Sophors Privacy Policy
Sophors Consulting Limited
Version 1.5 · Last updated 2 October 2026
1. Who we are
This policy explains how Sophors Consulting Limited ("Sophors", "we", "us") handles personal data when you use our website, our public data dashboards, our free data download service, or contact us.
Sophors Consulting Limited (RC 6913048), 279 Herbert Macaulay Road, Yaba, Lagos, Nigeria. Email: mail@sophors.com · Phone: +234 704 310 9710
For privacy questions or requests, write to mail@sophors.com with "Privacy" in the subject line.
We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the General Application and Implementation Directive issued under it by the Nigeria Data Protection Commission (NDPC).
2. What this policy covers
- sophors.com, our main website.
- Sophors Data (data.sophors.com), our public data dashboards, and any other public Sophors dashboards.
- The free data download service, where you download a dataset from one of our dashboards.
- Enquiries you send us by email, phone or the contact form.
Client engagements, training programmes and client-only platforms have their own terms, agreed with each client. Where we process a client's data on the client's instructions, the client's agreement with us governs that processing.
Some links on our sites take you to other organisations' websites, such as the platform where you enrol on our courses. Their own privacy policies apply there.
3. What we collect
Information you give us
| When | What we collect |
|---|---|
| You download a dataset | Your name, your email address, and the dataset, frequency and period you chose |
| You contact us | Your name, organisation, email address and your message |
Information collected automatically
- Server logs. Our hosting providers record technical details when you visit, such as your IP address, browser type, the pages or data requested, and the time. This is standard for any website and is used for security and to keep the service running.
- No tracking cookies. Our dashboards do not set cookies or store anything in your browser, and we do not use advertising or analytics trackers.
- Third-party libraries. Our pages load some files from other providers: charting software from jsDelivr on the dashboards, and fonts from Google Fonts on sophors.com. When your browser fetches these files, those providers receive your IP address.
We do not ask for, and ask you not to send, sensitive personal data.
4. Why we use it, and on what basis
| Purpose | Lawful basis |
|---|---|
| Keeping a record of who downloads which datasets, so we understand how our data is used | Your consent, given when you submit the download form |
| Replying to your enquiry | Your consent, and our legitimate interest in responding |
| Preventing abuse of the download service (e.g. limiting repeated downloads from one address) | Our legitimate interest in keeping a free service available |
| Understanding, in aggregate, which datasets are requested so we can improve them | Our legitimate interest |
| Meeting legal obligations | Legal obligation |
We do not send marketing emails to people who download data or contact us, unless they separately agree to receive them. Downloaded data goes straight to your browser, not to your inbox. We never sell personal data.
5. Who we share it with
We share personal data only with service providers that help us run our services, under agreements that require them to protect it and use it only on our instructions:
- Render (dashboard hosting, servers in Germany; visitor traffic passes through its content delivery network, Cloudflare)
- Supabase (database, servers in the United Kingdom)
- Our website host (for sophors.com)
We may also disclose personal data when required by law, or to protect our rights or the safety of others.
6. International transfers
Our service providers store personal data outside Nigeria, in the United Kingdom and the European Union. Content delivery networks (Cloudflare for our hosting, jsDelivr for charting files, Google for website fonts) may handle your IP address in other countries while delivering pages to you. We transfer personal data only where the NDPA allows it, for example where the destination has adequate data protection or the provider has given appropriate safeguards through its contract with us.
7. How long we keep it
| Data | Kept for |
|---|---|
| Download records (name, email, what was downloaded) | 12 months, then deleted or anonymised |
| Enquiries | 24 months after our last exchange, unless they lead to a contract |
| Server logs | As long as our hosting providers keep them, normally a few weeks |
8. How we protect it
We use encrypted connections (HTTPS) for all our sites, restrict access to personal data to staff who need it, and use providers with recognised security practices. No system is completely secure, but we will notify you and the NDPC of a breach where the law requires it.
9. Your rights
Under the NDPA you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw your consent at any time (this does not affect anything we did before you withdrew it);
- not be subject to decisions made solely by automated means that significantly affect you.
To use any of these rights, email mail@sophors.com. We will acknowledge your request within 2 working days and complete it within 14 days. We may need to confirm your identity first.
If you are not satisfied with our response, you can complain to the NDPC (ndpc.gov.ng).
10. Children
Our services are not intended for anyone under 18, and we do not knowingly collect their personal data.
11. Changes to this policy
We may update this policy. The version and date at the top show when it last changed. Where a change is significant, we will say so on our website.