Privacy Notice

1. Who controls your data

AkuDozie Ltd is the controller for personal data collected through this website and our order process. AkuDozie Ltd is registered in England and Wales. Company number: 17163338. Registered office: 128 City Road, London, EC1V 2NX, United Kingdom. Contact: info@akudozie.com.

2. Personal data we may collect

Depending on how you use our services, we may collect:

• Contact details — your name and email address.
• Billing details — billing name and billing email address if different from your contact details.
• Order and payment records — order reference, selected service, amount, currency, payment status, Stripe checkout identifiers or bank payment references. We do not store full card details.
• Project and service information — messages, requirements, files, descriptions, or other content you provide so we can deliver the service.
• Consent records — legal document version references, consent timestamps, the exact wording you agreed to, and immediate-start acknowledgement records captured at checkout.
• Technical consent evidence — IP address and browser/user-agent string captured at the time of checkout consent, linked to your specific order. These are used as technical evidence of consent for payment dispute, chargeback, and fraud-prevention purposes. Lawful basis: legitimate interests (consent verification, fraud prevention, payment and order dispute evidence, chargeback handling, and service security).
• Technical and security information — request timestamps, IP-derived rate-limit keys, error records, and operational logs used to protect the service.
• Internal operational records — order notes and internal records used to manage, review, and deliver your order.

3. Why we use your data

We use personal data to:

• Process orders, take payment, and deliver services.
• Contact you about your order or service delivery.
• Create and issue invoices and payment records.
• Keep business, accounting, and legal compliance records.
• Maintain consent records as evidence of agreed terms.
• Prevent misuse, protect the website, and handle disputes.
• Handle refund or cancellation requests.
• Improve and develop our services.

4. Lawful bases

We process personal data under the following lawful bases:

• Contract — processing your order, delivering services, and communicating with you about your order are necessary to perform a contract with you or to take steps before entering into one.
• Legal obligation — keeping accounting, tax, payment, and certain compliance records is required by law.
• Legitimate interests — operating, protecting, and improving the service; maintaining security logs and rate-limit records; keeping internal operational notes; and preventing fraud and misuse.
• Consent — where we rely on consent for a specific processing activity, we will make this clear at the point we ask for your consent.

5. Service providers and processors

We use trusted third-party providers to operate the service. These may include:

• Stripe — card checkout and payment processing.
• Supabase — order, consent, payment-event, and operational database storage.
• Vercel — website hosting and deployment.
• Google Workspace — email and internal administration.
• Telegram — internal operational order notifications and staff order workflows. We aim to keep Telegram notifications limited to operational details such as order reference, service name, amount, and payment status.
• Airwallex or banking providers — bank-transfer handling and payment reconciliation where applicable.
• AI-assisted tool providers — where relevant to preparing digital plans, briefs, prototypes, or setup materials. See section 6 below.
• Resend or equivalent email delivery provider — for sending order confirmation and invoice emails.

Each provider processes personal data only as needed to provide their services to AkuDozie or to meet their own legal obligations.

6. AI-assisted processing

AkuDozie may use AI-assisted tools to help prepare digital plans, briefs, prototypes, workflows, forms, calculators, landing pages, and related setup materials. Where we use AI-assisted tools:

• We use only information relevant to the specific service or task and aim to avoid including unnecessary personal data in AI-assisted work.
• You should not send sensitive personal data, passwords, private keys, confidential third-party information, or regulated data unless it is specifically required for your service and you have the right to share it.
• AI-assisted outputs may contain assumptions, errors, or omissions. Paid outputs are reviewed before delivery, but you remain responsible for reviewing them and deciding whether they are suitable for your intended use.
• We do not use solely automated decision-making with legal or similarly significant effects on you in our current order and service delivery process.

7. International transfers

Some of our service providers may process or store data outside the United Kingdom. Where this happens, we rely on the provider's transfer safeguards, which may include:

• UK adequacy regulations recognising the destination country or territory.
• Standard contractual clauses, UK International Data Transfer Agreements (IDTA), or UK Addenda to standard contractual clauses.
• Provider-specific frameworks or equivalent protections accepted under UK law.

You can request more information about the safeguards we rely on for specific providers by contacting info@akudozie.com.

8. How long we keep data

We keep personal data only for as long as reasonably needed for the purposes set out in this notice. General principles:

• Order, payment, invoice, consent, and accounting records are retained for as long as required for our legal and tax obligations and reasonable business purposes, typically up to 6 years.
• Consent records linked to orders are normally retained with the related order record for the same period.
• Abandoned or incomplete checkout attempts are retained for a limited period unless needed for security, fraud prevention, or dispute handling.
• Project correspondence and support messages are kept as long as needed to deliver the service, handle disputes, or meet legal obligations.
• Security, rate-limit, and operational logs are kept for a limited period unless needed to investigate misuse, errors, or security incidents.

9. Security

We use reasonable technical and organisational measures to protect personal data, including server-side environment variable management, tokenised customer order links, rate limiting, payment provider security controls, and restricted staff access where applicable. No system can be guaranteed completely secure.

10. Cookies and analytics

We use Vercel Analytics on this website to understand how pages are used. Vercel Analytics is designed to be privacy-first and does not use persistent tracking cookies or cross-site tracking. It uses aggregated, anonymised data rather than individual tracking identifiers. We do not currently use advertising cookies or behavioural tracking cookies.

If our approach to analytics or cookies changes in a way that requires your consent under UK PECR, we will update this notice and ask for consent before setting any non-essential cookies.

11. Your rights

Depending on the circumstances and the lawful basis for processing, you may have the following rights in relation to your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete personal data where we no longer have a lawful basis to keep it.
• Restriction — ask us to restrict processing in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Portability — receive personal data you provided to us in a structured, commonly used format, where technically feasible and applicable.
• Withdraw consent — where processing is based on your consent, withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at info@akudozie.com. We may need to verify your identity before responding. We aim to respond within one month as required by UK GDPR.

12. Complaints

If you are unhappy with how we handle your personal data, please contact us first at info@akudozie.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

13. Changes to this notice

We may update this Privacy Notice from time to time to reflect changes to our services, legal obligations, or data practices. The latest version will be published on this page. Where changes are material, we will aim to bring them to your attention.