Privacy Policy
Effective date: 29 October 2026. Last updated: 29 October 2026.
This policy explains how we collect and use your personal information when you visit our website, contact us, or buy our services. We have tried to keep it short and in plain words. If anything is unclear, please email us at hello@mykehanz.com.
1. Who we are
We are MYKEHANZ DIGITAL SOLUTIONS LIMITED, a private company limited by shares, registered in Nigeria with the Corporate Affairs Commission (RC 9966246). We trade as “Mykehanz Digital Solutions”. In this policy, “we”, “us” and “our” mean this company.
- Address: Shop 5, Fejab Plaza, Prof’s Avenue Junction, Spibat Road, Mbieri, Owerri, Imo State, Nigeria.
- Email: hello@mykehanz.com
- Website: www.mykehanz.com
- Founder and Director: Odinaka Michael Ohanele
- Data protection contact: Odinaka Michael Ohanele, Director, hello@mykehanz.com
We are the “data controller” for the personal information described here. This means we decide how and why it is used.
Our business is run online. It is managed from the United Kingdom, and our services are for customers in Nigeria. This affects where your information is handled (see section 7).
2. The law we follow
We follow the Nigeria Data Protection Act 2023 (NDPA) and the General Application and Implementation Directive 2025 (GAID) issued by the Nigeria Data Protection Commission (NDPC).
Because our business is managed from the United Kingdom, the UK GDPR may also apply to some of our handling of your information. Where it does, you have similar rights under that law.
3. What information we collect
We only ask for what we need. Depending on how you deal with us, we may collect:
When you contact us or ask for a quote
- Your name, email address and phone number (if you give it).
- What you need, which service or package you are interested in, and any messages you send us.
- If you use the enquiry form on this website: the contact detail you give us to reply to, the package you choose, the outcome you describe and the optional target and notes you add. The form does not take file uploads. Please do not put documents or identity numbers in it.
When you buy a service
- The details needed to agree and deliver your order: your name, contact details, the brief, and the files and information you give us for the work.
- For Career Documents: your work history, education, skills, career goals and, for the Complete package, a photo of yourself if you choose to send one. A CV can sometimes show sensitive details (for example health, religion or a disability). Please only include these if you really want them in your documents.
- For Business Presentations and Professional Reports: your business material. This may include names of staff, customers or other people. Please only send personal details of other people if you are allowed to share them and they are needed for the work.
- For UK Study & Relocation Research: basic details about the adult student, the subject, the study start date and preferences. We do not ask for passports, transcripts, visa files or bank statements for this service.
- If you buy for a business: the business name and your role.
Payment information
- Details of your bank transfer, such as the payer’s name, amount, date and reference, so we can match your payment and issue a receipt. If you tell us on your order page that you have paid, we keep the transfer reference and payer name you give. We do not collect card numbers, bank passwords or PINs.
When you visit our website
- Basic technical information that our hosting provider records to keep the site working and secure, such as your IP address, browser type and the pages requested. See section 11 on cookies.
- When you send an enquiry or report a payment, our ordering system also keeps a one-way, keyed fingerprint of your IP address (not the address itself) for a short time to limit abuse.
What we ask you not to send. Please do not send passwords, one-time codes (OTPs), full bank statements, ID documents, or sensitive information about yourself or other people unless we have asked for it and agreed a safe way to send it.
4. Why we use your information and our lawful basis
Under the NDPA we must have a lawful reason (a “lawful basis”) for each use.
| What we do | Why | Lawful basis |
|---|---|---|
| Reply to your enquiry and prepare a quote | To answer you and tell you what we can do | Steps you asked for before a contract; or our legitimate interest in answering enquiries |
| Agree, deliver and support your order (including revisions and corrections) | To do the work you paid for | Contract |
| Take payment, issue receipts and keep accounts | To get paid and keep proper records | Contract and legal obligation (tax and company law) |
| Handle complaints, refunds and disputes | To put things right and protect our legal position | Contract, legal obligation, and legitimate interests |
| Keep the website and our systems secure | To stop misuse and fraud | Legitimate interests |
| Use sensitive information you choose to include (for example in a CV) | Only where it is needed for your documents | Your explicit consent. You can withdraw it at any time |
| Send you news or offers | Only if you ask to receive them | Consent. We do not send marketing unless you ask for it |
We do not sell your personal information.
5. How we use AI and automation
We are an AI-assisted business with human review. This is how it works:
- We use AI tools to help with drafting, organising, checking wording and research. Our current AI tools are ChatGPT (OpenAI) and Claude (Anthropic).
- A human always checks and approves. Our founder agrees the scope of each order, reviews the final work and approves it before it is released to you. AI does not make final decisions about you.
- We do not use AI to make decisions that have legal or similarly significant effects on you (for example, deciding whether to accept you as a customer) without a human decision.
- We keep personal details out of AI tools where we can. We will not put your personal information into an AI tool unless suitable data protection terms are in place with that provider, and we will tell you before your order starts how AI will be used for it.
- We may use an automation tool (Make) to move information between our systems, for example to log enquiries. It is not used for client personal data. If this changes, we will update this policy first.
- AI output can be wrong. That is why we check facts against the information you give us and against the sources we cite.
6. Who we share your information with
We share your information only when needed, with:
Service providers who work for us (“processors”). They may only use your information to provide their service to us:
- Zoho (Zoho Mail): our business email. Hosted in Zoho’s EU data centre (zoho.eu). Zoho support staff, including in India, may be able to access it for support.
- AI providers: OpenAI (ChatGPT) and Anthropic (Claude). See section 5.
- Make: workflow automation. Not used for client personal data.
- Google (Gmail and Google Drive): storing company records and documents.
- Microsoft (Microsoft 365 and OneDrive): editing and storing Word and PowerPoint files.
- Cloudflare: hosting and security for our website, and the database that holds the enquiry and order records you submit through the website.
- Video call tools (Zoom, Microsoft Teams or Google Meet), only if we agree a call with you. We do not record calls unless we agree it with you first.
Payment providers. When you pay by bank transfer, your bank and the bank holding the account shown on your order page or invoice process the payment. We do not use a card payment gateway. If we add one, we will update this policy.
Others, only where needed:
- Our professional advisers (for example lawyers and accountants).
- Government bodies, regulators, courts or the police, where the law requires it.
- A buyer of our business, if the business is ever sold, under the same protections.
We do not publish your documents, photos or work as examples without your separate written permission.
7. Sending information outside Nigeria
Some of the people and tools we use are outside Nigeria. This means your information may be accessed or stored in:
- the United Kingdom, where the business is managed and work is reviewed;
- the European Union, where Zoho stores our email;
- India, for possible Zoho support access;
- the United States and other countries, where our AI, cloud, hosting and automation providers operate.
Under sections 41 to 43 of the NDPA, we may only transfer personal information out of Nigeria where the country or the recipient gives an adequate level of protection (for example through binding contract clauses), or where another condition in the Act applies (for example where the transfer is needed to perform our contract with you, or you have given informed consent). We will record the basis for each transfer.
You can ask us for more details about these transfers and the safeguards we use (see section 13).
8. How long we keep your information
We keep information only as long as we need it:
| Information | How long |
|---|---|
| Enquiries that do not become orders | 90 days from the last substantive contact. An automatic reply or a reminder does not restart this period |
| Working files for your order (drafts, your source material) | We do not collect working files through this website. Before we ask you for any, we will tell you how long we will keep them |
| Final delivered files | Only as long as needed to support you, deal with any complaint or claim, and meet legal duties. We do not yet publish a fixed period |
| Order, payment, invoice and tax records | At least 6 years after the tax year they relate to, as Nigerian tax law requires |
| Complaint and refund records | Only as long as needed to deal with the complaint or refund and any later claim. We do not yet publish a fixed period |
We may keep information longer if the law requires it, or if it is needed for an open complaint or legal claim. Copies in our providers’ backups may take extra time to be deleted.
9. How we keep your information safe
We use sensible security steps, including:
- strong passwords on our accounts;
- encrypted devices;
- giving access only to people and tools that need it;
- asking you not to send passwords or ID documents by email.
No system is completely secure. If a data breach is likely to put your rights at risk, we will report it to the NDPC within 72 hours of becoming aware of it, as the NDPA requires. If the risk to you is high, we will tell you straight away in plain language.
10. Your rights
Under the NDPA you have the right to:
- be told how we use your information (this policy);
- get a copy of the personal information we hold about you;
- correct information that is wrong or incomplete;
- have information deleted where we no longer have a good reason to keep it;
- restrict how we use your information in some cases;
- object to our use of your information, including for direct marketing;
- take back your consent at any time, where we rely on consent (this does not affect what we did before);
- receive your information in a common format and have it sent to another organisation (data portability), where this applies;
- not be subject to a decision based only on automated processing that has legal or similarly significant effects on you.
To use any of these rights, email hello@mykehanz.com (please put “Privacy request” in the subject line). We may ask you to confirm your identity. We will reply without undue delay and within the time the law allows, and we will not charge you unless the law allows it.
Complaints. If you are unhappy with how we handle your information, please tell us first so we can try to put it right. You also have the right to complain to the Nigeria Data Protection Commission (NDPC) at any time: ndpc.gov.ng.
If your complaint is about processing linked to the UK (where the business is managed), you may also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, as well as to the NDPC.
11. Cookies
Cookies are small files a website saves on your device.
- We do not use advertising or tracking cookies, and we do not use analytics on our website. The pages of this website do not set cookies or use browser storage of their own.
- Our hosting and security provider (Cloudflare) may set strictly necessary cookies to keep the site secure and working. These do not track you for advertising.
If we ever add analytics or other non-essential cookies, we will update this policy and ask for your consent first where the law requires it.
12. Children
Our services are for adults aged 18 or over. We do not knowingly collect personal information from children. If you think a child has sent us information, please email us and we will delete it.
13. Contact us
For any question about this policy or your information:
- Email: hello@mykehanz.com
- Post: MYKEHANZ DIGITAL SOLUTIONS LIMITED, Shop 5, Fejab Plaza, Prof’s Avenue Junction, Spibat Road, Mbieri, Owerri, Imo State, Nigeria.
- Data protection contact: Odinaka Michael Ohanele, Director, hello@mykehanz.com
14. Changes to this policy
We may update this policy when our services, tools or the law change. We will post the new version on this page with a new “last updated” date. If a change is important, we will tell customers with open orders by email.
15. Effective date
This policy takes effect on 29 October 2026.
