Privacy Notice

Last updated: 25 October 2026

Who we are

Amarisen Systems is a halal-aligned digital systems studio operating from Nigeria (remote-first delivery). Contact for any privacy question: founder@amarisen.com.ng.

What this website collects

• Assessment and contact form submissions: the fields you choose to provide — name, contact details, business name, country, industry, your description of the problem and related notes. We collect only what is needed to evaluate fit and respond.
• Technical data: standard server logs (IP address, browser type, pages requested) generated by hosting infrastructure for security and operation.
• Analytics (if and when enabled): aggregate usage statistics. Where we adopt an analytics tool, we will prefer privacy-respecting options, disclose the tool here, and update this notice before enabling it.

This website does not use advertising trackers, does not sell or share personal data for marketing, and does not set advertising cookies.

Why we collect it and our basis

• To assess project fit and respond to your enquiry — based on your request and our legitimate interest in operating the business.
• To keep the website secure and functional — legitimate interest.
• To meet record-keeping obligations where a project proceeds — contractual and legal necessity.

Projects: controller and processor roles

When we build systems for clients, the client typically owns and controls their customers' data (they are the data controller); Amarisen Systems acts as a processor or service provider within the scope of the signed agreement. We handle such data only for the agreed project purpose, with least-privilege access, and design systems to minimise the personal data they hold. Sensitive categories of data are excluded from scope unless explicitly agreed and responsibly supportable.

Cross-border considerations

We operate from Nigeria and serve clients remotely, which means project data may be processed across borders (for example, via hosting providers' infrastructure). Where a client is subject to data-protection law in the UK, EU or another jurisdiction — including rules on international transfers and data-processing agreements — the arrangement must be assessed for that project. Where needed, data-processing terms are agreed in the contract. We do not claim that using a reputable hosting provider automatically resolves any party's legal obligations, and we recommend qualified legal advice for jurisdiction-specific requirements.

Retention and deletion

• Assessment enquiries that do not proceed: retained no longer than reasonably needed to respond and review fit, then deleted.
• Client project data: retained per the signed agreement and returned or deleted at closure per the handover and access-removal checklist.
• Server logs: retained for the hosting provider's standard operational period.

To request deletion of data you have submitted to this website, email founder@amarisen.com.ng and we will action it, subject to any legal retention obligations we will explain.

Security

We apply proportionate measures: HTTPS enforced, secrets kept server-side only, input validation, least-privilege access, secure credential exchange channels, and access review at project closure. No method of transmission or storage is perfectly secure; we commit to proportionate care and honesty, not to an unachievable guarantee. We do not claim any security certification or compliance standard we have not established.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete or restrict the use of your personal data, and to complain to a supervisory authority. To exercise any right, contact founder@amarisen.com.ng. We will respond within a reasonable period and explain any limitation honestly.

Nigerian data protection

As a Nigeria-based business, we are subject to Nigerian data protection law (including the Nigeria Data Protection Act 2023 and related regulations as they apply to our processing). Our practices are designed around data minimisation, purpose limitation and security. Specific filing, audit or registration obligations depend on how the law applies to our processing profile; where qualified review is needed, we obtain it rather than guess.

Third-party services

Tools involved in operating this site or a project (hosting, version control, scheduling, payment providers where verified) are listed in project documentation and governed by their own terms and privacy policies. Subprocessors used in a project are disclosed in the scope of work.

Children

This website and our services are directed at businesses and are not intended for children. We do not knowingly collect data from children.

Changes to this notice

If our data practices change — for example, enabling analytics or a new subprocessor — this notice will be updated before or at the time of the change, with the revision date above.