Privacy Policy

1. Who We Are

Eshieton Group ("Eshieton", "we", "us", "our") is a project intelligence firm operating through a network of legally independent entities across Africa, Europe, North America, the Middle East, and Asia Pacific. Our principal office is located in Abuja, Nigeria, with registered operations in London, United Kingdom.

We are subject to the Nigeria Data Protection Act 2023 (NDPA) and, where applicable, the UK GDPR. For privacy enquiries: privacy@eshieton.com

2. Data We Collect

• Identity data: name, job title, organisation name
• Contact data: email address, phone number, country
• Professional data: industry sector, years of experience, service interests
• Diagnostic data: responses submitted via our assessment tools (Maturity Audit, AI Readiness, Recovery Diagnostic)
• Platform data: usage data when you access Foresight™ or the Eshieton Institute portal
• Communications: messages, enquiries, and correspondence submitted via our contact forms

3. How We Use Your Data

• To respond to your enquiries and service requests
• To generate and deliver diagnostic reports based on your assessment responses
• To manage your account on the Foresight™ platform or the Institute portal
• To send service-related communications (not marketing, unless you opt in)
• To improve our diagnostic tools, platform features, and service quality
• To comply with legal obligations

4. Legal Basis for Processing (UK/EU)

Where UK GDPR or EU GDPR applies, we process your data under: performance of a contract (platform users); legitimate interests (enquiries and diagnostics); your consent (marketing); and legal obligation (compliance).

5. Data Sharing

We do not sell your personal data. We may share data with:

• Supabase Inc. — cloud database and authentication (secure EU/US regions)
• Google Workspace — internal communications
• Our professional advisors — where legally required

All third-party processors are bound by data processing agreements and comply with applicable data protection laws.

6. International Transfers

Your data may be processed outside your country of residence. Where this involves transfers from the UK or EU, we rely on standard contractual clauses or adequacy decisions.

7. Your Rights

Depending on your jurisdiction, you may have the right to: access your personal data; correct inaccurate data; request deletion; restrict or object to processing; and data portability. Contact us at privacy@eshieton.com. We respond within 30 days.

8. Retention

Diagnostic data is retained for 24 months. Platform account data is retained for the duration of the account plus 12 months after closure.

9. Contact & Complaints

Privacy enquiries: privacy@eshieton.com

Nigeria: Lodge a complaint with the NDPC. UK: Complain to the ICO at ico.org.uk.