01 Who We Are

Northern Star Business Consulting ("NSBC," "We," "Us," or "Our") is a business consulting and digital products company registered in Nigeria. We help service-based businesses build revenue systems, client acquisition strategies, and operational infrastructure for consistent and scalable growth.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at northernstarbusinessconsult.com, purchase any of our products or services, or interact with us in any other capacity.

By using our website or purchasing from us, you confirm that you have read and understood this Privacy Policy and consent to the practices described herein. If you do not agree with any part of this policy, please discontinue use of our website and services.

This policy is prepared in compliance with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act (NDPA).

02 Information We Collect

We collect the following categories of personal information:

Identity Information: Your full name, business name, and job title or role where provided.

Contact Information: Your email address, phone number, and any other contact details you provide when reaching out to us or completing a purchase.

Transaction Information: Details of products or services you have purchased from us, including the product name, purchase date, and payment reference number. Note that we do not store your card details or bank account information. All payment data is handled exclusively by Paystack.

Communication Information: Any information you share with us via email, social media, contact forms, or during consulting sessions, including questions, feedback, and correspondence.

Technical Information: Your IP address, browser type and version, device type, operating system, pages visited on our website, time spent on pages, and referring URLs. This information is collected automatically when you visit our website.

Marketing Preferences: Your preferences regarding receiving marketing communications from us, including whether you have opted in or out of our mailing list.

03 How We Collect Your Information

We collect your personal information through the following means:

• Direct interactions: When you make a purchase, fill out a contact or enquiry form, subscribe to our mailing list, book a consultation, or communicate with us directly via email or social media.
• Automated technologies: When you visit our website, we automatically collect certain technical information through cookies, web beacons, and similar tracking technologies.
• Third-party sources: We may receive limited information about you from third-party platforms such as social media networks if you engage with our content on those platforms or contact us through them.
• Payment processors: When you complete a purchase, Paystack processes your payment and provides us with a transaction confirmation and reference number. We do not receive your full payment card details from Paystack.

04 How We Use Your Information

We use your personal information for the following purposes:

• To process and fulfil your purchase, including delivering your digital product or scheduling your consulting session.
• To communicate with you about your order, provide customer support, and respond to your enquiries.
• To send you important transactional information such as payment confirmations, delivery notifications, and updates related to your purchase.
• To send you marketing communications, newsletters, and promotional offers where you have provided consent to receive such communications. You may withdraw this consent at any time.
• To improve our website, products, and services based on how users interact with them.
• To comply with our legal obligations under Nigerian law and applicable regulations.
• To detect, prevent, and address fraud, security issues, and technical problems.
• To enforce our Terms and Conditions and protect the rights, property, and safety of NSBC and our clients.

We will not use your personal information for any purpose other than those stated above without first obtaining your explicit consent.

05 Legal Basis for Processing

Under the Nigeria Data Protection Regulation (NDPR), we are required to have a lawful basis for collecting and using your personal information. We rely on the following legal bases:

Contract: Processing is necessary to fulfil a purchase you have made or to take steps at your request before entering into a contract.

Consent: Where you have given us explicit consent to use your information for a specific purpose, such as receiving marketing communications.

Legitimate Interests: Where we have a legitimate business interest in processing your data, such as improving our website, preventing fraud, and maintaining the security of our systems, provided that your fundamental rights and interests are not overridden by those interests.

Legal Obligation: Where processing is necessary for us to comply with a legal or regulatory obligation.

06 How We Share Your Information

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes. We may share your information only in the following limited circumstances:

• Service providers: We may share your information with trusted third-party service providers who assist us in operating our website, processing payments, delivering products, or communicating with you. These providers are contractually required to handle your data securely and only for the purpose of providing services to NSBC.
• Payment processors: Your payment information is shared with Paystack solely for the purpose of processing your transaction. Paystack operates its own privacy policy which governs how your payment data is handled.
• Legal requirements: We may disclose your information where required to do so by law, court order, or regulatory authority, or where we believe disclosure is necessary to protect the rights, safety, or property of NSBC, our clients, or others.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of NSBC's business, your personal data may be transferred as part of that transaction. We will notify you of any such transfer and the options available to you.

07 Payment Processing

All payments made on our website are processed exclusively through Paystack, a PCI DSS-compliant payment processor. When you complete a purchase, your payment card details, bank account information, and related financial data are entered directly into Paystack's secure payment interface.

NSBC does not collect, store, or have access to your full payment card number, CVV, PIN, or any other sensitive financial authentication data. The only payment-related information we receive from Paystack is a transaction confirmation and a reference number to identify your purchase.

For information on how Paystack handles your payment data, please refer to Paystack's Privacy Policy available at paystack.com.

08 Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and understand how visitors interact with our content.

What are cookies? Cookies are small text files stored on your device when you visit a website. They allow the website to remember your preferences and actions over a period of time.

We use the following types of cookies:

• Essential cookies: Necessary for the website to function correctly. These cannot be disabled.
• Analytics cookies: Help us understand how visitors use our website so we can improve the user experience. We may use tools such as Google Analytics for this purpose.
• Functional cookies: Remember your preferences and personalise your experience on our website.
• Marketing cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns. These are only set where you have given consent.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For more information on managing cookies, refer to your browser's help documentation.

09 Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations.

For purchasing customers, we retain your transaction and contact information for a minimum of six years in line with standard business record-keeping requirements under Nigerian law.

For marketing contacts who have not made a purchase, we retain your information until you withdraw your consent or unsubscribe from our communications.

When your personal data is no longer required, we will securely delete or anonymise it so that it can no longer be used to identify you.

10 Your Rights

Under the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act (NDPA), you have the following rights in relation to your personal data:

• Right of Access: You have the right to request a copy of the personal information we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Erasure: You have the right to request that we delete your personal data where there is no longer a legitimate reason for us to hold it, subject to any legal obligations that require us to retain it.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to request that we transfer your personal data to you or to a third party in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for marketing purposes at any time. You may also object to processing based on our legitimate interests.
• Right to Withdraw Consent: Where we process your data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

11 Data Security

We take the security of your personal information seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration.

These measures include secure HTTPS connections on our website, restricted access to personal data within our team, and the use of trusted, reputable third-party service providers who maintain their own security standards.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant regulatory authority as required by law.

12 Children's Privacy

Our website and services are not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal information from anyone under the age of 18.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at info@northernstarbusinessconsult.com and we will take steps to delete that information from our records.

13 Third Party Links

Our website may contain links to third-party websites, social media platforms, or external resources. These links are provided for your convenience and do not signify our endorsement of those websites or their content.

We have no control over the content or privacy practices of third-party websites. We strongly encourage you to review the privacy policy of any website you visit through a link on our platform. NSBC accepts no responsibility or liability for the privacy practices or content of any third-party website.

14 Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or regulatory obligations. When we make changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after any update to this policy constitutes your acceptance of the revised terms.

For significant changes that materially affect how we process your personal data, we will make reasonable efforts to notify you directly via the email address associated with your account or purchase.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please do not hesitate to contact us.