Privacy Policy

Olystique Ltd is a private company limited by shares registered in Nigeria (RC 9782136), operating as OLYSTIQUE. We build and operate software for business clients. This policy explains what we do with personal information collected through this website, and how we treat data we encounter while delivering client work.

For any question about this policy, or to exercise the rights described in it, contact us at info@olystique.com.

Through this website we collect only the information you choose to submit. There is no account system, and we do not require you to identify yourself in order to read any page.

• Enquiry details you submit through the contact form: your name, company, email address, optional phone number, project type, budget range, timeline and the description you provide.
• Correspondence you send us directly by email or telephone.
• Standard server logs generated by our hosting provider, such as IP address, browser type and requested page. These are produced automatically as part of serving the site securely and are retained for a limited period.

We do not collect special category data through this website, and we ask that you do not include confidential or sensitive information in an initial enquiry.

• To respond to your enquiry and to have the follow-up conversation you asked for.
• To prepare proposals, scope documents and contracts where an engagement proceeds.
• To meet our legal, accounting and regulatory obligations.
• To keep the website secure and to diagnose technical faults.

We do not sell personal information. We do not share it with third parties for their own marketing, and we do not add enquirers to a marketing list without asking.

Where data protection law requires us to identify a legal basis, we rely on: your consent, given when you submit an enquiry; the necessity of processing to take steps at your request before entering into a contract, and to perform that contract; our legitimate interest in operating and securing our website; and compliance with legal obligations.

This website sets no advertising or tracking cookies, and does not use third-party analytics or behavioural profiling. Fonts are self-hosted, so viewing a page does not send a request to a third-party font service.

If we introduce analytics in future, we will update this policy before doing so and will use a privacy-respecting, aggregate-only tool.

When we build or operate software for a client, we may process personal data that belongs to that client. In those engagements the client is the data controller and Olystique acts as a data processor, working under their written instructions and a separate agreement.

• We access only the systems and data a client has explicitly authorised, for the purposes they have specified.
• Access is scoped as narrowly as the work allows, and credentials are revocable by the client at any time.
• We do not retain client production data beyond what an engagement requires, and we return or delete it on request at the end of the engagement.

Our work often involves integrating a client's systems with third-party platforms and APIs, for example payment providers, messaging services, accounting software, identity providers or business platforms.

Where we do this, we act on behalf of the client and only with authorisation they have granted. Access is established through the platform's own authorisation process, is limited to the permissions the integration genuinely requires, and remains under the client's control. Olystique does not access any platform account, dataset or API on its own behalf, and does not obtain, aggregate or resell data from any third-party platform for its own purposes.

Any credentials or tokens involved in an integration are stored using the platform's recommended mechanisms and are never embedded in client-side code.

Enquiries that do not lead to an engagement are retained for up to 24 months so we can pick up the conversation if you return, then deleted. Records relating to an engagement are retained for as long as the contract requires and for the period our legal, tax and accounting obligations demand. Server logs are retained for a short operational period.

This site is served over HTTPS and sets standard protective response headers. Enquiry submissions are transmitted over an encrypted connection and delivered to a controlled inbox or endpoint. Access to systems holding personal information is limited to people who need it, and credentials to third-party services are held in secret managers rather than in source code.

No system is absolutely secure, and we do not claim otherwise. If a breach affecting your personal data occurs, we will notify you and the relevant authority where the law requires it.

Subject to applicable law, you have the right to request access to the personal information we hold about you, to have inaccurate information corrected, to request deletion, to object to or restrict certain processing, to request a portable copy, and to withdraw consent at any time.

To make a request, email info@olystique.com. We will respond within the period required by law. If you are not satisfied with our response you may complain to the Nigeria Data Protection Commission, or to your local supervisory authority if you are outside Nigeria.

We update this policy when our practices change. The date at the top of this page reflects the current version. Material changes affecting how we use information you have already provided will be communicated to you directly where we hold contact details for you.