How we handle your information.

Who we are

Veraclins Tech Solutions ("Veraclins", "we", "us") is a Nigerian software company based in Abuja. This policy explains what personal data we collect through veraclins.com, why we collect it, and what choices you have. We are the data controller for any personal data described below.

If you have questions or want to exercise any of the rights listed in Your rights, email us at hello@veraclins.com.

What we collect, and why

We only collect information you give us directly, plus the minimum needed to keep the site working safely.

When you fill in the contact form, we collect:

• Your name and email address — so we can reply to you.
• Your company name (optional) — to give context to your message.
• The message you write — so we can answer it.
• An "intent" tag (e.g. services, partnership, general) — set automatically based on which page you came from, so the right person sees your message.

We also store the date and time of submission and an internal status field ("new", "replied", "archived") to track whether we've responded. We do not collect your IP address with the submission.

When you sign in to the admin area (only Veraclins staff), we collect an email address and a password hash, plus a session identifier stored in a secure, HTTP-only cookie. The public site does not require an account.

When you visit any page, our hosting provider may log standard request information (IP address, user agent, response status) for short periods to help diagnose problems. We also use Umami for privacy-respecting analytics — it counts page views and a small number of named events (such as "contact-submitted") to help us understand which parts of the site are useful. Umami does not use cookies, does not track individuals across sites, and does not store your IP address or any other identifier we could use to recognise you on a return visit.

Lawful basis

Under Section 25 of the Nigerian Data Protection Regulation (NDPR) we rely on the following lawful bases:

• Consent, when you check the box on the contact form to confirm you've read this policy and want us to store your message so we can respond.
• Legitimate interests, for routine site security, anti-spam protection, and operating the admin area.

You can withdraw consent at any time by emailing hello@veraclins.com and asking us to delete your contact submission.

Who else sees it

We use a small number of service providers to deliver this site. We share the minimum data needed for each one to do its job, and we do not sell or rent your data to anyone, ever.

• Resend (email delivery) — receives the contact email body plus the email address it goes to. Used for contact-form notifications and admin password resets.
• Cloudflare Turnstile (bot protection) — receives a token generated in your browser and your IP address, to confirm you are a human. We do not receive any tracking ID back.
• Umami (analytics, hosted by umami.is) — receives the page URL, referrer, screen size, browser language, and country derived from your IP. Umami discards the IP after deriving the country and does not store any identifier that links visits to a person.
• Our PostgreSQL database, hosted in our infrastructure provider's facility — stores contact-form submissions and admin account records.

How long we keep it

• Contact submissions: up to 36 months from the date of submission, unless you ask us to delete sooner. After that we either delete or anonymise them.
• Admin accounts and sessions: kept while the account is active; sessions expire after 30 days of inactivity. Password reset tokens expire after one hour and can only be used once.
• Server logs: rotated by our hosting provider on a rolling 30-day basis.

Cookies

We use only the cookies needed for the site to work — no advertising or tracking cookies, and our analytics tool (Umami) does not set cookies either. Specifically:

• A signed session cookie (__veraclins_session) for admin sign-in. Public visitors never receive this.
• A short-lived flash cookie used to display confirmation messages after form submissions. Cleared on the next request.
• Hidden honeypot fields on forms to defeat automated spam bots. These do not store anything.

Because we don't run trackers, we don't show a cookie consent banner — there's nothing to ask consent for beyond the contact-form box you tick when you write to us.

Your rights

Under the NDPR, the Nigeria Data Protection Act, and applicable international standards, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to erasure") where there is no overriding legal reason for us to keep it.
• Restrict how we process your data, or object to processing based on legitimate interests.
• Withdraw consent for the contact-form submission at any time.

To exercise any of these, email hello@veraclins.com. We will respond within 30 days. We may ask for proof of identity to make sure we don't share your data with someone else.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at nitda.gov.ng.

Children

This site is not directed at children under 13. We do not knowingly collect personal data from anyone in that age group. If you believe a child has submitted information to us, email us and we will delete it.

Changes to this policy

We will update this policy from time to time. Material changes — for example, adding a new third-party processor or a new analytics tool — will be reflected here before the change takes effect. The "last updated" date at the top of this page reflects the most recent revision.

Contact

Veraclins Tech Solutions Abuja, Nigeria hello@veraclins.com