Legal
Privacy Policy
Effective date: 29 July 2026
Covorn (“we”, “us”, “our”) is a business and brand consultancy based in Asaba, Delta State, Nigeria. [REGISTRATION DETAIL.] This policy explains what personal information we collect, why, and what rights you have over it. It is written to comply with the Nigeria Data Protection Act 2023 (NDPA).
What we collect
When you submit an enquiry through our contact form, we collect the information you choose to provide: your name, email address, and optionally your company, phone number, the type of engagement you are interested in, an indicative budget, and the details of your message.
When you visit covorn.com, our hosting and email providers may automatically process limited technical data such as your IP address and browser type, for security and delivery purposes.
We do not use advertising trackers, and we do not sell your data to anyone.
Why we collect it
We use the information you send us solely to respond to your enquiry, to understand what you need, and to correspond with you about a possible engagement. The lawful basis for this processing is your consent, given when you submit the form, and our legitimate interest in responding to people who contact us about our services.
Who can see it
Your enquiry is delivered to us by email through Resend, our email service provider, and read by the Covorn team. We use Vercel to host the website. These providers process data on our behalf and are bound to protect it. We do not share your information with any other third party unless we are required to by law.
Calendar connections (Google Calendar and Outlook)
In the COVORN Business Suite you can choose to connect a Google Calendar or Outlook account, so that our apps (CRMpire, StaffSage, Inkeepy, Expenssa and PersonalTab) can put your tasks, leave, shifts, deliveries and deadlines in your calendar. This is optional and off until you connect.
When you connect, we ask your calendar provider for permission to:
- create one separate calendar called COVORN in your account, and add, change and remove the events in that calendar only;
- see the times you are busy, without the details of those events, so that CRMpire can warn you before you book something over them;
- see your email address, so we can show which account is connected.
We do not read, change or delete the events in any of your other calendars, and we do not read your email. The busy times are fetched when you ask for a check and are not stored.
The keys your provider gives us to keep the COVORN calendar up to date are stored encrypted in our database, hosted by Supabase, and are used only for that. When you disconnect in the Business Suite, we remove the COVORN calendar from your account and delete those keys. You can also withdraw access at any time in your Google Account or Microsoft account settings.
We do not sell this information, use it for advertising, or use it to train artificial intelligence models, and nobody at Covorn reads it unless you ask us to help with your connection or the law requires it.
Covorn’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How long we keep it
We keep enquiry correspondence for as long as needed to deal with your request and to maintain a record of our dealings with you. Where an enquiry does not lead to an engagement, we will delete the associated personal data on request, or when it is no longer needed.
Your rights
Under the NDPA you have the right to ask us for a copy of the personal data we hold about you, to have it corrected if it is wrong, to have it deleted, to withdraw your consent at any time, and to object to how we use it. To exercise any of these rights, email us at [GOVERNING EMAIL] and we will respond within a reasonable period.
If you believe we have mishandled your data, you may lodge a complaint with the Nigeria Data Protection Commission.
Security
We take reasonable technical and organisational measures to protect your information. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we work only with reputable providers and limit access to your data to those who need it.
Changes
We may update this policy from time to time. The effective date at the top shows when it was last revised.
Contact
Questions about this policy, or about your data, can be sent to [GOVERNING EMAIL].