Taxtech Privacy Notice – Business Prospecting – Taxtech

PRIVACY NOTICE

For Business Prospecting & Lead Generation

Last Updated: August 2026

Issued by: Taxaide Technologies Limited (Taxtech)

1. Who Does This Notice Apply To?

This Privacy Notice applies to business professionals and corporate representatives whose contact details we have obtained from:

Publicly available sources (e.g., company websites, professional directories, LinkedIn, regulatory filings);
Licensed third-party lead-generation and prospecting platforms (including but not limited to Lusha, Apollo.io, ZoomInfo, Clearbit, and Lucia); and
Other commercially available business intelligence databases.

This notice explains how we collect, use, store, and protect your personal data when we reach out to you for general business development and prospecting purposes—specifically to introduce you to Taxtech’s professional services (tax technology, compliance, Data Protection Impact Assessments, and related solutions).

2. Who Is the Data Controller?

Taxaide Technologies Limited is the Data Controller for the processing activities described in this notice.

Contact details:

Address: 17, Ligali Ayorinde, Ark Towers, Victoria Island, Lagos, Nigeria.

Email: contact@taxtech.com.ng

Data Protection Officer (DPO): dataprotection@taxtech.com.ng

3. What Personal Data Do We Collect?

We limit our collection strictly to professional/business contact information that is relevant to our services. This typically includes:

Category	Examples
Identity Data	Full name, job title, role/function within your organisation.
Contact Data	Professional email address, business phone number, company name, and office location.
Professional Profile Data	Public LinkedIn URL, professional biography, areas of expertise, and public professional affiliations.
Company/Organisational Data	Industry sector, company size, and publicly available corporate information that helps us assess relevance.

We do not intentionally collect or process sensitive personal data (e.g., financial records, government identification numbers, health data, or personal lifestyle information) through our prospecting activities.

4. How Do We Obtain Your Data?

We collect your business contact data from the following sources:

Publicly accessible directories and websites – where you or your organisation have voluntarily made professional contact details available to the public.
Third-party lead-generation platforms – we subscribe to licensed business intelligence tools (e.g., Lusha, Apollo, ZoomInfo, Lucia) that aggregate professional contact information from public sources.
Referrals and recommendations – where existing business partners or contacts suggest that your organisation may be interested in our services.
Your organisation’s public marketing materials – including press releases, whitepapers, and conference speaker directories.

We do not purchase “scraped” data from illicit sources, and we require our third-party vendors to confirm that their data has been lawfully collected in compliance with applicable privacy laws.

5. What Is Our Lawful Basis for Processing?

Under the Nigeria Data Protection Act (NDPA) 2023, we process your personal data for prospecting purposes on the lawful basis of Legitimate Interest, as provided for in Section 2 of our full Privacy Policy.

Our Legitimate Interest Assessment (LIA):

Element	Assessment
Purpose	To conduct business development and introduce relevant professional services that may benefit your organisation.
Necessity	Processing limited professional contact data is necessary to initiate business-to-business communication. Without it, we cannot effectively inform potential clients about our services.
Balancing Test	We have balanced our commercial interest against your privacy rights. Our processing is minimal (only professional contact details), non-intrusive, and your rights are protected by a clear, immediate opt-out mechanism. Given that your details are publicly available for professional networking, we reasonably expect that receiving relevant business introductions does not disproportionately override your rights.
Reasonable Expectation	As a business professional, we believe you have a reasonable expectation that companies may contact you using publicly available professional information to offer legitimate, relevant business services.

Alternate Legal Basis (where applicable):

If you have previously engaged with Taxtech (e.g., registered on our platform or attended a webinar), we may also rely on consent or contractual necessity to the extent that such prior interaction exists.

6. Why Do We Process Your Data? (Purposes)

We use your professional contact data for the following purposes:

To initiate business conversations and introduce Taxtech’s services (tax advisory, technology solutions, compliance support, and DPIA services) that may be relevant to your role or organisation.
To customise our outreach—ensuring that the services we present align with your industry, company size, and professional interests.
To invite you to relevant events, webinars, or thought-leadership content that may be valuable to your professional development.
To manage and track our sales pipeline using our Customer Relationship Management (CRM) systems.
To improve our targeting—analysing aggregate industry trends to refine our prospecting strategy.
To fulfil our legal and regulatory obligations, including maintaining records of marketing preferences and opt-out requests.

7. Do We Share Your Data?

We do not sell your personal data to third parties. We do, however, share your data with limited categories of recipients strictly for the purpose of conducting our prospecting activities:

Recipient Category	Purpose	Safeguards
Internal Sales & Marketing Teams	To manage outreach and follow-ups.	Access is role-based and restricted to authorised personnel.
Customer Relationship Management (CRM) Providers (e.g., HubSpot, Salesforce)	To store and track prospect interactions.	We have Data Processing Agreements (DPAs) in place requiring them to process data only on our instructions.
Email Service Providers (ESPs)	To send prospecting emails.	We restrict their use to sending our communications and require them to honour opt-out lists.
External Consultants / Advisors	For analytics and campaign optimisation.	Bound by confidentiality and data protection obligations.
Law Enforcement / Regulators	Only if required by law, court order, or to protect Taxtech’s legitimate legal interests.	Limited to the specific legal requirement.

All third parties are contractually obligated to treat your data with the same level of protection we do, and they are prohibited from using your data for their own marketing purposes.

8. How Long Do We Keep Your Data?

We retain your professional contact data only for as long as necessary to achieve the purposes outlined in this notice, in line with our internal Retention Policy (Section 9 of our full Privacy Policy).

Our retention periods are as follows:

Active engagement: If you respond positively to our outreach or express interest in our services, we retain your data for the duration of our business relationship, plus up to 5 years for record-keeping purposes.
No engagement / Opt-out: If you do not respond to our initial outreach or you exercise your right to object (e.g., by replying “UNSUBSCRIBE”), we will immediately suppress your contact details from all active prospecting lists.
Hard bounces / Invalid emails: We delete or update these records within 30 days to ensure list hygiene.
Complete erasure: If you request erasure under Section 8 of our main policy, we will delete your data within 30 days, subject to any legal retention obligations (e.g., for tax or audit purposes).

9. What Are Your Data Protection Rights?

Under the NDPA 2023, you have the following rights regarding your personal data:

Right	Description	How to Exercise It
Right to Access	You have the right to request a copy of the personal data we hold about you.	Email our DPO at dataprotection@taxtech.com.ng. We will respond within 1 month.
Right to Rectification	You can request corrections to any inaccurate or incomplete data we hold.	Provide the correct details via email to dataprotection@taxtech.com.ng.
Right to Erasure (Right to Be Forgotten)	You can request that we delete your personal data, subject to certain legal exceptions.	Submit a request to dataprotection@taxtech.com.ng.
Right to Restrict Processing	You can request that we limit how we use your data while we address your concerns.	Send your request to dataprotection@taxtech.com.ng.
Right to Object to Processing	You have the absolute right to object to our processing of your data for direct marketing/prospecting purposes.	Reply “UNSUBSCRIBE” to any of our emails, or email contact@taxtech.com.ng with “OBJECT” in the subject line. We will honour this immediately.
Right to Data Portability	You can request a copy of your data in a structured, machine-readable format to transfer to another controller.	Email dataprotection@taxtech.com.ng.
Right to Lodge a Complaint	You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).	See Section 15 below for NDPC contact details.

Important: We will never charge a fee for exercising these rights, unless your request is manifestly unfounded or excessive. All requests will be acknowledged and processed within the statutory timelines prescribed by the NDPA.

10. How Do You Opt Out of Prospecting Emails?

You can stop receiving prospecting communications from us at any time using any of the following methods:

One-click Unsubscribe: Click the “Unsubscribe” link at the bottom of any marketing/prospecting email you receive from us.
Reply with “UNSUBSCRIBE”: Simply reply to any of our emails with the word “UNSUBSCRIBE” in the subject line or body.
Email us directly: Send an email to contact@taxtech.com.ng stating that you wish to be removed from all prospecting lists.
Contact our DPO: Email dataprotection@taxtech.com.ng with your request.

Once you opt out, we will add your email address to our global suppression list to ensure you are never included in future prospecting campaigns. Please note that suppressing your data does not delete it entirely from our backup or audit records (which are retained for legal compliance), but it permanently stops active processing for marketing purposes.

11. How Do We Keep Your Data Secure?

We take the security of your data very seriously. Taxtech is an ISO 27001-certified organisation and we implement a comprehensive set of technical and organisational measures to protect your personal data, including:

Encryption: Data is encrypted both in transit (using TLS/SSL protocols) and at rest (using AES-256 encryption).
Access Controls: Role-based access ensures only authorised personnel with a genuine business need can view prospect data.
Multi-Factor Authentication (MFA): Required for all access to our CRM and email platforms.
Regular Security Audits: We conduct penetration testing and vulnerability assessments on a regular basis.
Employee Training: All staff undergo mandatory data protection and privacy awareness training annually.
Incident Response: We have a dedicated breach response plan in place, as outlined in Section 19 of our full Privacy Policy.

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the NDPC within the timelines prescribed by the NDPA (72 hours to the Commission; 7 days to data subjects).

12. Is Your Data Transferred Outside Nigeria?

Yes. As a global technology company, we operate using cloud-based platforms whose data centres may be located both within and outside Nigeria (e.g., in Europe, the United States, or other regions).

When we transfer your data internationally, we ensure compliance with Chapter V of the NDPA by implementing appropriate safeguards, such as:

Standard Contractual Clauses (SCCs) approved by the NDPC or recognised supervisory authorities;
Ensuring the recipient country has an adequate level of data protection, or;
Obtaining your explicit consent where required (though we do not rely on consent for routine prospecting transfers).

For more details on international transfers and associated risks, please refer to Section 18 of our full Privacy Policy, available on our website.

13. Links to Third-Party Sites

Our prospecting emails may occasionally contain links to third-party websites (e.g., industry articles, partner websites, or external event platforms). This Privacy Notice applies only to Taxtech’s processing. We encourage you to read the privacy policies of any third-party sites you visit, as we do not accept responsibility for their data handling practices.

14. How to Contact Us

If you have any questions about this Privacy Notice, or if you wish to exercise any of your data protection rights, please reach out to us through the following channels:

Department	Email Address	Purpose
General Enquiries & Opt-Outs	contact@taxtech.com.ng	For opt-outs, general questions, and basic requests.
Data Protection Officer (DPO)	dataprotection@taxtech.com.ng	For formal DSRs (Access, Erasure, Rectification, Portability) and escalated privacy concerns.
Postal Address	17, Ligali Ayorinde, Ark Towers, Victoria Island, Lagos, Nigeria.	For written correspondence.

15. Filing a Complaint With the Regulator

If you are dissatisfied with how we have handled your personal data, or if you believe we have violated your rights under the NDPA, we encourage you to first contact our DPO at dataprotection@taxtech.com.ng so we can investigate and resolve your concern.

If you are not satisfied with our response, you have the right to lodge a formal complaint with the Nigeria Data Protection Commission (NDPC):

Website: https://ndpc.gov.ng/

Email: info@ndpc.gov.ng

Phone: +234 (0) 916 061 5551

You may also seek other legal remedies available to you under Nigerian law.

16. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, technology, or legal requirements. If we make significant changes, we will indicate this by updating the “Last Updated” date at the top of this notice. We encourage you to review this notice periodically.

17. Acceptance of This Notice

By continuing to engage with our prospecting communications, or by responding to our outreach without objecting, you acknowledge that you have read and understood this Privacy Notice. However, please note that your rights under the NDPA are never waived—you can object or withdraw your data at any time using the mechanisms described above.