privacy policy

Last updated: 17 May 2026

Penafort Energy Nigeria Ltd. ("Penafort", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your personal information when you visit our website at penafortenergy.com, contact us through any of our channels, or visit our physical locations.

This Policy is issued in accordance with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation 2019 (NDPR). If you are visiting from outside Nigeria, your information will be handled in accordance with this Policy and applicable local laws.

1. Who we are

The data controller responsible for your personal information is:

Penafort Energy Nigeria Ltd.
Plot CP06 & 07 Iyana Iba Rd, Iba Rd (Village Bus Stop), Ojo
Lagos State, Nigeria
Email: info@penafortenergy.com
Phone: +234 (916) 983-3950

2. Information we collect

We only collect personal information that is necessary for the purposes described in this Policy.

a. Information you provide directly

When you submit our contact form, apply for a job, or otherwise communicate with us, you may give us your name, email address, phone number, location, the message you send, your CV/résumé (when applying for a role), and any other information you choose to share.

b. Information collected automatically

When you visit the website we automatically receive limited technical information such as your IP address, browser type, device type, operating system, the pages you view, and the time and date of your visit. We use a privacy-friendly analytics provider (Plausible Analytics) that does not use cookies and does not track you across other sites. No personally identifiable information is collected by our analytics.

c. Information stored locally on your device

We use your browser's local storage to remember your cookie-consent choice and to cache public business listing data (e.g. Google Reviews) so that we make fewer external API calls. See our Cookie Policy for full detail.

d. What we do NOT collect on this website

We do not process payments, credit card data, banking information, biometric data, or government-issued identifiers through this website. Any payment transactions you make at Penafort locations are handled by separate, regulated payment systems.

3. How we use your information

We use your personal information only for the following purposes:

• To respond to questions and requests you send via our contact form, email, or phone.
• To consider and process your job application when you apply for a role.
• To send our email newsletter, only after you opt in.
• To measure aggregated, anonymous traffic to our website so we can improve content and performance.
• To detect, prevent, and respond to abuse, fraud, or security incidents.
• To meet our legal, regulatory, and tax obligations.

4. Legal basis for processing

Under the NDPA, we rely on the following lawful bases:

• Consent — when you tick a box, submit a form, or accept cookies.
• Legitimate interest — to operate and secure our website and respond to enquiries.
• Legal obligation — to comply with applicable laws.
• Contract — when we are taking steps at your request prior to entering into an agreement (e.g. recruitment).

5. Sharing your information

We do not sell your personal information. We share it only with the following categories of recipient, and only as necessary:

• Service providers we rely on to run the website, including: Vercel (hosting), Contentful (content management for our careers section), Formspree (contact form submission), Plausible Analytics (cookieless traffic measurement), and Google (Maps embed and Reviews API). Each is bound by their own published privacy commitments.
• Professional advisers (lawyers, accountants, auditors) where reasonably required.
• Government authorities or law enforcement where we are legally required to do so.

Some of these providers operate servers outside Nigeria. We rely on appropriate safeguards (such as the provider's NDPA-aligned data processing terms) for any cross-border transfers.

6. How long we keep your data

We keep personal information only as long as we need it for the purpose it was collected, or as required by law:

• Contact form messages: up to 24 months from your last contact, then deleted or anonymised.
• Job applications: up to 12 months after the recruitment cycle closes, unless you ask us to keep your CV on file longer.
• Newsletter subscriptions: until you unsubscribe, after which we keep a suppression record (your email only) so we don't accidentally email you again.
• Aggregated analytics data: indefinitely, because it is no longer personal.

7. Your rights

Under the NDPA you have the right to:

• Request a copy of the personal information we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete your information when it is no longer needed.
• Object to or restrict how we use your information.
• Receive a copy of your information in a portable format.
• Withdraw your consent at any time (without affecting the lawfulness of processing carried out before withdrawal).
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

To exercise any of these rights, email us at info@penafortenergy.com. We will respond within 30 days.

8. How we protect your information

We use industry-standard technical and organisational measures, including HTTPS encryption, a Content Security Policy, strict server-side input validation, and least-privilege access controls on our content systems. No system is perfectly secure, but we work continuously to keep your data safe.

9. Children's privacy

This website is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be highlighted at the top of the page for at least 30 days.

11. Contact us

If you have any questions or concerns about this Policy or how we handle your personal information, please contact our Data Protection Officer:

Email: info@penafortenergy.com
Phone: +234 (916) 983-3950
Address: Plot CP06 & 07 Iyana Iba Rd, Ojo, Lagos State, Nigeria