Privacy Policy

Published notice

1. About this policy

This policy applies to the Certus public website and to information you choose to share when you contact Certus through the public enquiry pathways (including asset-owner, investor, partnership and general enquiries).

It does not create a client, investor or advisory relationship merely by browsing the site.

2. Information we collect

Certus collects only categories of information that are relevant to operating the public website and responding to voluntary enquiries. Depending on how you interact with Certus, this may include:

3. How we use information

Certus may use personal data for purposes that include:

4. Lawful basis

Where data-protection law applies, Certus relies on the lawful basis that is appropriate to the processing activity. Depending on the circumstances, this may include taking steps at your request before a potential engagement, performance of an agreement, legitimate interests in operating a capital-enablement platform and responding to professional enquiries, compliance with legal obligations, or consent where consent is actually required.

Consent is not treated as a catch-all basis for every processing activity described in this policy.

5. How information may be shared

Certus does not sell personal data. Information may be shared only as needed with restrained categories of recipients, such as:

6. International transfers

Certus works across African energy markets and may process information in more than one country. Where cross-border transfers of personal data occur, Certus will use safeguards required by applicable data-protection law.

This policy does not claim a specific transfer mechanism beyond what has been approved for production use.

7. Retention

Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected, and as required for legal, regulatory, contractual, security or dispute-related needs.

Exact retention periods may be refined through later policy and CMS configuration. Until then, Certus applies purpose-limited retention rather than a fixed public promise of a single numerical period.

8. Rights

Depending on applicable data-protection law, you may have rights that can include access, correction, deletion, restriction, objection, portability, withdrawal of consent where processing relies on consent, and the right to lodge a complaint with a competent data-protection authority.

For processing connected with Nigeria, relevant frameworks may include the Nigeria Data Protection Act 2023 and oversight by the Nigeria Data Protection Commission, where applicable.

Certus will respond to rights requests in accordance with applicable law and the lawful exceptions that apply.

9. Security

Certus applies reasonable technical and organisational safeguards appropriate to the nature of the public website and enquiry information it handles.

No method of transmission or storage is completely secure. This policy does not publish internal security architecture or control inventories.

10. Cookies and analytics

The public Certus website currently uses a privacy-safe analytics boundary that does not send visitor events to a third-party analytics provider. Optional analytics cookies and visitor-tracking technologies are not currently deployed on the public site.

If Certus later introduces optional cookies or analytics that require notice or consent, this policy and related notices will be updated before those technologies are used for visitor tracking.

11. Children's privacy

The Certus website and enquiry pathways are intended for business and professional engagement relating to African energy assets, investment readiness, capital structuring and related collaboration. They are not directed to children.

12. Changes

Certus may update this Privacy Policy from time to time to reflect changes in the public product, legal requirements or operating practices. The last-updated date shown on this page will be revised when material updates are published.

13. Contact

Questions about this Privacy Policy or personal-data matters relating to the public website may be sent to info@certusenergycapital.com.

This page does not list a physical address or named data-protection officer unless those details are later approved for publication.