Privacy notice
How Entrustt handles personal data on this website, and the rights people have over it.
1. Who this notice is from
This notice is from Remayn Labs Technology Limited ([RC number]), [registered address], the company behind Entrustt ("Remayn", "we", "us"). It explains how we handle personal data under the Nigeria Data Protection Act 2023 and the General Application and Implementation Directive 2025 issued by the Nigeria Data Protection Commission ("NDPC").
Our data protection officer is [name]. Contact: [privacy email, for example hello@remayn.co].
2. Two roles: our website, and our customers' data
On this website, we are the controller. This notice covers the personal data of people who visit this website, contact us, book a call or ask for sandbox access.
For banks, fintechs, insurers, pension administrators and registrars that use Entrustt, we are their processor. We handle the personal data of their customers and of the people those customers name as next of kin only on the instructions of the institution, under a data processing agreement. The institution decides why that data is used and is the controller. If your details are in Entrustt because a bank or other institution put them there, ask that institution first about your data and your rights. You may also write to us, and we will pass your request to the institution and help it respond.
3. What we collect, why, and on what basis
| What | Why | Lawful basis |
|---|---|---|
| Name, work email, phone number, company, role and your message, when you use a contact, sandbox or security-pack form | To reply, to call you about your request, to set up a conversation or sandbox access | Your request, and our legitimate interest in running our business |
| Details you give when you book a call through Cal.com | To arrange and hold the meeting | Your request |
| Basic visit data: page address, referring page, browser, device type, and approximate country | To see which pages are useful and fix problems | Our legitimate interest. We use cookieless analytics and do not store your IP address (see our cookie notice) |
| Messages you send about security, privacy or a vulnerability | To investigate and reply | Our legitimate interest and legal obligations |
| Business contact details of people at our customers and partners | To manage the relationship, invoicing and support | Contract and legitimate interest |
4. What we ask you not to send
Please do not put sensitive personal data, such as health details, or identity or bank numbers, in our contact forms. We do not need them to talk to you.
6. Moving data outside Nigeria
Some of these providers process data outside Nigeria, in the United States and the European Union. We transfer personal data out of Nigeria only where the Nigeria Data Protection Act 2023 allows it, for example where the recipient gives protection that is substantially similar to the Act, under a contract with the provider, or with your informed consent. We record the basis for each transfer. For Customer Data held in Entrustt, hosting location is set out in the data processing agreement.
7. How long we keep it
- Contact and sandbox form messages: [12 months] after our last contact with you. If we start working together, we keep them for the length of the relationship and then for [24 months].
- Booking records: [24 months].
- Visit statistics: kept in aggregated form for [24 months].
- Security and vulnerability reports: as long as needed to deal with them, and then for [24 months].
8. Your rights
Under the Nigeria Data Protection Act 2023 you have the right to:
- know whether we process your data and get a copy;
- have wrong data corrected, and in some cases erased or restricted;
- object to processing, including direct marketing;
- withdraw consent at any time, as easily as you gave it;
- receive your data in a structured, commonly used, machine-readable format;
- not be subject to a decision based only on automated processing that significantly affects you, and to ask for a person to review one.
To use a right, write to us at the contact above. We answer without undue delay.
We do not make decisions about you using automated processing on this website.
9. Complaints
If you are unhappy, tell us first, and we will try to put it right. You may also complain to the Nigeria Data Protection Commission.
Nigeria Data Protection Commission, 1919 Cadastral Zone C06, Mbora District, Life Camp, Abuja. Email info@ndpc.gov.ng. Website ndpc.gov.ng.
10. Children
This website is for businesses. It is not meant for children, and we do not knowingly collect data from them.
11. People who have died
Entrustt exists for situations where a customer has gone quiet or has died. We treat information about a person who has died, or who may have died, with the same care as the information of a living person, and we do not rely on an exemption for it. How an institution may use that information is set by its own legal duties and the data processing agreement.
12. How we protect it
We use technical and organisational measures to protect personal data, including encryption in transit, access controls and logging. Read more on our security page.
13. Changes to this notice
We will post changes here and change the date at the top. If a change is important, we will tell you directly where we can.