Privacy Policy

1. Identity of the Data Controller

Brix & Masons LLP is the Data Controller in respect of personal data collected through this website. We are registered in the Federal Republic of Nigeria under RC: 7015820. All enquiries regarding this policy or your data rights should be directed to our designated Data Protection Officer via the contact details provided at the end of this document.

2. Data We Collect

We collect only the personal data necessary to fulfil the purposes described in this policy. This may include: your full name; business name and registration details; email address; telephone number; delivery or project site address; details of materials or services requested; and any other information you voluntarily provide in correspondence with us.

We may also collect non-personal technical data such as IP addresses, browser type, device identifiers, and page interaction data through standard web server logs and analytics tools, solely for the purpose of maintaining and improving our website.

3. Lawful Basis for Processing

We process your personal data on the following lawful bases as recognised under the NDPA 2023: (a) Contractual necessity — to process your order requests and deliver our procurement services; (b) Legitimate interests — to respond to enquiries, prevent fraud, and improve our services; (c) Legal obligation — to comply with applicable Nigerian laws and regulatory requirements; and (d) Consent — where you have expressly provided consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

4. How We Use Your Data

Your personal data is used exclusively to: process and fulfil procurement and order requests; communicate with you regarding your enquiries, orders, and service updates; verify your identity and the legitimacy of transactions; comply with legal, regulatory, and contractual obligations; and improve the functionality and content of our website.

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. Data Sharing and Third Parties

We may share your personal data with trusted third-party service providers who assist us in operating our website and delivering our services — including logistics partners, payment processors, and IT service providers — strictly on a need-to-know basis and subject to binding confidentiality and data processing agreements.

We may also disclose your data where required by law, court order, or the lawful directive of a competent regulatory authority in Nigeria. In all such cases, we will disclose only the minimum information necessary.

6. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Order and transaction records are retained for a minimum of six (6) years in accordance with Nigerian commercial and tax law. Data collected solely for enquiry purposes is retained for no longer than two (2) years from the date of last contact, unless a business relationship is established.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted data transmission (SSL/TLS), access controls, and regular security reviews.

However, no method of transmission over the internet or electronic storage is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security. You transmit data to us at your own risk.

8. Your Rights as a Data Subject

Under the NDPA 2023, you have the following rights in relation to your personal data: the right to be informed about how your data is used; the right of access to your personal data; the right to rectification of inaccurate or incomplete data; the right to erasure (right to be forgotten) where processing is no longer necessary or lawful; the right to restrict or object to processing; the right to data portability; and the right to withdraw consent at any time.

To exercise any of these rights, please contact our Data Protection Officer using the details at the end of this policy. We will respond to all verified requests within 30 days. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng.

9. Limitation of Liability — User Responsibility

Brix & Masons LLP, its directors, employees, agents, and affiliates shall not be held liable for any loss, damage, or harm arising from: (a) the submission of inaccurate, false, or misleading information by the user; (b) the user's failure to safeguard their own login credentials, communication channels, or devices; (c) unauthorised access to the user's systems or accounts resulting from the user's own negligence; (d) the user's reliance on information obtained from this website without independent verification; or (e) any action or omission by the user that contravenes applicable law or these terms.

Users are solely responsible for ensuring that any information they submit to Brix & Masons LLP is accurate, complete, and lawfully provided. Brix & Masons LLP accepts no responsibility for delays, errors, or losses arising from incorrect or incomplete information supplied by the user.

To the fullest extent permitted by Nigerian law, Brix & Masons LLP's total liability to any user in connection with this website or the services described herein shall not exceed the value of the specific transaction giving rise to the claim, or NGN 50,000 (fifty thousand naira), whichever is lower.

10. Cookies and Tracking Technologies

This website may use cookies and similar technologies to enhance your browsing experience and collect anonymous usage statistics. Essential cookies necessary for the website to function are placed automatically. Non-essential cookies (such as analytics cookies) are only placed with your consent, which you may withdraw at any time by adjusting your browser settings.

11. Children's Privacy

Our website and services are intended for business and commercial use by adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data to us, please contact us immediately and we will take prompt steps to delete such data.

12. Changes to This Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal obligations, or regulatory requirements. The revised policy will be published on this page with an updated effective date. Your continued use of this website following any such changes constitutes your acceptance of the revised policy.

13. Contact & Data Protection Officer

For all data protection enquiries, requests to exercise your rights, or complaints, please contact:

Data Protection Officer Brix & Masons LLP Lagos, Nigeria Email: [email protected] RC: 7015820