Privacy Policy

1. Who we are

The pcl. State Performance Index (pSPI) is a product of Phillips Consulting Limited, a Nigerian advisory firm headquartered in Lagos. When you use pspi.com.ng, you are interacting with us. Questions about this policy can be directed to hello@pspi.com.ng.

2. What we collect

• Account data: Your name and email address when you register as a buyer or submit a lead form.
• Payment data: We store your invoice number, payment reference and administrative verification status. We do not collect or store card details.
• Device fingerprint: A technical identifier of the browser and device you used to complete a purchase. This is used to enforce the device-lock on your report download. It is not linked to your identity beyond your purchase.
• Download logs: Records of when and from which IP address a report was downloaded. Used for security and to resolve disputes.
• Lead form responses: Your name, organisation, role, work email and the decision context you provide. Used only to prepare your briefing and follow up.
• Usage data: Standard web server logs (IP address, browser, pages visited). Used for analytics and security. We do not sell this data.

3. How we use your information

• To process your purchase and deliver your report.
• To enforce the device-lock and investigate misuse.
• To respond to your lead or briefing request.
• To send transactional emails (purchase confirmation, download links, support).
• To improve the platform and detect security threats.
• To comply with applicable Nigerian law.

We do not sell, rent or trade your personal information to third parties for marketing purposes.

4. Who we share data with

• Cloudinary: Secure cloud storage for report files. Files are access-controlled.
• Aiven (MySQL): Hosted database provider. Data is encrypted at rest and in transit.
• Netlify: Hosting platform. Processes server logs.
• Email provider: For transactional emails only.

5. Data retention

Buyer accounts and purchase records are retained for 7 years in accordance with Nigerian financial record-keeping requirements. Lead data is retained for 2 years. You may request deletion of your account and associated data (except where retention is required by law) by emailing hello@pspi.com.ng.

6. Cookies

We use only essential cookies required for authentication (your admin or buyer session). We do not use advertising or tracking cookies. No third-party analytics scripts are loaded on this site.

7. Security

All data is transmitted over HTTPS. Report files are stored with access controls and delivered via time-limited, device-locked download links. Passwords are hashed using bcrypt. We employ rate-limiting and account lockout on authentication endpoints.

8. Your rights

You have the right to access, correct or delete your personal data. To exercise any of these rights, email hello@pspi.com.ng with the subject line "Data Request". We will respond within 14 business days.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to registered buyers. Continued use of the platform after changes constitutes acceptance of the revised policy.