Your data, handled plainly.

The data controller for this website is Done Right Construction Ltd, a company registered in Nigeria with the Corporate Affairs Commission under RC 1029384, of Plot 12, Admiralty Way, Lekki Phase 1, Lagos.

For anything about your personal data — questions, requests or complaints — write to [email protected]. We aim to acknowledge every message within two working days.

When you request a quote or a site visit through the form on our website, we collect:

• Your name, email address and phone number
• Your plot location and, if you share it, the plot size
• The type of project and the budget band you choose
• Your message and any timeline you mention

If you email, call or message us on WhatsApp, we keep that correspondence with your enquiry. We do not ask for, and ask you not to send, sensitive personal data such as health or religious information, or identity documents, through the website.

We also count visits to the website (pages viewed, the referring site and the day) to understand which pages are useful. This does not use cookies and does not identify you — see Cookies and visitor statistics.

We never sell your personal data, and we do not use it for automated decision-making or profiling.

• Enquiries that do not become a project: up to 24 months after our last contact, then deleted.
• Clients: for the length of the project and then for up to 6 years, to meet tax, contract and defects-liability obligations.
• Visitor statistics: kept as anonymous daily counts; the rotating identifier described below cannot be linked back to a person.

When data is no longer needed, we delete it or make it permanently anonymous.

Only the Done Right staff working on your enquiry or project can see your details. We use a small number of service providers (data processors) who act on our written instructions and must keep your data secure:

• An email delivery provider, to send confirmations and replies
• Our website hosting and database provider
• A cloud storage provider for photos and documents

We may also share information where the law requires it — for example with regulators, the Lagos State Building Control Agency for approvals on your project, or law-enforcement agencies on a valid request.

Some of our processors store or handle data on servers outside Nigeria. Where that happens, we rely on the transfer grounds in Part VIII of the NDPA — an adequate level of protection in the receiving country, or appropriate safeguards such as contractual clauses — and we choose providers with recognised security standards. Ask us at [email protected] for details of the safeguards that apply.

Under the NDPA you have the right to:

• Be told how your personal data is used (this notice)
• Access the personal data we hold about you and get a copy
• Have inaccurate data corrected, and incomplete data completed
• Have your data deleted when we no longer have a reason to keep it
• Restrict or object to our use of your data, including for direct marketing
• Receive your data in a portable format
• Withdraw consent at any time, where we rely on consent

To use any of these rights, email [email protected]. We may need to confirm your identity first, and we will respond within the time the law allows — usually within 30 days.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

The website is served over HTTPS. Access to enquiries in our admin system is limited to named staff with individual accounts and strong passwords; uploads and our database are held with reputable providers; and we keep the amount of data we collect to what we need to answer you. No system is perfectly secure — if a breach ever puts your rights at risk, we will tell the NDPC and, where required, you, without undue delay.

The public website sets no cookies — no advertising, tracking or analytics cookies, and no third-party trackers. There is no cookie banner because there is nothing to consent to.

To count visitors, our server combines your IP address and browser type with a secret value that changes every day and turns the result into a one-way code (a hash). Only that anonymous code is stored, never your IP address; because the secret rotates daily, the code cannot be used to follow you from one day to the next or to identify you.

The staff admin area uses a strictly necessary sign-in cookie for Done Right employees only.

We will update this notice when our practices change and show the new date at the top of the page. For questions, write to [email protected] or to our registered office: Done Right Construction Ltd, Plot 12, Admiralty Way, Lekki Phase 1, Lagos.

See also our Terms of use.