LEGAL
Privacy Notice
1. Who we are
The controller is Blessing Oluwakemi Anthony, trading as The Anthony Group, at 40 Adeshina Street, Bariga, Lagos, Nigeria, which is a correspondence and service address rather than a public business premises.
Contact: info@anthonygroupautomation.com
2. Scope
This Notice explains how we process personal data when you visit our website, use chat, submit an enquiry, book a call, receive an invoice, make a payment, become a client, or communicate with us. Where we process data on a client's instructions during an implementation project, a separate data-processing agreement applies.
3. Data we collect
- Identity and contact: name, organisation, role, email, optional phone number.
- Chat and enquiry: your messages, the workflow problem described, consent choices and the time consent was given, whether human support was requested, and a record of the most recent message.
- Booking: appointment type, date, time zone, meeting details, attendance and rescheduling history.
- Commercial: proposal, scope, invoice, currency, amount, payment status and transaction reference. We do not collect or store full payment-card credentials.
- Project: authorised system information, configuration, test records, support messages and access audit information.
- Technical: browser and device information, timestamps, pages viewed, referral source and campaign parameters.
- Abuse prevention: a one-way, truncated cryptographic hash derived from your IP address. We do not store your IP address itself, and the hash cannot be reversed to recover it. It exists only to limit automated abuse of the chat service.
Please do not submit sensitive personal data through general chat. If a project requires regulated or sensitive data, we will assess it separately and establish safeguards before access.
4. Automation and human review
Our website assistant is automated but is not an artificial-intelligence service. It replies using a fixed set of pre-written responses selected by matching keywords in your message. Your chat messages are not sent to an external AI provider, and are not used to train any model.
If we later introduce an external AI provider, we will name it in this Notice and update the chat consent wording before doing so.
The assistant is not a professional adviser and its answers may be incomplete. You can ask to speak with Blessing Anthony at any time; if you do, she is notified by email and may read the conversation transcript in order to reply.
We do not use a solely automated decision to accept or reject a client, set a final price, or make any decision producing legal or similarly significant effects.
5. Purposes and lawful bases
| Purpose | Typical lawful basis |
|---|---|
| Deliver the website, secure sessions and prevent abuse | Legitimate interests; legal obligation where applicable |
| Respond to enquiries and conduct discovery | Steps requested before a contract; legitimate interests |
| Operate the chat assistant and retain the transcript | Consent; steps before a contract |
| Arrange appointments and send service reminders | Contract or steps before a contract |
| Prepare proposals, invoices and provide paid services | Contract |
| Verify payment and maintain financial records | Contract; legal obligation |
| Provide live human support | Contract, steps before a contract, or legitimate interests |
| Send promotional email | Consent, with an opt-out in every message |
| Protect legal rights, investigate fraud and resolve disputes | Legitimate interests; legal obligation |
| Comply with tax, regulatory and lawful government requests | Legal obligation |
Where we rely on consent you may withdraw it at any time; withdrawal does not affect earlier lawful processing. Marketing consent is separate, optional and never a condition of receiving chat support.
6. Sharing and processors
- Hosting and delivery: Netlify; domain and DNS providers.
- Database and chat storage: Supabase and its hosting subprocessors.
- Email, calendar and documents: Google Workspace and Google Cloud services.
- Notification email: Resend, once notification email is configured.
- Automation: Google Apps Script, and any provider named in a documented project workflow.
- Payment and banking: the provider shown on your invoice.
- Professional advisers, insurers, auditors and authorities where necessary; and a successor in a genuine business sale, subject to confidentiality and lawful notice.
We do not sell personal data. We will not disclose one visitor's conversation to another client.
7. International transfers
We operate from Nigeria and use international cloud providers, so data may be processed in Nigeria, the United States, the European Economic Area, the United Kingdom or other locations used by our providers. Where the Nigeria Data Protection Act 2023 or another applicable regime requires safeguards, we will use a lawful transfer mechanism. You may request information about the mechanism relevant to your data.
8. Retention
- Abandoned session and abuse-prevention data: up to 90 days.
- Chat transcript without an active engagement: 12 months after last activity.
- Enquiry and discovery records: 24 months after last meaningful contact.
- Client project, contract, invoice and payment records: 7 years after the later of completion or final payment.
- Marketing preferences and suppression records: as long as needed to honour your choice.
- Backups: deleted or overwritten on the provider's normal backup cycle.
9. Security
Measures include access limitation, Google-based administrator authentication, database row-level security restricting records to authorised administrator accounts, encryption in transit, credential separation, rate limiting, logging and review of production changes.
No online service is completely secure. If a personal-data breach is likely to create a risk requiring notice under applicable law, we will investigate and notify the competent authority and affected individuals within the required period.
10. Your rights
Subject to applicable law, you may request confirmation and access, correction, deletion, restriction or objection, withdrawal of consent, portability where applicable, information about international-transfer safeguards, human review of an applicable automated decision, and to complain to a supervisory authority.
Send a request to info@anthonygroupautomation.com with the subject “Privacy Request”. We may verify identity before acting, and will respond within the period required by applicable law.
Nigeria-based individuals may complain to the Nigeria Data Protection Commission. Individuals elsewhere may also have a right to complain to their local authority.
11. Children
The Services are directed to adults and organisations. We do not knowingly solicit personal data from anyone under 18. If you believe a child has submitted data, contact us so we can investigate and delete it where appropriate.
12. Cookies and similar technologies
We use what is necessary to deliver the site and the chat you request. The chat stores a conversation identifier in your browser so your conversation continues if you navigate between pages. We also use Google Analytics 4 to understand page visits and actions such as chat starts, follow-up requests and booking-link clicks. Analytics does not receive the contents of your chat, your name or your email address from Anthony Group. Google may process device, browser and approximate-location information under its own privacy terms. You can limit analytics through your browser’s privacy and cookie controls.
13. Changes
We may update this Notice to reflect legal, technical or operational changes. The effective date above will change, and we will give more prominent notice where a change materially affects the use of previously collected data.