Privacy Policy

Effective Date: 2 October 2026
Last Updated: 2 October 2026
Website: www.excellium.biz

1. Introduction

Excellium is committed to respecting your privacy and protecting the personal information entrusted to us through our website, business operations, and interactions with our products and services.

This Privacy Policy explains how we collect, use, store, disclose, protect, and otherwise process personal information when you visit our website, submit an enquiry, request a consultation or product demonstration, register for a training programme, download resources, subscribe to communications, or engage with us through our digital platforms and other business channels.

Our privacy practices are guided by the Nigeria Data Protection Act, 2023 (NDPA), applicable regulations and guidance issued by the Nigeria Data Protection Commission (NDPC), and other relevant data protection laws where applicable.

We are committed to processing personal information lawfully, fairly, transparently, and securely, and to collecting only information that is adequate, relevant, and necessary for specified and legitimate purposes.

This Privacy Policy is intended to inform you about our personal information processing activities. Where consent is required for a particular activity, we will request it separately and provide you with the information necessary to make an informed decision.

This policy applies to personal information processed by Excellium in connection with its website and related business activities. Additional privacy notices or contractual provisions may apply to specific products, services, training programmes, or business engagements.

2. Who We Are

Excellium Business Limited is responsible for determining the purposes and means of processing personal information collected through its website and related business activities, except where it processes information on behalf of a client as a data processor.

Our contact details are:

Company: Excellium Business Limited
Office Address: 83 CMD Road, Opposite Second Coming Gas Station, Beside Esporta Suite, Magodo, Lagos, Nigeria.
Email: contactus@excellium.biz
Telephone/WhatsApp: +234 803 802 3199
Website: www.excellium.biz

For questions, requests, or complaints concerning this Privacy Policy or our handling of personal information, please get in touch with us using the details above.

3. Scope of This Privacy Policy

This Privacy Policy applies to individuals whose personal information we collect or process through:

Our corporate website and associated landing pages.
Contact, enquiry, consultation, and callback request forms.
Product demonstration and free trial request forms.
Training registration and workshop enquiry forms, including Excellium Academy programmes.
Brochure, e-book, guide, and other resource download forms.
Newsletter and marketing subscription forms.
Email, telephone, WhatsApp, and other business communication channels.
Social media platforms through which we engage with prospective or existing customers.
Digital advertising, remarketing, analytics, and campaign measurement tools.
Customer onboarding, service delivery, support, and related business interactions.

It also applies to information we receive from business representatives, prospective clients, customers, training participants, suppliers, and other individuals who interact with Excellium in a professional capacity.

4. Personal Information We Collect

The information we collect depends on how you interact with us, the services you request, and the information you choose to provide.

4.1 Information You Provide Directly

When you complete a form, contact us, or engage with our services, we may collect the following categories of information:

Identity and contact information

Full name.
Business email address.
Telephone or WhatsApp number.
Company or organisation name.
Job title, department, or professional role.
Business address or location, where relevant.

Enquiry and service information

The product, service, or solution you are interested in.
Your business requirements, challenges, or operational needs.
Preferred consultation or demonstration dates.
Information provided in enquiry messages or consultation requests.
Relevant details about your organisation or intended use of our solutions.

Training and event information

Preferred course or workshop.
Training format, such as virtual or onsite.
Registration details.
Attendance and participation records.
Certificate or completion information, where applicable.
Payment references and related administrative records.

Communication preferences

Newsletter and marketing subscription choices.
Preferred communication channels.
Consent and opt-out records.
Responses to surveys, feedback forms, or other voluntary communications.

We encourage you to provide only information that is relevant to your enquiry or requested service.

4.2 Information Collected Automatically

When you visit our website, certain technical information may be collected automatically through cookies, analytics tools, server logs, and similar technologies.

This information may include:

Internet Protocol (IP) address.
Browser type and version.
Device type and operating system.
Approximate geographical location derived from your IP address.
Pages visited and time spent on those pages.
Referring websites or traffic sources.
Navigation patterns and interactions with website elements.
Date and time of visits.
Technical diagnostics, error reports, and performance information.
Cookie identifiers and other online identifiers.

We use this information to understand website performance, improve user experience, monitor security, and measure the effectiveness of our digital activities.

Where required by law, we will obtain your consent before placing non-essential cookies or activating technologies that collect personal information for analytics or advertising purposes.

4.3 Information Received from Third Parties

We may receive information about you from third parties where permitted by law and relevant to our business activities.

These sources may include:

LinkedIn Lead Generation Forms and other social media lead generation tools.
Advertising and campaign platforms.
Business partners and authorised referral sources.
Customer relationship management (CRM) platforms.
Event registration and training platforms.
Organisations that engage us to provide services to their employees or representatives.
Publicly available professional information, where relevant to a legitimate business enquiry.

Where information is obtained from a third party, we will process it in accordance with applicable data protection requirements and the purposes for which it was obtained.

5. How and Why We Use Your Personal Information

We process personal information for specific, legitimate, and clearly defined purposes.

5.1 Responding to Enquiries

We use your contact and enquiry information to:

Respond to questions about our products and services.
Understand your business requirements.
Provide relevant information about solutions and pricing.
Arrange consultations, meetings, or product demonstrations.
Follow up on requests you have made.
Connect you with the appropriate member of our team.

5.2 Delivering Products and Services

Where you engage Excellium for a service, we may use your information to:

Prepare proposals and service agreements.
Facilitate onboarding and implementation.
Coordinate project activities.
Provide training, technical support, and customer assistance.
Communicate service updates.
Manage customer relationships.
Fulfil contractual obligations.

5.3 Training and Professional Development

For Excellium Academy and other training programmes, we process relevant information to:

Manage course enquiries and registrations.
Confirm participation and payment status.
Communicate schedules and programme requirements.
Provide access to training materials and virtual sessions.
Coordinate onsite training arrangements.
Maintain attendance records.
Issue certificates or other completion documentation, where applicable.
Collect feedback and improve future programmes.

5.4 Marketing and Business Communications

Where you have provided the necessary consent or another lawful basis applies, we may use your information to:

Share newsletters and educational resources.
Announce new products, services, training programmes, and events.
Provide relevant business insights and updates.
Communicate promotional offers.
Invite you to webinars, workshops, or other activities.
Deliver relevant advertising or remarketing campaigns.

We distinguish between communications necessary to respond to an enquiry or deliver a service and optional promotional communications.

Submitting a contact form, requesting a demonstration, or registering for a workshop does not automatically subscribe you to unrelated marketing communications.

5.5 Website Analytics and Improvement

We use technical and usage information to:

Understand how visitors interact with our website.
Identify popular pages and content.
Improve navigation, functionality, and accessibility.
Diagnose technical issues.
Evaluate the performance of landing pages and campaigns.
Improve the relevance and effectiveness of our digital content.

5.6 Security, Fraud Prevention, and Legal Compliance

We may process information to:

Protect our website, systems, employees, and customers.
Detect and investigate suspicious or unauthorised activities.
Prevent misuse of our forms and digital platforms.
Maintain business records.
Comply with applicable laws and regulatory requirements.
Establish, exercise, or defend legal claims.
Resolve disputes and enforce contractual rights.

6. Lawful Bases for Processing

Under the Nigeria Data Protection Act, 2023, personal information must be processed on a valid lawful basis.

Depending on the nature and purpose of the processing, Excellium may rely on one or more of the following:

Consent

Where you voluntarily agree to receive marketing communications, accept non-essential cookies, or participate in activities requiring consent.

Contractual necessity

Where processing is necessary to provide a service you have requested, fulfil an agreement, or take steps towards entering into a contract.

Legitimate interests

Where processing is necessary for our legitimate interests, including responding to relevant business enquiries, managing professional relationships, improving our services, and maintaining the security of our systems, provided that such interests are not overridden by your fundamental rights and freedoms.

Legal obligation

Where we must retain or disclose information to comply with applicable laws, tax requirements, accounting obligations, or lawful regulatory requests.

Other lawful grounds

Where applicable law permits processing in specific circumstances, including the protection of vital interests or other recognised lawful grounds.

Where we rely on legitimate interests, we consider the necessity of the processing and its potential impact on your rights and freedoms.

Where consent is the applicable lawful basis, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

7. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, scripts, and similar technologies to support its operation and improve your experience.

Cookies are small text files stored on your device when you visit a website. They help websites remember preferences, understand usage patterns, and support certain functionalities.

7.1 Types of Cookies We May Use

Strictly necessary cookies

These support essential website functions, such as security, navigation, form functionality, and session management. They cannot generally be disabled through our website without affecting essential functionality.

Functional cookies

These remember preferences and settings to provide a more consistent browsing experience.

Analytics and performance cookies

These help us understand how visitors use the website, identify technical issues, and measure website performance.

Advertising and measurement cookies

These may be used to measure advertising effectiveness, understand campaign interactions, and support relevant advertising or remarketing activities.

7.2 Third-Party Technologies

Depending on the tools activated on our website, these technologies may be provided by third parties, including analytics, advertising, social media, and website optimisation providers.

Their collection and use of information may also be governed by their respective privacy policies.

7.3 Managing Your Cookie Preferences

Where required, we will provide a cookie consent mechanism that allows you to accept, reject, or customise non-essential cookies.

You may also manage cookies through your browser settings. Disabling certain cookies may affect website functionality or your browsing experience.

Our cookie practices may be described in greater detail in a separate Cookie Policy or cookie preference interface.

8. Marketing Communications and Your Preferences

We value meaningful communication and respect your choice about how and when you receive information from us.

Where you have opted in to receive marketing communications, we may contact you through the channels you have selected, including:

Email.
WhatsApp.
SMS.
Other communication channels expressly authorised by you.

We will not treat a service enquiry as automatic consent to receive unrelated promotional messages.

You may withdraw your marketing consent or update your communication preferences at any time by:

Clicking the unsubscribe link included in an email, where available.
Replying to a marketing message with an appropriate opt-out request.
Contacting us at contactus@excellium.biz.

Once you opt out, we will stop sending the relevant marketing communications within a reasonable period, subject to technical and operational requirements.

We may retain a limited record of your opt-out preference to ensure that your decision is respected.

Please note that opting out of marketing does not prevent us from sending essential service communications, such as registration confirmations, contractual notices, payment-related messages, or responses to enquiries you have initiated.

9. How We Share Your Personal Information

We do not sell your personal information.

However, we may share relevant information with trusted third parties where necessary to operate our business, deliver services, fulfil contractual obligations, or comply with applicable law.

These recipients may include:

9.1 Internal Personnel

Authorised Excellium employees and representatives who require access to personal information to manage enquiries, sales, training, implementation, customer support, finance, administration, or compliance.

9.2 Technology and Service Providers

Third-party providers that support our operations, including:

Customer relationship management platforms.
Website hosting and infrastructure providers.
Cloud storage and document management services.
Email and business communication platforms.
Marketing automation and campaign management tools.
Website analytics and performance measurement providers.
Cybersecurity and technical support providers.

Where these providers process personal information on our behalf, we will take appropriate steps to ensure that their processing is governed by suitable contractual and legal safeguards.

9.3 Training and Delivery Partners

Where relevant, we may share necessary information with trainers, facilitators, event organisers, or delivery partners to coordinate training programmes, provide access to sessions, manage attendance, and fulfil service commitments.

9.4 Payment and Accounting Providers

Where you enroll in a paid programme or purchase a service, relevant information may be shared with payment processors, financial institutions, or accounting providers to confirm transactions, maintain records, and fulfil financial obligations.

We do not request or store payment card details through our ordinary website enquiry forms.

Where payment services are used, the relevant payment provider may process payment information under its own terms and privacy arrangements.

9.5 Advertising and Social Media Platforms

Where permitted by law and consistent with your preferences, we may use third-party tools or share limited information to measure campaign performance, manage advertising, or support relevant marketing activities.

Such platforms may independently process information under their own privacy policies.

9.6 Legal and Regulatory Authorities

We may disclose information where required by law, court order, regulatory obligation, or a lawful request from a competent authority.

We may also disclose information where reasonably necessary to establish, exercise, or defend legal claims or protect the rights, property, and safety of Excellium, our customers, or others.

10. Third-Party Websites and Platforms

Our website may contain links to external websites, applications, social media platforms, partner resources, or other third-party services.

These external platforms operate independently of Excellium and may have their own privacy policies, terms of use, and data collection practices.

This Privacy Policy does not govern the privacy practices of websites or services that we do not own or control.

We encourage you to review the privacy notices of third-party platforms before providing them with personal information.

Our inclusion of a link does not necessarily imply endorsement of the linked website or its privacy practices.

11. International Transfers of Personal Information

Some of the technology platforms and service providers we use may store or process personal information outside Nigeria.

Where personal information is transferred outside Nigeria, Excellium will ensure that the transfer is supported by a lawful basis under applicable data protection law and that the required level of protection is maintained.

Depending on the circumstances, this may involve:

An adequacy decision issued by the Nigeria Data Protection Commission.
An approved cross-border data transfer instrument.
Other lawful transfer conditions recognised under the Nigeria Data Protection Act, 2023.

Where applicable, we will take appropriate steps to ensure that personal information transferred internationally continues to receive an appropriate level of protection.

12. How Long We Retain Personal Information

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, meet applicable legal requirements, resolve disputes, and protect our legitimate business interests.

Retention periods may vary depending on the type of information and the nature of our relationship with you.

Our general retention approach is as follows:

Unconverted enquiries

We intend to retain enquiry information and related correspondence for up to six months after our last meaningful contact, unless a longer period is reasonably necessary for legal claims, compliance, or another lawful purpose.

Customer and contractual records

We retain these records for the duration of the business relationship and any additional period required for contractual, legal, accounting, or dispute-resolution purposes.

Training registration and attendance records

We retain these records for the period necessary to administer the programme and meet applicable recordkeeping obligations.

Financial and payment records

We retain these records for the period required by applicable tax, accounting, and financial regulations.

Marketing subscription records

We retain marketing details until you withdraw consent or unsubscribe, subject to applicable retention requirements.

Opt-out records

We may retain a limited record to ensure that your marketing preferences are respected.

Website analytics and technical logs

We retain these records for periods appropriate to the purpose of collection, security requirements, and applicable retention settings.

When information is no longer required, we will take reasonable steps to securely delete, anonymise, or otherwise dispose of it.

Where deletion is not immediately possible, for example because information is contained in secure backups, we will restrict its use and allow it to be removed in accordance with our applicable retention and backup procedures.

13. How We Protect Your Information

We recognise that protecting personal information is an essential responsibility.

Excellium implements reasonable technical, organisational, and administrative safeguards designed to protect personal information against unauthorised access, disclosure, alteration, loss, misuse, or destruction.

Depending on the nature of the information and the associated risks, these measures may include:

Access controls and role-based permissions.
Secure account authentication.
Appropriate security configurations for business systems.
Staff awareness and confidentiality obligations.
Secure website connections and data transmission.
Regular review of access permissions.
Appropriate vendor and service provider controls.
Backup and recovery procedures.
Incident identification and response processes.

We periodically review our safeguards to address evolving security risks and operational requirements.

However, no method of electronic transmission, internet communication, or information storage can be guaranteed to be completely secure. While we take reasonable precautions, we cannot promise absolute security.

14. Personal Data Breaches

Where a personal data breach occurs, Excellium will assess its nature, potential impact, and associated risks. We will take appropriate steps to contain, investigate, and mitigate its effects.

We will notify the Nigeria Data Protection Commission and affected individuals, as applicable, in accordance with the notification requirements and timeframes prescribed by the Nigeria Data Protection Act, 2023.

We will also take reasonable steps to prevent recurrence and address any identified weaknesses in our systems or processes.

15. Your Rights as a Data Subject

Under the Nigeria Data Protection Act, 2023, you are entitled to exercise certain rights in relation to your personal information. The availability and exercise of these rights depend on the applicable legal conditions, including any statutory exemptions or limitations.

These rights may include:

Right to be informed

To receive clear information about how and why your personal information is processed.

Right of access

To request confirmation of whether we process your personal information and obtain access to the information we hold about you.

Right to rectification

To request the correction of inaccurate or incomplete personal information.

Right to erasure

To request deletion of your personal information where applicable legal conditions are met.

Right to restriction

To request that we limit the processing of your information in certain circumstances.

Right to object

To object to particular processing activities where the law provides this right, including direct marketing.

Right to data portability

To request a copy of certain personal information in a structured, commonly used, and machine-readable format, where applicable.

Right to withdraw consent

To withdraw consent where processing is based on your consent. Withdrawal does not affect the lawfulness of processing before withdrawal.

Rights relating to automated decision-making

To exercise applicable rights concerning decisions made solely through automated processing that produce legal or similarly significant effects.

Right to lodge a complaint

To raise concerns with the Nigeria Data Protection Commission where you believe your personal information has been processed in violation of applicable data protection law.

These rights are not absolute and may be subject to lawful limitations, including circumstances where we are required to retain information for legal obligations or the establishment, exercise, or defence of legal claims.

16. How to Exercise Your Rights

To exercise your rights or raise a privacy concern, please contact us using the details below:

Email: contactus@excellium.biz
Subject: Data Privacy Request

Please provide sufficient information to help us understand your request, including the nature of the information involved and the action you would like us to take.

We may request additional information to verify your identity before processing a request, particularly where disclosure of personal information could affect another individual’s rights or security.

We will acknowledge and respond to valid requests within the timeframes prescribed by applicable law.

Where we are unable to fulfil a request, we will explain the reasons, subject to applicable legal restrictions, and inform you of any available avenues for review or complaint.

There is generally no charge for exercising your data protection rights unless a request is manifestly unfounded, excessive, or otherwise attracts a lawful fee.

17. Children’s Privacy

Our website and business services are primarily intended for business professionals, organisations, and individuals seeking professional software, technology, and training solutions.

We do not knowingly seek to collect personal information from children in circumstances where such collection would be inappropriate or unlawful.

Where a service or programme is made available to individuals under the age of 18, we will take appropriate steps to comply with applicable legal requirements, including any necessary parental or guardian involvement.

If we become aware that personal information has been collected from a child in circumstances that violate applicable law, we will take appropriate steps to address the matter.

18. Information Relating to Other Individuals

If you provide personal information about another individual, such as a colleague, employee, or business representative, you should ensure that you are authorised to share that information and that the individual has been appropriately informed where required by law.

We expect all individuals submitting information through our website or business channels to respect the privacy rights of others.

19. Business-to-Business Data Processing

Excellium provides business software, implementation, consulting, training, and related technology services to organisations.

In some engagements, we may process personal information on behalf of a client as part of delivering an agreed service. In such circumstances, the client may determine the purposes of processing, while Excellium acts as a data processor under the applicable contractual arrangements.

Where we act as a data processor, we will process personal information in accordance with the client’s documented instructions, applicable contractual obligations, and relevant data protection requirements.

Our role as a data processor does not remove our responsibility to maintain appropriate security and confidentiality safeguards.

Where Excellium independently determines the purposes and means of processing personal information, we act as a data controller under applicable law.

20. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

Changes in our services or business operations.
New website features or technologies.
Changes in our data collection and processing practices.
Updates to applicable laws, regulations, or regulatory guidance.
Improvements to our privacy and security procedures.

When we make changes, we will revise the “Last Updated” date at the beginning of this document.

Where changes materially affect how we process personal information or where notification is required by law, we will take appropriate steps to inform affected individuals.

We encourage you to review this Privacy Policy periodically to remain informed about our privacy practices.

21. Contact Us

We welcome questions, feedback, and requests concerning this Privacy Policy and the handling of personal information.

For any privacy-related enquiry, data subject access request, correction request, deletion request, or complaint, please contact:

Excellium Business Limited

83 CMD Road, Opposite Second Coming Gas Station, Beside Esporta Suite, Magodo, Lagos, Nigeria.

Email: contactus@excellium.biz
Telephone/WhatsApp: +234 803 802 3199
Website: www.excellium.biz

You may also contact the Nigeria Data Protection Commission, the regulatory authority responsible for overseeing data protection in Nigeria, through its official website:

Nigeria Data Protection Commission

We are committed to addressing privacy concerns fairly, transparently, and in accordance with applicable data protection requirements.