1. Introduction

At Isurf Global Services Limited ("we," "our," "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in any way.

We value your trust and are dedicated to handling your personal information with care and transparency. Please read this Privacy Policy carefully to understand our practices regarding your personal data.

2. Information We Collect

We may collect various types of information from you, including:

2.1 Personal Information You Provide

• Contact Information: Name, email address, phone number, and mailing address.
• Business Information: Company name, job title, industry, and business needs.
• Account Information: Usernames, passwords, and account preferences.
• Payment Information: Billing details and payment methods (processed securely).
• Communication Data: Information you provide when contacting us via email, phone, or through our contact forms.

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, and device type.
• Usage Data: Pages visited, time spent on pages, links clicked, and referral sources.
• Cookies: Small data files stored on your device to enhance user experience.

2.3 Information from Third Parties

• Business Partners: Information shared by our partners or clients.
• Public Sources: Information available from public records or databases.
• Social Media: Information from social media platforms when you interact with us.

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Service Delivery: To provide, maintain, and improve our services.
• Communication: To respond to your inquiries, send updates, and share important information.
• Client Management: To manage client relationships and fulfill contractual obligations.
• Business Operations: To process payments, manage accounts, and conduct internal operations.
• Marketing: To send promotional materials and information about our services (with your consent).
• Security: To detect, prevent, and address fraud, security breaches, and other technical issues.
• Compliance: To comply with legal obligations and regulatory requirements.

4. Data Protection & Security

We implement robust security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: Industry-standard encryption for data transmission and storage.
• Access Control: Strict access controls to ensure only authorized personnel can access personal data.
• Network Security: Firewalls, intrusion detection systems, and regular security audits.
• Employee Training: Regular training on data protection and privacy best practices.
• Data Retention: Retention policies that limit data storage to what is necessary and lawful.
• Physical Security: Secure facilities with controlled access and surveillance.

5. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. However, we may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in delivering our services (e.g., payment processors, IT support, cloud hosting).
• Business Partners: With our partners and clients to fulfill service obligations and contractual requirements.
• Legal Compliance: When required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• Protection of Rights: To protect the rights, property, or safety of Isurf Global, our clients, or others.
• With Your Consent: When we have your explicit consent to share your information.

All third-party service providers are required to maintain the confidentiality and security of your information and are prohibited from using it for any purpose other than providing services on our behalf.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Service Delivery: As long as we are providing services to you or your organization.
• Legal Obligations: To comply with legal and regulatory requirements (e.g., tax, accounting, and anti-fraud laws).
• Legitimate Interests: For legitimate business purposes, such as record-keeping and dispute resolution.
• Client Requests: At your request, we will delete or anonymize your personal information, subject to legal and contractual constraints.

7. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies help us understand how you interact with our site and improve our services.

Types of Cookies We Use:

Cookie Type	Purpose	Duration
Essential Cookies	Enable core website functionality (e.g., navigation, security)	Session
Performance Cookies	Analyze website traffic and performance	Up to 2 years
Functionality Cookies	Remember your preferences and settings	Up to 1 year
Marketing Cookies	Deliver relevant advertisements and track campaigns	Up to 2 years

You can control or disable cookies through your browser settings. However, disabling certain cookies may affect website functionality.

8. Your Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Deletion: Request deletion of your personal information (subject to legal constraints).
• Right to Restriction: Request restriction of processing of your personal information.
• Right to Object: Object to the processing of your personal information for direct marketing purposes.
• Right to Data Portability: Request transfer of your data to another organization.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately, and we will take steps to remove such information.

10. International Data Transfers

As a global BPO company, we may transfer your personal information to countries outside of Nigeria where our service providers or partners are located. We ensure that any international data transfers comply with applicable data protection laws and that adequate safeguards are in place to protect your information.

11. Third-Party Links

Our website may contain links to third-party websites, plugins, or applications. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with an updated "Last Updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below: