How we handle your personal data.

Kingford Security Services (Kingford Nigeria Limited) is the data controller for the personal data described in this policy. Our office is at Kingford Office, behind RAPAC Office, Redemption City, Mowe, Ogun State, Nigeria.

We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the directions of the Nigeria Data Protection Commission (NDPC).

The data we collect depends on how you use this website.

• Service requests (Hire Us): your name, organisation name if any, phone number, email address, service location, the service and event details you give us, and your proposed start date and duration.
• Job applications: personal details (name, gender, date of birth, marital status, phone, email, residential address, state and local government of origin), your education and work history, and the documents you upload, such as your CV, application letter, certificates and passport photograph.
• Guarantor information: this is not part of the online application. If you pass your interview, our office gives you a guarantor form and collects your guarantors' details and supporting documents in person. We handle that information under this policy too.
• Technical data: your IP address and basic device and browser information, used to keep the site secure, prevent spam and fix faults.
• Messages you send us by email, phone or WhatsApp.

If you are shortlisted for a role, we may carry out medical and physical fitness screening. Health information is sensitive personal data and is handled with extra care.

• To respond to your service request, prepare a proposal and arrange deployment.
• To assess your job application, check eligibility, schedule interviews and communicate with you.
• To reply to your service request by email, and to contact you about a job application by phone call or text message.
• To keep our systems secure, prevent abuse and diagnose errors.
• To meet our legal, regulatory and licensing obligations as a private security company.

We do not sell your personal data and we do not use it for third-party advertising.

Under the NDPA we rely on the following grounds, depending on the situation:

• Consent: when you tick the privacy consent box on our forms and submit your information. You can withdraw it at any time.
• Contract: where we need your data to take steps at your request before entering into an agreement, such as providing a service quotation or processing a job application.
• Legal obligation: where the law or a regulator requires us to keep or share certain records.
• Legitimate interests: for example, securing our website and preventing fraud, where this does not override your rights.

Where you give our office information about a guarantor, you confirm that the guarantor knows you have done so and agrees to us contacting them to verify the guarantee.

Access inside Kingford is limited to the staff who need it: operations staff see service requests, and human resources staff see job applications. Staff accounts are protected by two-factor authentication.

We use trusted service providers to run this website. They process data only on our instructions:

• Database and private file storage for requests, applications and uploaded documents.
• Application hosting.
• Cloudflare, for DNS, security filtering and bot protection on our forms (Turnstile).
• Zoho Mail, to send and receive our email.
• Sentry, for error monitoring. We configure it to exclude personal data.

Some providers may process data on servers outside Nigeria. Where that happens, we take steps to make sure your data stays protected to the standard the NDPA requires. We may also disclose data to law enforcement or regulators where the law requires it.

• Unfinished application drafts, and any files uploaded to them, are deleted automatically after 7 days.
• Unsuccessful job applications and their documents are kept for 12 months, then anonymised.
• Records of staff we engage are kept for as long as the employment relationship and the law require.
• Service requests are kept for as long as needed to handle the request and maintain our business records, and are reviewed periodically.

You can ask us to delete your data sooner, subject to any legal duty to keep it.

• Uploaded documents are held in a private store. They are never available through a public link.
• Staff open documents only through short-lived links that expire after a few minutes, and every view is logged.
• Uploaded files are checked for type and content before we accept them.
• Connections to this website are encrypted, and staff passwords are stored using strong one-way hashing.
• Public forms are protected against bots and are rate limited.

No system is perfectly secure. If a breach affecting your personal data occurs, we will notify the NDPC and affected individuals as the NDPA requires.

Under the NDPA you have the right to:

• Be informed about how your data is used, which is the purpose of this policy.
• Access the personal data we hold about you and get a copy.
• Correct data that is wrong or incomplete.
• Ask us to delete your data, where we have no lawful reason to keep it.
• Restrict or object to our processing in certain circumstances.
• Receive your data in a portable format, where this applies.
• Withdraw your consent at any time. This does not affect processing done before you withdrew.
• Not be subject to a decision based only on automated processing that significantly affects you. We do not make hiring decisions automatically.

To exercise any right, including asking us to delete your data, email info@kingfordsecurity.ng. If your request is about a job application, use hr@kingfordsecurity.ng. Include your name, your phone number or email as given on the form, and your reference number (KSR or KSA) if you have one.

We may need to confirm your identity before acting on a request. We will respond within a reasonable time and in any event within the period the law requires. If you are unhappy with our response, you have the right to complain to the Nigeria Data Protection Commission.

This website uses only strictly necessary storage: for example, to keep staff signed in, to remember your application draft on your device, and to run bot protection on our forms. We do not currently use advertising or tracking cookies. If we add analytics, we will update this policy first.

Our job applications are for people aged 18 to 55. We do not knowingly collect personal data from children.

We may update this policy as our services or the law change. The date at the top shows when it was last revised. Material changes will be highlighted on this page.