Privacy record
What enters the system. What happens next.
This notice records the limited personal information Elitecross processes through this website, why it is needed and the controls available to the person it concerns.
- Controller
- Elitecross Technology Ltd
- Registration
- RC 1925780
- Place of business
- Abuja, Federal Capital Territory, Nigeria
- Privacy contact
- privacy@elitecross.io
- Review date
- 15 July 2026
Who controls the information
Elitecross Technology Ltd determines how personal information submitted through elitecross.io is used.
- Legal entity
- Elitecross Technology Ltd, RC 1925780
- Place of business
- Abuja, Federal Capital Territory, Nigeria
- Contact
- privacy@elitecross.io
This notice applies to this website, diagnostic requests and related correspondence. A client engagement may include additional privacy terms in its signed agreement.
Information that reaches Elitecross
The website asks only for information needed to understand an operating problem and respond to the person making the request.
- Diagnostic request
- Name, work email, company, current operation, affected workflow, systems and tools, operational impact, intended outcome, relevant capability, timing and any optional decision or constraint context supplied.
- Correspondence
- Messages and information supplied during follow up about the request.
- Request security
- Submission timing, a random submission identifier, origin checks and limited network information used to detect abuse and apply rate controls.
- Website measurement
- Pages viewed, referrer, approximate location, device and browser information collected through Vercel Web Analytics in aggregated form.
- Hosting records
- Technical request and service information generated when Vercel delivers the website and its server functions.
A diagnostic submission does not subscribe the person to a newsletter or automated promotional sequence.
Why each record is used
Elitecross connects each use of personal information to a defined purpose and a lawful basis under the Nigeria Data Protection Act 2023.
- Review and response
- To assess a diagnostic request, ask relevant questions and prepare a response. This is necessary to take steps requested before a possible contract.
- Security and reliability
- To prevent spam, misuse and attacks, preserve service integrity and investigate failures. This supports Elitecross's legitimate interest in operating a secure website without overriding the person's rights.
- Service measurement
- To understand which pages are useful and whether the website performs across devices. This supports the legitimate interest of improving the site through aggregated measurement.
- Legal obligations
- To keep or disclose a limited record when Nigerian law, a valid regulatory request or the establishment, exercise or defence of a legal claim requires it.
Analytics without advertising profiles
Vercel Web Analytics does not use third party cookies. It creates a temporary hash from the incoming request and discards the visitor session after 24 hours. Elitecross does not use this website measurement for advertising, cross site tracking or decisions about individual visitors.
No solely automated significant decisions
Diagnostic requests are not accepted, rejected or priced by a system acting without human review.
Who may process a record
Elitecross does not sell personal information. Access is limited to the people and providers required to operate the website and respond to requests.
- Authorised Elitecross personnel who review diagnostic requests or maintain the service.
- Vercel, which hosts the website, server functions and privacy preserving analytics.
- Resend, which delivers the team notification and the applicant acknowledgement.
- Professional advisers where confidential legal, accounting or security support is required.
- Courts, regulators or public authorities when disclosure is lawfully required.
Processing outside Nigeria
Vercel and Resend may process information in the United States and other countries used by their approved subprocessors. Elitecross uses providers that publish data processing commitments and transfer safeguards, and records the basis for relevant international transfers as required.
When a record leaves the system
Unsuccessful diagnostic enquiries are kept for no longer than 12 months after the last meaningful communication, then deleted or irreversibly anonymised.
- Unsuccessful enquiry
- Up to 12 months after the last meaningful communication.
- Client engagement
- According to the signed agreement and applicable accounting, tax and legal requirements.
- Security record
- Only for the shortest period reasonably needed to detect abuse, investigate an incident or support a legal claim.
- Analytics session
- The temporary Vercel visitor session is discarded after 24 hours. Aggregated reporting follows Vercel account and service settings.
A valid deletion request may shorten these periods unless a legal obligation or another lawful ground requires a limited record to remain.
Control available to the person
Subject to the conditions in Nigerian law, a person may ask Elitecross to explain, access, correct, delete or restrict the use of personal information concerning them.
- Confirm whether Elitecross processes their personal information and obtain access to it.
- Correct information that is inaccurate, incomplete, out of date or misleading.
- Request deletion when the information is no longer necessary or no lawful basis remains.
- Object to processing based on legitimate interests or direct marketing.
- Request restriction while a concern, objection or legal claim is being resolved.
- Receive portable information where the statutory conditions apply.
- Challenge a significant decision made solely through automated processing. Elitecross does not currently make such website decisions.
Elitecross may request enough information to verify the requester and protect another person's information. If a concern remains unresolved, a complaint may be made to the Nigeria Data Protection Commission.
How the record is protected
Elitecross applies technical and organisational controls proportionate to the limited information collected through the website.
- Encrypted transmission through HTTPS in production.
- Restricted access to email and Vercel project environments.
- Server validation, origin checks, honeypot controls, submission timing checks and rate controls.
- No separate lead database created by the diagnostic form.
- Provider review and limited retention rather than indefinite storage.
No internet service can promise absolute security. Elitecross will investigate suspected incidents and make notifications required by applicable law.
Children
This business website is not directed to children. A child should not submit a diagnostic request.
Questions and changes
Privacy questions and rights requests should be sent to privacy@elitecross.io.
Elitecross may update this notice when the website, service providers or legal requirements change. Material changes will be reflected by a new review date and, where appropriate, a clearer notice at the point information is collected.
- Document status
- Effective 15 July 2026.
- Last reviewed
- 4 August 2026
Current status
Effective for elitecross.io.Effective 15 July 2026. Future material changes will be recorded with a new review date.