Privacy Policy

1. Who this covers

This policy covers personal data collected through Zimcrest Technologies (RC 1656249, Abuja, Nigeria)’s public marketing website: the contact form, the “Start Your Build” enquiry form, and job applications submitted through a role listing. It does not cover any client project we build or operate separately, which is governed by that engagement’s own agreement.

2. What we collect, and why

Each form collects only what it needs to act on your enquiry:

• Contact form — name, email, company, and your message.
• Start Your Build — name, work email, company, role, country, what you are building, budget band, timeline, and whether you have an existing team.
• Job application — name, email, phone, LinkedIn and portfolio links, a cover note, and your CV as a PDF. If you tick the box to stay in our talent pool, we keep your application on file for future roles for longer than we otherwise would (see §4).

Every submission is also checked against a spam filter (a hidden field a real visitor never fills in) and a bot-verification challenge (Cloudflare Turnstile) before it is stored. Your IP address is used briefly to enforce a rate limit against automated abuse; it is never stored in raw form. It is passed through a one-way cryptographic function (HMAC) combined with a secret value we hold, before the result is stored — the stored value cannot be turned back into your IP address, and cannot be linked across sites or matched against your IP address by anyone without that secret.

3. Where it is stored

Enquiries and applications are written to a database (Neon, running Postgres) that only our servers can query — never to the content system that runs the rest of this website. That system (Sanity) holds only public marketing content — service descriptions, case studies, blog posts, job listings — and is readable by anyone who asks it; deliberately, it never holds personal data.

CVs are stored as private files in Vercel Blob storage. They are not reachable by a public URL — retrieving one requires a short-lived, cryptographically signed link that our servers generate only when we choose to look at it.

If our email provider (Resend) is unreachable when you submit a form, your enquiry is still saved to the database first; the confirmation and notification emails are a second step that can fail without losing your submission.

4. How long we keep it

Each record is stored with a scheduled deletion date, set when it is created:

• Contact form enquiries — 12 months.
• Start Your Build enquiries — 24 months.
• Job applications — 6 months, or 24 months if you opted in to our talent pool.

5. Who else sees it

We use a small number of processors to run the forms above, and nobody else:

• Vercel — hosts the site, the database connection, and file storage.
• Neon — hosts the database your enquiry is written to.
• Resend — sends the internal notification and your confirmation email.
• Cloudflare — verifies you are not a bot before a submission is accepted.
• Sanity — hosts the public content on this site. It never receives personal data from these forms.

We do not sell personal data, and we do not share it with anyone for their own marketing purposes.

6. Cookies and analytics

No analytics or non-essential storage runs before you make a choice in the consent banner on your first visit. See our Cookie Policy for exactly what runs once you consent, and how to change your mind.

7. Your rights

Depending on where you are, you may have the right to access, correct, delete, or export the personal data we hold about you; to object to or restrict how we use it; and to withdraw consent at any time. We apply the stricter of Nigeria’s NDPR and the EU’s GDPR to every request, regardless of where you are. To exercise any of these, contact us using the details in §8 — we respond within 30 days, inside both NDPR’s and GDPR’s deadlines. If you are not satisfied with our response, you may complain to Nigeria’s Data Protection Commission or, for EU data subjects, your local supervisory authority.

8. Contact

Zimcrest Technologies (RC 1656249)
JF4, Sky Memorial Complex, Zone 5, Wuse
Abuja, Nigeria
hello@zimcrest.com

9. Changes

If we change how we handle personal data, we will update this page. This is not dated because it has not yet been through legal review — an effective date is added when it is published for real.