Who is responsible
RIBAP Networks Limited operates Alejo. For privacy questions or requests, email sales@ribapnetworks.com.
Information we process
For onboarding, we collect the organization and administrator details you submit, including name, work email, phone number, work email domain, site count, expected visitor volume, plan choice, and rollout notes. We also create a one-way technical fingerprint from limited request information to prevent automated abuse; we do not store the raw network address in the onboarding record.
After activation, Alejo processes account, visitor, visit, access-card, support, audit, and configuration information on behalf of the subscribing organization. That organization controls why its visitor information is collected and who may access it.
Why we process it
We use onboarding information to review your request, prepare a quotation or invoice, contact you, verify payment, provision the service, prevent fraud and abuse, and keep the records required to operate and protect the service. We rely on steps you request before entering a contract, performance of a contract, legitimate security and business interests, consent where applicable, and legal obligations.
Who can receive it
Authorized RIBAP personnel and contracted infrastructure, database, hosting, and email providers may process the minimum information needed to deliver Alejo. We may also disclose information where required by law or necessary to protect people, the service, or legal rights. We do not sell onboarding or visitor personal data.
Storage and retention
We protect information with access controls, encryption in transit, tenant isolation, audit logging, and retention controls. We keep onboarding and commercial records only while needed for the purposes above and applicable legal or accounting requirements. Customer administrators can configure eligible visitor-retention settings; some audit and commercial records may need longer retention for accountability.
Your choices and rights
You may ask for access, correction, deletion, restriction, portability, or objection where applicable, and may withdraw consent without affecting earlier lawful processing. We may need to verify identity before fulfilling a request. You may also complain to the Nigeria Data Protection Commission.
Updates
We may update this notice as Alejo or applicable requirements change. The effective date above identifies the current version.