Privacy Policy

Last updated: 9 September 2026

This Privacy Policy explains how Lekkify Limited (“Lekkify”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data. It applies to our website at lekkifylimited.com, to the products we operate, and to the services we deliver to business clients, including messaging services built on the WhatsApp Business Platform.

Lekkify Limited is a company incorporated in Nigeria and registered with the Corporate Affairs Commission under RC 1594047, with its registered office at Lekki, Lagos. For the purposes of applicable data protection law, Lekkify is the data controller of personal data described in Section 2, and a data processor acting on the instructions of our business clients for the data described in Section 3.

1. Contact

If you have any question about this policy or wish to exercise your rights, contact us at privacy@lekkifylimited.com, or write to us at Lekki, Lagos.

2. Data we collect as a controller

2.1 Information you give us

• Contact details: name, email address, phone number, company name, and role, when you contact us, request a proposal, or subscribe to updates.
• Account information: credentials and profile details when you register for one of our products.
• Content you submit: documents, messages, and other material you upload to our products, such as a CV uploaded to Sydicom.
• Billing information: details necessary to process payments. Card details are handled directly by our payment processors and are not stored on our systems.

2.2 Information collected automatically

• Usage data: pages viewed, features used, timestamps, and referring URLs.
• Device and technical data: IP address, browser type and version, operating system, and device identifiers.
• Cookies and similar technologies: see Section 7.

3. Data we process on behalf of our clients

When we build and operate messaging or automation systems for a business client, that client determines why and how the data is used, and is the data controller. We act as their processor and handle the data only on their documented instructions and as needed to run the service.

3.1 WhatsApp Business Platform

Where we operate a WhatsApp Business Platform integration for a client, we may process:

• Phone numbers of people who message the client’s WhatsApp business number, or whom the client is permitted to message;
• WhatsApp profile name as supplied by the WhatsApp service;
• Message content: text, media, and attachments sent to or from the client’s business number;
• Message metadata: timestamps, delivery and read status, and message and conversation identifiers;
• Template and campaign records associated with the client’s account.

This data is used solely to deliver the messaging service the client has engaged us for: routing and responding to conversations, sending notifications the recipient has opted in to receive, maintaining conversation history for the client, and producing reporting for the client. We do not sell this data, we do not use it for advertising, and we do not use it to train machine-learning models for our own purposes.

Each business client maintains its own WhatsApp Business Account with Meta and its own billing relationship with Meta. Message content sent through the WhatsApp Business Platform is transmitted through Meta’s infrastructure and is subject to Meta’s own terms and privacy practices. See the WhatsApp Business Messaging Policy and the WhatsApp Privacy Policy.

3.2 Opt-in and opt-out

Businesses may only send messages to people who have given prior opt-in consent to be contacted on WhatsApp. We require every client we onboard to obtain and record that consent. Any recipient may stop receiving messages at any time by replying STOP to the conversation, or by contacting the business directly. Opt-out requests are actioned promptly and recorded.

4. How we use personal data

• To provide, operate, maintain, and improve our products and services;
• To respond to enquiries and provide customer and technical support;
• To send service messages about changes, security notices, and account activity;
• To send marketing communications where you have consented, and which you may withdraw at any time;
• To process payments and maintain financial records;
• To monitor for and prevent fraud, abuse, and security incidents;
• To comply with legal, regulatory, and reporting obligations.

5. Legal bases

We rely on one or more of the following: performance of a contract with you or your organisation; your consent, which you may withdraw at any time; our legitimate interests in operating, securing, and improving our business, balanced against your rights; and compliance with a legal obligation.

6. Sharing

We do not sell personal data. We share it only as follows:

• Service providers: hosting, infrastructure, analytics, email delivery, and payment processing partners who process data on our behalf under contract;
• Meta Platforms: where a WhatsApp Business Platform service is being delivered, message data necessarily transits Meta’s systems;
• Our business clients: where we process data as their processor, the data belongs to and is made available to them;
• Professional advisers: legal, accounting, and insurance advisers where necessary;
• Authorities: where required by law, regulation, court order, or to establish or defend legal claims;
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy continuing to apply.

7. Cookies

Our website uses strictly necessary cookies to function, and may use analytics cookies to understand how the site is used. You can control or delete cookies through your browser settings. Disabling cookies may affect site functionality.

8. International transfers

We and our service providers may process data in countries outside Nigeria. Where data is transferred internationally, we take steps to ensure an adequate level of protection through appropriate safeguards, including contractual protections with our processors.

9. Retention

We keep personal data only for as long as necessary for the purposes set out in this policy, or for as long as required by law. Data processed on behalf of a client is retained according to that client’s instructions and is deleted or returned on termination of the engagement, subject to any legal retention requirement. Where you close an account with us, we delete or anonymise the associated data within a reasonable period.

10. Security

We apply technical and organisational measures appropriate to the risk, including encryption of data in transit, access controls limiting staff access to what their role requires, credential management for API access tokens, and monitoring for unauthorised access. No system is completely secure, and we cannot guarantee absolute security.

11. Your rights

Subject to applicable law, including the Nigeria Data Protection Act and, where relevant, the EU and UK GDPR, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data;
• Object to or request restriction of processing;
• Request portability of data you provided to us;
• Withdraw consent at any time, without affecting processing carried out before withdrawal;
• Lodge a complaint with a supervisory authority, including the Nigeria Data Protection Commission.

To exercise any of these rights, email privacy@lekkifylimited.com. We will respond within the period required by applicable law. Where we hold your data as a processor for one of our clients, we will refer your request to that client and support them in responding.

12. Children

Our services are not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Where changes are material, we will provide additional notice, such as by email or a notice on our website.

14. How to contact us

Lekkify Limited
Lekki, Lagos
Email: privacy@lekkifylimited.com