Privacy Policy

1. Introduction

Xslain Innovations ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over it, in line with the Nigeria Data Protection Act 2023 and other applicable laws.

2. Information We Collect

• Account data: name, email address, phone number, billing address and login credentials.
• Order data: services purchased, payment history and invoices.
• Technical data: IP address, browser type, device information and cookies.
• Correspondence: messages you send via live chat, tickets or email.
• Domain data: domain names you register, transfer or check, and related WHOIS details where required by registries.

3. How We Use Your Data

• To provide, operate and maintain the services you purchase.
• To process payments and prevent fraud.
• To send service notifications, invoices, renewals and security alerts.
• To provide customer support and respond to enquiries.
• To comply with legal obligations (e.g. domain registry requirements, tax and anti-fraud laws).
• With your consent, to send marketing communications — you can opt out at any time.

4. Legal Basis for Processing

We process personal data on the following bases: performance of a contract with you (providing the services you ordered), compliance with legal obligations, our legitimate interests (security, fraud prevention, service improvement), and your consent where required (e.g. marketing).

5. Cookies & Tracking

We use cookies and similar technologies to keep you signed in, remember your preferences (language, currency), secure our site, and understand how visitors use the website. You can control cookies through your browser settings and our cookie banner.

Third-party cookies may be set by services we integrate (e.g. analytics or chat widgets). See our cookie banner for details and your choices.

6. Data Sharing & Disclosure

We do not sell your personal data to third parties.

• Domain registries and ICANN-accredited registrars, where required to register or manage a domain.
• Payment processors, to complete transactions (we never store full card numbers).
• Service providers that help us operate (e.g. infrastructure, email delivery) under strict confidentiality.
• Law enforcement or regulators, where we are legally required to do so.

7. Data Retention

We retain personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, tax and record-keeping obligations. Where we are required by law (e.g. domain registry obligations), data may be retained for the mandated period.

8. Your Rights

To exercise any of these rights, contact our support team. We will respond within the timeframe required by applicable law.

• Access a copy of the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data (subject to legal retention requirements).
• Object to or restrict certain processing, including marketing.
• Data portability — request your data in a structured, machine-readable format.

9. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and monitoring. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. International Transfers

Some of our infrastructure and service providers may be located outside Nigeria. Where data is transferred internationally, we ensure appropriate safeguards are in place to protect your data.

11. Children\u2019s Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via your account or on this page, with the effective date shown at the top.

13. Contact Us

For privacy questions or to exercise your rights, contact us through the Contact page or open a ticket in your client portal.