Privacy Policy

Fire Condom (“Fire”, “we”, “us”, “our”) is a brand operated by MSI Nigeria Reproductive Choices LTD/GTE, a company limited by guarantee, incorporated in Nigeria with RC No. 1965455 and registered address at 59, Anthony Enahoro Street, (the “Company”). We respect your privacy and are committed to protecting personal data collected through www.firecondom.com.ng (the “Website”) in accordance with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Commission (NDPC) General Application and Implementation Directive.

By using our website, you agree to the practices described in this Privacy Policy.

We collect information you provide directly, including your name, email address, phone number, business details, enquiry content and promotion entries, and technical information collected automatically, including IP address, browser and device type, pages visited, referring URL, approximate location and usage analytics collected through cookies and similar technologies (see our Cookie Policy).

We use your information to respond to enquiries, administer promotions and competitions, operate and improve the Website, provide customer support, send marketing communications where you have given consent, analyse Website performance, detect and prevent fraud or misuse, and comply with applicable legal and regulatory obligations.

We process personal data on one or more of the following legal bases recognised under section 25 of the NDPA: your consent; performance of a request you have made to us; our legitimate interests, provided these are not overridden by your rights; and compliance with a legal obligation, including obligations under the NDPA, and other applicable law.

We do not sell personal data. We may share personal data with trusted service providers (including hosting, IT and customer-support providers), analytics and marketing platform providers, regulators and public authorities where required by law, professional advisers, and any successor entity in the event of a restructuring, in each case only to the extent necessary and subject to appropriate contractual safeguards.

Where personal data is transferred outside Nigeria (for example, to hosting or analytics providers based abroad), we ensure the transfer complies with section 41 of the NDPA, including verification that the recipient country or organisation ensures an adequate level of protection, or that appropriate safeguards (such as standard contractual clauses or binding corporate rules) are in place, or that you have given explicit consent to the transfer.

We implement reasonable technical and organisational measures, including access controls, encryption in transit and staff confidentiality obligations, to safeguard personal data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach likely to result in a risk to your rights, we will notify the NDPC and, where required, affected data subjects, in accordance with section 40 of the NDPA.

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including for satisfying any legal, accounting, tax or regulatory requirements, after which it is securely deleted or anonymised. Enquiry and marketing data is generally retained for a period of 10 years from the date of last interaction, unless a longer period is required by law.

Subject to applicable law, you have the right to request access to, correction of, deletion of, or restriction on the processing of your personal data; to object to processing (including for direct marketing); to withdraw consent at any time without affecting the lawfulness of processing before withdrawal; to data portability; and to lodge a complaint with the Nigeria Data Protection Commission (www.ndpc.gov.ng) if you believe your rights have been infringed. We will respond to verified requests within a reasonable period and in any event within the timeframe prescribed by the NDPA.

This Website is intended solely for persons aged 18 years and above. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a person under 18, we will take reasonable steps to delete it promptly.

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The “Effective Date” at the top of this document indicates when it was last revised. Material changes will be notified through the Website.

Privacy enquiries, complaints and requests to exercise your rights may be submitted through the Contact Us page.