Privacy Policy

This Privacy Policy of Layer3 Limited (“Layer3”, “we”, “our”, or “us”) explains how we collect, use, and process your Personal Data, and outlines your privacy rights. Layer3 Limited is a company registered in Nigeria with RC Number 511485 and principal office at 14 YPO Shodeinde Crescent, Utako, Abuja.

1. Introduction

This policy outlines how we collect, store, transfer, use, and protect information, particularly Personal Data (data that can identify you directly or indirectly). It complies with the Nigeria Data Protection Act (NDPA) 2023 and, where applicable, the EU General Data Protection Regulation (GDPR).

By using our website or services or by providing your Personal Data to us, you consent to the terms of this Privacy Policy.

2. Scope of Data Processing in Our Services

Layer3 offers broadband, fiber optic, cloud hosting, managed services, and enterprise network solutions. Depending on the service, we may process:

• Identification details (e.g., name, email, address, phone number)
• Location and access logs for FTTH or cloud usage
• Billing and payment data
• Device, traffic, or network logs for support and performance
• Employee or vendor data when managing enterprise solutions

We process this data either:

• As a Data Controller, when we determine the purpose of processing (e.g., FTTH users, job applicants);
• As a Data Processor, when acting on behalf of our clients (e.g., managing hosted enterprise environments).

3. Collection of Personal Data

We may collect Personal Data when you:

• Visit our website or access online platforms
• Subscribe to or use our services
• Contact our support teams via email, phone, or chat
• Apply for employment or submit a CV
• Are referred to us by third parties with whom you've contracted for services

You will be notified when we receive such data from third parties, along with the purpose of use.

4. Use of Personal Data

We use your data to:

• Provide and improve our services
• Deliver products and process transactions
• Respond to customer inquiries and support issues
• Prevent fraud and verify identity
• Send service updates, alerts, and account information
• Conduct analysis to optimize operations
• Carry out any other purpose you were informed of when the data was collected

We may also use data for marketing, promotions, and surveys, only where permitted by law or with your consent.

5. Lawful Basis for Processing

We process your Personal Data:

• To perform a contract with you
• To comply with legal obligations
• Where necessary for our or a third party's legitimate interest
• When we have your explicit consent

6. Cookies and Tracking Technologies

We use cookies to enhance your website experience. These include:

• Strictly Necessary Cookies: Enable core functionality
• Performance Cookies: Monitor website usage patterns anonymously
• Functionality Cookies: Remember user preferences

You can manage cookies via your browser settings. For more, visit: http://www.allaboutcookies.org/.

7. Retention of Personal Data

We retain your Personal Data:

• As long as necessary to deliver requested services
• As required by law (e.g., tax or regulatory obligations)
• In accordance with our internal Retention Policy (available on request)

8. Sharing and Disclosure

We do not sell your Personal Data. However, we may share it with:

• Service providers acting on our behalf
• Partners engaged to deliver services
• Regulators, courts, or government bodies, where legally required
• Overseas service providers, only in NDPC White List countries

9. Security Measures

We use SSL encryption and other technical and organizational measures to protect your data. Always look for the padlock icon in your browser when interacting with our website.

10. Your Rights

Under the NDPA, you have the right to:

• Access your data
• Correct inaccurate data
• Delete your data (under certain conditions)
• Object or restrict certain types of processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

To exercise your rights, contact our DPO at legal@layer3.com.ng. We will respond within one month.

11. Data Breaches

In the event of a Personal Data breach, we will notify the NDPC within 72 hours and notify affected individuals within 7 days if there is a significant risk to their rights or freedoms.

12. Changes to this Policy

We may update this Policy periodically. Any changes will be posted on our website. Please review this page regularly.

13. Third-Party Links

Our services may contain links to third-party websites. Please note their privacy policies apply, and we are not responsible for their practices.

14. Questions or Complaints

If you have concerns or questions about this policy, please contact our Data Protection Officer (DPO) via: legal@layer3.com.ng

If you are dissatisfied with our handling of your data, you may also contact the NDPC via https://ndpc.gov.ng/.