Data Processing Policy

For your personal data (name, email, etc.), Irecon Solutions Ltd acts as data controller. For project and business data you enter into iRecon, Irecon Solutions Ltd acts as data processor on your behalf.

We process data to authenticate users, deliver the iRecon service, generate exports and reports, send notifications, provide support, and maintain security and audit logs.

We may engage trusted sub-processors (e.g. cloud hosting providers) to deliver parts of our service. All sub-processors are contractually bound to the same data protection standards we apply. Current sub-processors are listed at irecons.com/sub-processors.

Your data is processed and stored within Nigeria and the European Economic Area. Where transfers outside these regions are necessary, we ensure appropriate safeguards are in place.

We implement encryption in transit (TLS 1.3) and at rest (AES-256), access controls and audit logging, regular security assessments, and incident response procedures.

Enterprise customers may request a formal Data Processing Agreement (DPA). Contact admin.irecon@gmail.com.