Google, used solely to create and authenticate your account.
• Payment data: Billing info via secure third-party processors (e.g., Paystack/Stripe — we do not store card details).

Automatically Collected / Non-Personal Data:

• Usage/technical data: IP address, browser/device type, OS, pages visited, time spent, interactions (clicks, scrolls).
• Cookies/tracking: For functionality, analytics, and personalisation (see separate Cookie Policy).

From Third Parties:

• Data from platforms like LinkedIn, X (@nforshifu234dev), or integrations/APIs.

We do not collect sensitive data (e.g., health, ethnicity) unless explicitly consented to and necessary.

3. Lawful Basis and Purposes of Processing

We process data on these bases (NDPA Section 25/30):

• Consent — e.g., marketing emails, optional cookies.
• Contract performance — e.g., delivering services, responding to inquiries.
• Legitimate interests — e.g., site security, analytics (balanced against your rights).
• Legal obligation — e.g., compliance, audits.

Purposes:

• Provide/maintain Services (e.g., respond to emails, host libraries).
• Improve/analyse usage (anonymised where possible).
• Communicate updates/support/marketing (opt-out available).
• Prevent fraud/security issues.
• Comply with laws (e.g., NDPA audits).

4. Sharing / Recipients of Data

We do not sell or rent personal data.

Recipients/categories:

• Service providers (processors): Hosting (Vercel/Netlify), analytics (Google Analytics/Vercel), payments (Paystack/Stripe) — bound by NDPA-compliant contracts.
• Legal authorities: If required by law/court order.
• Business transfers: In mergers/acquisitions (with notice).
• With consent: For specific sharing (e.g., collaborative features).

All processors must meet NDPA standards (confidentiality, security).

5. International Data Transfers

Data is primarily processed in Nigeria. For transfers outside Nigeria (e.g., cloud servers in the US/EU), we use NDPA-approved safeguards:

• Adequacy decisions (if the country approved).
• Standard contractual clauses or binding rules.
• Your explicit consent was required.

6. Data Retention

We retain data only as long as necessary:

• Account/active data: While the account exists + reasonable period post-termination.
• Usage logs: Up to 12–24 months for security/analytics (anonymised longer).
• Legal requirements: As mandated (e.g., tax records).

Afterwards: Secure deletion or anonymisation.

7. Your Rights (Data Subject Rights – NDPA Part VI)

You have:

• Access: Copy of your data.
• Rectification: Correct inaccuracies.
• Erasure (“right to be forgotten”): Delete (subject to exceptions).
• Restriction: Limit processing.
• Objection: To marketing/legitimate interest processing.
• Portability: Receive data in a structured format.
• Withdraw consent: Anytime (no effect on prior processing).
• Not subject to solely automated decisions with significant effects (if applicable — we do not currently use such).

To exercise: Email [email protected] with verification. We respond within 30 days (extendable). No fee unless manifestly unfounded/excessive.

Complaints: Lodge with the Nigeria Data Protection Commission (NDPC) at [email protected] or via their portal.

8. Data Security & Breach Notification

We implement appropriate technical/organisational measures (NDPA Section 24/39):

• Encryption (HTTPS in transit, at-rest where applicable).
• Access controls, firewalls, and regular audits.
• Monitoring/vulnerability scanning.

In a breach risking rights/freedoms: Notify you and NDPC within 72 hours (high-risk cases).

9. Children\\\'s Personal Data

Services not directed at children under 13 (or 16 for certain processing). If we collect child data (e.g., family tributes in WishIT), we seek verifiable parental consent. Contact us if concerned.

10. Third-Party Links

Links to external sites (e.g., social profiles) are not covered — review their policies.

11. Changes to This Policy

We may update for legal/practice changes. Significant updates: Email notice or site banner (30 days where possible). Continued use = acceptance.

12. Contact Us

Email: [email protected]

LinkedIn: linkedin.com/company/nforshifu234dev

X: x.com/nforshifu234dev

For WishIT: [email protected] or https://wish-it.app/legal/privacy.

Thank you for trusting us. We prioritize your privacy.