Privacy Policy

1. Introduction & Overview

FOTASCO SECURITY SERVICES ("FOTASCO", "we", "our", or "us") operates the website https://www.fotascosecurityservices.info and provides professional security guard, surveillance, event safety, and site protection services across Nigeria. We are committed to safeguarding the personal data entrusted to us by clients, job applicants, guarantors, employees, and website visitors in full compliance with the Nigeria Data Protection Act (NDPA) 2023 and applicable regulatory standards.

2. Information We Collect

We only collect personal information that is directly necessary to deliver security services, evaluate employment applications, verify guarantors, and respond to inquiries. The categories of information collected include:

• Job Applicants & Guards: Full name, nickname, date of birth, place of birth, nationality, state of origin, LGA, gender, marital status, residential address, permanent address, phone number, email address, next-of-kin details, emergency contact information, professional security skills, education records, employment history, referee contacts, passport photograph, identity cards, and authorized background/medical certificates.
• Guarantors: Full name, phone number, email, residential/workplace address, occupation, employer/business name, Bank Verification Number (BVN), National Identification Number (NIN), relationship duration to applicant, financial/declaration acknowledgment, signature photograph, passport photo, and utility bills.
• Clients & Service Inquiries: Full name, company/organization name, email address, telephone number, alternative phone, physical location, deployment schedule (dates/times), number of guards requested, event details, and specific operational security requirements.
• Support & Communications: Messages submitted via contact forms, support tickets, application reference numbers, and voluntary customer reviews/ratings (1–5 stars with optional feedback photos/videos).
• Technical & Session Data: Essential security cookies (CSRF tokens, session IDs), IP addresses, browser user agents, and audit logs recorded strictly for security, rate-limiting, and abuse prevention.

3. Legal Basis & Purposes of Processing

FOTASCO processes your information under the following lawful grounds:

• Contractual Performance: To review security requirements, issue quotations, deploy security personnel, manage contracts, and deliver physical protection services.
• Employment & Vetting Verification: To assess applicant suitability, confirm background/referee authenticity, verify guarantor accountability, and maintain operational discipline.
• Legitimate Interests: To maintain site safety, prevent unauthorized platform access, prevent fraud, and audit internal system activity.
• Legal Compliance: To comply with Nigerian regulatory, employment, and security licensing statutes.

4. Data Storage, Security & Retention

FOTASCO enforces rigorous technical and organizational safeguards to protect personal data:

• Confidential Document Storage: Sensitive applicant documents, identification credentials, and guarantor records are stored in authenticated, private cloud storage with restricted access.
• Encrypted Transmission: All web traffic is encrypted using modern TLS/HTTPS protocols (HSTS enabled).
• Access Controls: Only authorized administrative and operations personnel with role-based access permissions can view applicant or client data.
• Retention Periods: Service requests and employment records are retained only as long as necessary to fulfill operational, vetting, and regulatory obligations, after which records are securely archived or expunged.

5. Third-Party Service Providers

We work with vetted technology providers strictly to support application hosting, secure data storage, and communications:

• Hosting & Infrastructure: Web service hosting provided via Render; database management hosted securely via Supabase PostgreSQL.
• Media & Document Storage: Cloudinary for encrypted media and private authenticated document management.
• Service Monitoring: Lightweight uptime monitoring services (e.g., UptimeRobot) pinging non-sensitive health check endpoints.
• Email Notification: Secure SMTP email infrastructure for transaction and administrative notifications.

We do not sell, rent, trade, or monetize personal data to any third-party marketing companies.

6. Cookies & Technical Tracking

We only use essential security and session cookies required for core website functionality:

• csrftoken: Protects forms from Cross-Site Request Forgery (CSRF).
• sessionid: Maintains authenticated administrator sessions securely.

We do not utilize invasive tracking pixels, ad networks, or third-party behavioral profiling cookies.

7. Your Data Protection Rights

Under the Nigeria Data Protection Act, you have rights regarding your personal information, including:

• The right to request access to personal data held about you.
• The right to request correction of incomplete or inaccurate records.
• The right to request deletion of records where retention is no longer legally required.
• The right to object to or restrict processing under certain conditions.

8. Contact & Data Protection Inquiries

If you have questions regarding this Privacy Policy, wish to exercise your data rights, or have a privacy-related inquiry, please contact our administrative desk: