Privacy Policy

Effective date: 6 November 2026.

What we collect and how we get it

Today, personal data is collected only when you submit an enquiry or contact form. Depending on the form, this may include your name, company, email address, phone number, country, equipment or project requirements, and the message you choose to provide. We receive it directly from you. Do not include sensitive or unnecessary personal information.

Enquiry and contact submissions are stored server-side in a JSONL file on the hosting server. The hosting provider is active. Sentry is active for error monitoring: it receives error events from the website, is configured to send no personal data by default, does not record sessions, and processes data in the United States. Google Analytics 4 and PostHog are integrated and consent-gated, and activate only after analytics consent and once their account IDs are configured through environment variables. If activated, they process pageview and usage data. Resend, Cloudflare and Vercel remain planned and inactive.

Purposes and lawful bases

We use form information to receive, review and respond to your request, discuss potential sourcing requirements, prepare a quotation if requested, and maintain a record of communications. Depending on the applicable law and circumstances, the lawful bases are taking steps at your request before a contract, legitimate interests in managing business enquiries, and compliance with legal obligations. We will identify the applicable basis when the establishment and processing context are confirmed.

Retention

We retain enquiry information only as long as reasonably needed to respond and manage the enquiry, maintain relevant business records, and meet legal requirements. Records are stored on the hosting server and are removed when no longer needed for these purposes or required by law.

Sharing and international transfers

We do not sell personal information. We share enquiry information with the hosting provider because it is stored on that provider’s server. Sentry receives error events from the website for error monitoring, configured to include no personal data by default and with no session recording. Google Analytics 4 and PostHog load only after analytics consent and only once configured; if activated, they receive pageview and usage data. Resend, Cloudflare and Vercel are planned services and are not active. If a provider or recipient processes data in another country, we will assess applicable transfer rules and put required safeguards in place, such as an adequacy mechanism or approved contractual safeguards, before the transfer where required. Where a transfer is required, we assess the destination and apply safeguards required by law.

Security

We use technical and organisational measures appropriate to the current site, including server-side validation, restricted server-side storage, spam controls and access limited to people who need the information. No method of transmission or storage can be guaranteed completely secure. We review security controls and hosting arrangements as the service develops.

Your rights and how to exercise them

Depending on the law that applies, you may have rights to access, correct, erase or restrict your data, object to processing, request portability, or withdraw consent where processing relies on consent. Submit a request through our Privacy Requests page. We may ask for information reasonably needed to verify your identity and clarify the request. We will respond within the period required by applicable law (and in any event within one month where that standard applies), subject to lawful extensions or exceptions. You may complain to the authority identified below where the relevant framework applies.

Applicability

Worldwide customers do not automatically make every privacy law applicable. Whether a framework applies depends on LINERS LTD’s establishment, activities, customers and data processing. The following summaries describe possible rights and complaint routes where the relevant law applies; they are not a claim that every framework governs every interaction.

Nigeria, home framework

Nigeria is LINERS LTD’s home jurisdiction. The Nigeria Data Protection Act 2023 (NDPA) is our home data-protection framework, and the Nigeria Data Protection Commission (NDPC) is our home regulator. Subject to legal conditions, data subjects may have rights under the NDPA, including rights to information and access, correction, erasure, objection, restriction and complaint. Exercise applicable rights through the Privacy Requests page. We will respond within the period required by applicable law (and in any event within one month where that standard applies). You may complain to the NDPC: ndpc.gov.ng.

United Kingdom, international customers

Where applicable, processing is governed by the UK GDPR and Data Protection Act 2018. The Privacy and Electronic Communications Regulations (PECR) may also apply to electronic communications and storage/access technologies such as cookies. UK rights can include access, rectification, erasure, restriction, objection, portability and safeguards relating to automated decisions, subject to conditions. Exercise applicable rights through the Privacy Requests page. We will respond within the period required by applicable law (and in any event within one month where that standard applies). You may complain to the Information Commissioner’s Office (ICO): ico.org.uk.

European Union, international customers

Where the GDPR applies, rights may include access, rectification, erasure, restriction, objection, portability and the right not to be subject to certain solely automated decisions, subject to conditions. Exercise applicable rights through the Privacy Requests page. We will respond within the period required by applicable law (and in any event within one month where that standard applies). You may complain to the supervisory authority in your habitual residence, place of work, or place of the alleged infringement, as applicable.

United States, international customers

The United States has no single comprehensive federal privacy law equivalent to the GDPR. Federal consumer-protection enforcement, including by the Federal Trade Commission (FTC), operates alongside a patchwork of state privacy laws. Where California’s CCPA as amended by the CPRA applies, rights may include knowing/accessing, deleting and correcting personal information, opting out of sale or sharing, limiting certain uses of sensitive personal information, and non-discrimination for exercising rights. LINERS LTD does not sell or share personal information. Exercise applicable rights through the Privacy Requests page. We will respond within the period required by applicable law (and in any event within one month where that standard applies). You may also have a right to appeal a decision or contact the California Privacy Protection Agency or California Attorney General as provided by law.

Complaints and contact

Please submit a request through the Privacy Requests page. You can also complain to your relevant data protection regulator, including the authorities described above where applicable.

Changes

We may update this policy as our practices, services or legal obligations change. Changes will be posted here with a revised effective date. We will update the disclosures before activating analytics or marketing tools.