Privacy Policy — Light Automations

Effective date: 1 May 2026 · Version: 1.0

Light Automation and Control Systems Ltd ("Light Automations", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit lightautomations.com or interact with us through this website.

This policy is issued in compliance with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation 2019 (NDPR).

1. Who we are

Light Automation and Control Systems Ltd is a company registered with the Corporate Affairs Commission of Nigeria, providing industrial automation, instrumentation, control systems, and smart building services. We act as the data controller for personal data collected through this website.

Contact:
Light Automation and Control Systems Ltd
Ibadan, Nigeria
Email: info@lightautomations.com
Phone: +234 813 006 3696

2. What information we collect

We collect personal information in the following ways:

2.1 Information you provide directly

When you complete the contact form on our website, we collect:

Full name
Company or organisation name
Email address
Phone number
Type of enquiry
The contents of your message

2.2 Information collected automatically

When you visit our website or submit the contact form, we automatically collect:

IP address
Browser type and version
Device and operating system information
The pages you visited and the date and time of your visit
The website that referred you to us (if applicable)

This information is used for security, to prevent abuse of our contact form, and to understand how visitors use our site.

3. How we use your information

We use your personal information for the following purposes:

To respond to your enquiry — the primary reason we collect contact information
To provide quotes, proposals, or technical information in response to your request
To follow up on enquiries that may benefit from further conversation
To improve our services by understanding what enquiries we receive
To prevent abuse of our contact form (e.g., spam, automated submissions)
To comply with legal obligations where required

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

4. Legal basis for processing

Under the NDPA, we process your personal data on the following lawful bases:

Consent — when you voluntarily submit our contact form
Legitimate interest — to operate and protect our website, respond to enquiries, and conduct ordinary business communications
Contract — where processing is necessary to enter into or perform a contract with you
Legal obligation — where Nigerian law requires us to retain or disclose information

5. How we store and protect your information

Your personal information is stored within the Microsoft 365 environment (Microsoft Exchange Online), which provides enterprise-grade security including:

Encryption in transit (TLS) and at rest (AES-256)
Access controls and authentication requirements
Regular security audits and compliance certifications (ISO 27001, SOC 2)

Access to your personal data is restricted to authorised Light Automations personnel on a need-to-know basis. Our website contact form uses Microsoft Graph API with scoped permissions to ensure that no single application has broad access across our systems.

6. How long we keep your information

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

Active enquiries: until the matter is resolved or the relationship ends
Closed enquiries that did not result in a contract: up to 24 months, after which they are deleted
Active client relationships: for the duration of the relationship plus 7 years (in line with Nigerian commercial record-keeping requirements)
Legal or regulatory retention: as required by applicable law

7. Sharing your information

We may share your personal data with:

Microsoft — as the underlying email and cloud infrastructure provider (governed by Microsoft's own privacy commitments and data processing agreements)
Authorities — if required by law, court order, or regulatory request
Professional advisors (e.g., lawyers, auditors) where strictly necessary and under confidentiality obligations

We do not transfer your personal data outside Nigeria except where Microsoft processes data through its global infrastructure under appropriate safeguards, in line with Section 41 of the NDPA.

8. Cookies and tracking

This website does not currently use tracking cookies, advertising trackers, or third-party analytics that profile users. If we add analytics in the future (such as Google Analytics), we will update this policy and obtain consent where required.

9. Your rights under the NDPA

You have the following rights regarding your personal data:

Right of access — to request a copy of the personal data we hold about you
Right of rectification — to ask us to correct inaccurate or incomplete data
Right to erasure — to request deletion of your data, subject to legal retention requirements
Right to object — to object to certain processing activities
Right to data portability — to receive your data in a structured, commonly-used format
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
Right to lodge a complaint — with the Nigeria Data Protection Commission (NDPC)

To exercise any of these rights, contact us at info@lightautomations.com. We will respond within 30 days.

10. Children's privacy

This website is intended for business audiences and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" at the top of this page indicates when it was last revised. Material changes will be reflected here, and where appropriate we will notify users directly.

12. Contact us

For any questions about this Privacy Policy or how we handle your personal data, please contact:

Light Automation and Control Systems Ltd
Email: info@lightautomations.com
Phone: +234 813 006 3696
Address: Ibadan, Nigeria

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.