Privacy Policy

Effective Date: December 15, 2024 | Last Updated: October 21, 2025

1. Introduction

CN Engine Systems Ltd (RC 1759862) ("Company," "we," "our," or "us"), a company incorporated under the laws of the Federal Republic of Nigeria with its registered office at Lagos, Nigeria, is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, store, and protect your personal information in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and other applicable laws.

2. Information We Collect

3. Legal Basis for Processing

We process your personal data based on:

• Consent: Where you have given explicit consent
• Contract: To fulfill our contractual obligations
• Legal Obligation: To comply with Nigerian laws and regulations
• Legitimate Interest: For business operations and service improvement

4. How We Use Your Information

• Provide engineering, procurement, installation, and maintenance services
• Process quotations, contracts, and billing
• Communicate about projects and service updates
• Comply with legal and regulatory requirements
• Improve our services and website functionality
• Maintain business records and documentation

5. Data Sharing and Disclosure

We may share your information with:

• Authorized subcontractors and suppliers (under strict confidentiality agreements)
• Professional advisors (lawyers, accountants, auditors)
• Regulatory authorities when legally required
• Law enforcement agencies when mandated by law

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure storage systems, and regular security assessments.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Project-related data is typically retained for 7 years after project completion in accordance with Nigerian business record requirements.

8. Your Rights Under NDPR

You have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (subject to legal requirements)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

9. International Data Transfers

If we transfer your data outside Nigeria, we ensure adequate protection through appropriate safeguards such as standard contractual clauses or adequacy decisions by the Nigerian Data Protection Commission.

10. Cookies and Website Analytics

Our website uses cookies to improve user experience and analyze website performance. You can control cookie settings through your browser preferences. For detailed information, please refer to our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes through our website or direct communication.

12. Complaints and Regulatory Authority

If you have concerns about our data processing practices, you may file a complaint with the Nigerian Data Protection Commission (NDPC) at info@ndpc.gov.ng or visit their website at www.ndpc.gov.ng.