Privacy Policy

Plus Fourteen Enterprise (referred to here as Plus Fourteen, we, or us) is a business registered in Nigeria in May 2013. We operate the website at plusfourteen.com and provide IT consulting services including web development, network architecture consulting, cybersecurity vulnerability sweeps, and cloud migration.

We are the data controller for the information described in this policy. You can reach us about anything in this document at hello@plusfourteen.com.

We only collect information you choose to give us, plus a small amount of technical data needed to keep the site running and free of abuse. We do not buy contact lists and we do not run advertising trackers.

When you send a message through our contact form, we collect your name, your email address, the type of project you select, and the contents of your message.

When you complete our project intake form, we collect your name and email address, optionally your company name and phone number, and the service you are interested in, a summary of your project, any service specific details you provide, your budget range, your timeline, and how you heard about us.

When you book a call, our scheduling provider collects the name, email address, and any answers you enter into the booking form, and it records the time slot you select.

When you simply browse the site, we record aggregate, anonymous usage statistics such as page views, referring site, country, and device type. We also process your IP address temporarily to rate limit form submissions and block automated spam. That address is included in the notification email we receive for a submission so we can investigate abuse, and it is not used to build a profile of you.

We use the information above to:

• Reply to your inquiry and answer your questions
• Prepare a proposal, scope of work, or assessment you asked for
• Deliver and support services you have engaged us for
• Schedule and attend calls you have booked
• Keep our own records of client and prospect communication
• Protect the site against spam, abuse, and automated attacks
• Understand which pages are useful so we can improve the site
• Meet legal, tax, and accounting obligations

We do not sell your personal information. We do not share it with advertisers. We do not use it to train machine learning models.

We will only send you marketing email if you ask us to. If we ever do, every message will carry a one click unsubscribe.

Where the Nigeria Data Protection Act 2023 applies, we process your information on the basis of your consent when you submit a form, on the basis of contract performance when we are delivering work you engaged us for, and on the basis of legitimate interest when we secure the site against abuse and measure aggregate traffic.

If you are in the United Kingdom or the European Economic Area, the same grounds apply under the UK GDPR and the EU GDPR respectively.

Plus Fourteen uses Google APIs to run parts of its own internal back office. Where a Google account is connected, it is a Plus Fourteen owned account authorized by us. Visitors to this website are not asked to sign in with Google and are not asked to connect their own Google accounts.

With that owned account, our application may request access to the following, and uses each one only for the stated purpose:

• Basic profile information (name, email address, profile picture), used only to identify which account is connected and to display it inside our own tooling
• Google Sheets, used to append inquiries submitted through this website into our internal pipeline spreadsheet
• Gmail send, used to send transactional replies and proposal email from our own business mailbox
• Google Calendar, used to create and manage consultation bookings on our own calendar
• Google Drive, used to store and retrieve our own proposal, scope, and delivery documents
• Google Slides, used to generate and update our own presentation decks

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In practice this means we use Google user data only to provide and improve the features described above, we do not transfer it to others except as needed to provide those features, to comply with applicable law, or as part of a merger or acquisition, we do not use it for advertising, and we do not allow humans to read it except with the account holder's explicit consent, for security purposes such as investigating abuse, to comply with applicable law, or where the data has been aggregated and anonymized.

Access tokens are stored encrypted at rest, are never exposed to site visitors, and can be revoked at any time from the Google account permissions page at myaccount.google.com/permissions. Revoking access immediately stops all further Google API calls by our application.

Running a website means using a small number of vendors. Each one receives only what it needs to do its job, and each is bound by its own privacy terms:

• Vercel, which hosts the website and processes standard server request logs
• Resend, which delivers the notification email generated by our contact and intake forms
• Google (Sheets, Gmail, Calendar, Drive, Slides), which stores the internal records described in the section above
• Cal.com, which powers the booking widget and receives the details you enter when you schedule a call
• Plausible Analytics, which measures aggregate traffic without cookies and without collecting personal data

This website does not set advertising or profiling cookies, and it does not follow you across other websites. Our analytics provider, Plausible, is cookie free and stores no personal data, which is why you are not greeted by a cookie banner.

The embedded booking widget is loaded from our scheduling provider and may set cookies inside that embed in order to function. If you would rather avoid it, email us instead and skip the widget entirely.

Inquiries that do not become engagements are kept for up to twenty four months, then deleted. Records relating to actual client engagements are kept for the life of the engagement and for seven years afterward, which is what our tax and accounting obligations require. Aggregate analytics data contains no personal information and is kept indefinitely.

The IP address captured for rate limiting expires from memory within one hour and is retained only inside the archived notification email.

The site is served over HTTPS. Form submissions are validated on the server, rate limited by network address, and protected by spam traps. API credentials and access tokens are held in encrypted environment storage, never in the code we publish. Access to inquiry records is limited to the people at Plus Fourteen who need it to respond to you.

No system is perfectly secure. If a breach ever affects your personal information, we will notify you and the relevant regulator without undue delay.

You can ask us to:

• Tell you what personal information we hold about you
• Correct anything that is wrong or out of date
• Delete your information, where we are not required to keep it
• Send you a copy of your information in a portable format
• Stop processing your information, or withdraw consent you previously gave
• Stop sending you any marketing communication

Email hello@plusfourteen.com and we will respond within thirty days. There is no charge. If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission, or with your local supervisory authority if you are outside Nigeria.

Plus Fourteen operates from Nigeria and serves clients in several countries. Our service providers store data on servers located in the United States and the European Union, so your information may be processed outside your country of residence. We rely on the standard contractual protections offered by each provider to keep that transfer lawful.

This site and our services are intended for businesses and for adults acting on their behalf. We do not knowingly collect personal information from anyone under eighteen. If you believe a child has sent us information, email us and we will delete it.

If we change how we handle information, we will update this page and move the effective date at the top. Material changes affecting people whose information we already hold will also be sent by email where we have an address on file.

Questions about privacy, data requests, or anything else in this policy go to hello@plusfourteen.com. We are Plus Fourteen Enterprise, a business registered in Nigeria.