Privacy Policy

1. Who We Are & Scope of This Policy

This Privacy Policy explains how Ruthex Digital ("Ruthex," "we," "us," "our"), based in Lagos, Nigeria, collects, uses, shares, and protects personal information when you visit this website, submit a form, subscribe to our newsletter, or engage us for digital marketing services.

This policy covers our role as the operator of this website. Where we deliver services on behalf of a client (for example, managing that client's ad accounts, email lists, or customer data), we act as a data processor on that client's instructions — see Section 9 below for how that works.

2. Information We Collect

Information you give us directly

• Contact form submissions: name, email address, phone number, company, service of interest, and your message.
• Discovery call requests: the same details, plus anything you choose to share about your goals or budget.
• Newsletter sign-ups: your email address.
• Any information you share by email, phone, or during a client engagement, including business documents, brand assets, and account access.

Information collected automatically

• Technical data such as IP address, browser type and version, device type, operating system, and general location inferred from your IP.
• Usage data such as pages visited, time on page, referring website, and links clicked, collected through analytics tools and cookies (see Section 5, Cookies & Tracking).

We do not knowingly collect sensitive personal data (such as health, financial account numbers, or government ID data) through this website. Please avoid including sensitive information in any form or message you send us.

3. Our Legal Basis for Processing

Depending on your location, we rely on one or more of the following lawful bases to process your personal data, consistent with the Nigeria Data Protection Act (NDPA) 2023 and, where applicable to visitors from other regions, the EU/UK GDPR and similar laws:

• Consent — for example, when you opt in to our newsletter or accept non-essential cookies.
• Performance of a contract — to respond to your enquiry, schedule a discovery call, or deliver services you've engaged us for.
• Legitimate interests — to keep our website secure, understand how it's used, and improve it, balanced against your rights.
• Legal obligation — where we must retain or disclose information to comply with the law.

4. How We Use Your Information

• To respond to enquiries submitted through our contact form or discovery call request.
• To plan, deliver, and report on services for clients who engage us.
• To send newsletter content you've opted in to receive — always with an unsubscribe link.
• To monitor, secure, and improve this website and its performance.
• To meet legal, accounting, or regulatory obligations.

We do not sell your personal information to third parties, and we do not use it for purposes incompatible with those listed above without asking you first.

5. Cookies & Tracking Technologies

This website uses cookies and similar technologies to make the site work, understand how it's used, and — where you've consented — measure marketing performance.

• Strictly necessary cookies: required for core site functionality (such as remembering your dark/light mode preference) and cannot be switched off.
• Analytics cookies: help us understand traffic and site usage in aggregate, such as through Google Analytics.
• Marketing/advertising cookies: may be used on client campaigns we run (for example, Meta Pixel or Google Ads tags) to measure and optimize advertising performance.

Where required by law — including under the NDPA's General Application and Implementation Directive — we request your opt-in consent before setting any cookie that is not strictly necessary. You can withdraw consent, or block or delete cookies at any time, through your browser settings or any cookie preference banner presented on this site; doing so may affect some site functionality.

6. Email Marketing & Communications

If you subscribe to our newsletter or otherwise opt in to marketing emails, we'll send you occasional growth and marketing insights. Every marketing email includes a one-click unsubscribe link, consistent with the CAN-SPAM Act and equivalent laws — you can opt out at any time without affecting any service engagement you have with us.

We do not add you to marketing lists solely because you submitted a contact or discovery call form — those messages are used to respond to your enquiry, not to subscribe you to a newsletter unless you separately opt in.

7. How We Share Your Information

We share personal information only with service providers who help us run this website and deliver our services, under confidentiality and data protection obligations — for example, email delivery and hosting providers, and, where engaged for your project, analytics, advertising, CRM, or email marketing platforms such as Google Analytics, Meta, Mailchimp, or HubSpot.

• We may disclose information where required by law, regulation, or a valid legal process.
• If we're involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy or a comparable one.
• We never sell or rent your personal information to third parties for their own marketing purposes.

8. Data We Process on Behalf of Clients

When you engage us for services such as email campaign management, paid advertising, CRM setup, or AI marketing automation, we may process personal data belonging to your customers or contacts strictly on your instructions and for the purposes you direct — acting as a data processor, with you as the data controller.

That processing is governed by your own privacy policy and, where required, a separate Data Processing Agreement between us, available on request. We do not use your customers' data for our own purposes beyond delivering the agreed service.

9. Automated Processing & Profiling

Some services we offer — including AI Marketing Automation, ad optimization, and email segmentation — involve automated processing that groups or scores contacts (for example, by engagement level) to personalize outreach or optimize ad delivery. This processing supports marketing decisions; it does not produce legal or similarly significant effects on individuals. You may object to automated processing related to your own data by contacting us using the details in Section 17.

10. Data Retention

We keep personal information only as long as reasonably necessary for the purpose it was collected — typically, contact and discovery call submissions are retained while we're in active conversation with you and for a reasonable follow-up period afterward; newsletter subscriptions are kept until you unsubscribe; client engagement data is retained for the duration of the engagement and for a period afterward as required for accounting, legal, or contractual reasons, after which it is deleted or anonymized.

11. Data Security

We use reasonable technical and organizational measures to protect personal information — including encrypted transmission (HTTPS), access controls limiting who on our team can view submitted data, and rate limiting on our contact form to guard against abuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to keep your information appropriately protected and to respond quickly if that ever changes.

12. International Data Transfers

We are based in Nigeria, but some of the tools we rely on to run this website and our services (such as hosting, email delivery, and analytics providers) may process data outside Nigeria, including in the United States or the European Union. Where personal data is transferred internationally, we take reasonable steps to ensure it receives a comparable standard of protection, consistent with NDPA requirements for cross-border data transfer.

13. Your Privacy Rights

Subject to applicable law — including the NDPA for data subjects in Nigeria, and the GDPR or CCPA where they apply to you — you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your information, subject to legal or contractual retention needs.
• Object to or restrict certain processing, including direct marketing.
• Withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal.
• Request a portable copy of information you provided to us.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng, or your local data protection authority.

To exercise any of these rights, contact us at hello@ruthexdigital.com. We aim to respond within the timeframe required by applicable law (for example, within 45 days under NDPA guidance), and may need to verify your identity before acting on a request.

14. Children's Privacy

Our website and services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

15. Third-Party Links

This website may link to third-party sites and platforms — including the ad, social, and analytics platforms referenced above. We are not responsible for the privacy practices of those third parties; please review their own privacy policies.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, tools, or legal requirements. We'll update the "Last updated" date above, and for material changes, we'll take reasonable steps to let you know — such as a notice on this website or an email if you've provided one.

17. Contact Us

If you have any questions about this Privacy Policy or want to exercise your privacy rights, reach us at hello@ruthexdigital.com or +234 800 000 0000. Our registered place of business is Lagos, Nigeria.