Who we are
This policy explains how HBC Professional Consulting Services (trading as HBC Business Help) collects and uses personal data through Advising The Founder (book pre-order) (advisingthefounder.com/preorder). We decide why and how your data is used, so we are the data controller under the Nigeria Data Protection Act 2023 (NDPA) and the General Application and Implementation Directive 2025 (GAID).
- Address: No 5, Oremeji Bus-Stop, Oyo Road, Mokola, Ibadan, Oyo State, Nigeria
- Phone: +234 813 320 5522
- General enquiries: info@hbcbusinesshelp.com.ng
- Data Protection Officer: dpo@nlbs.com.ng
Questions about this policy or your data go to our Data Protection Officer at dpo@nlbs.com.ng.
What we collect, why, and our lawful basis
We only collect what each form needs. For each way you deal with us:
Book pre-order
- What: Full name, email, phone, number of copies, delivery address, city, state, country (if outside Nigeria) and delivery notes. From Paystack: whether you paid, the amount, the payment channel and Paystack's transaction ID. If you come from the Nigeria 2.0 Talent Fund application, the return link to it.
- Why: To take payment, confirm your order by email, give the first 500 buyers their bonus, and deliver your books.
- Lawful basis: Our contract with you (the pre-order), and our legal obligation to keep accounting and tax records.
- How long we keep it: 6 years from the order, because Nigerian company and tax law requires us to keep sales records that long. After that, deleted.
Privacy request form
- What: Full name, email, phone (optional), the right you want to use and the details you give us.
- Why: To verify who you are and answer your request.
- Lawful basis: Our legal obligation under the NDPA.
- How long we keep it: 3 years from our answer, as proof that we handled your request.
We do not sell your personal data, and we do not use it for advertising profiles.
Information collected automatically
- Our server keeps standard access logs (IP address, browser type, page requested, time) for 30 days to keep the site secure and fix faults.
- When you submit a form we store your browser type and a scrambled (one-way, keyed) version of your IP address to spot abuse and repeat spam. We do not store your raw IP address with your submission.
- We do not use analytics, advertising or tracking cookies. What the site keeps in your browser is listed in our Cookie Policy.
Transfers outside Nigeria
Some of the recipients above may store or process data outside Nigeria: Our web hosting provider; Google (Google Fonts). We only transfer personal data abroad where the NDPA allows it: to a country the NDPC recognises as giving adequate protection, under contractual safeguards that give your data the same level of protection it has in Nigeria, or on another ground the NDPA permits. Ask our Data Protection Officer for details of the safeguards that apply.
How long we keep it
| Data | Kept for |
|---|---|
| Book pre-order | 6 years from the order, because Nigerian company and tax law requires us to keep sales records that long. After that, deleted. |
| Privacy request form | 3 years from our answer, as proof that we handled your request. |
Server logs are kept for 30 days. When a period ends, our system deletes the personal data automatically or keeps only anonymous totals (for example, how many people registered).
How we protect it
- All pages and forms use encrypted connections (HTTPS).
- Submissions are stored in a private database. Uploaded files are kept in private storage that is not reachable from the web.
- Staff sign in to a password-protected dashboard and see only the websites assigned to them.
- Payments are handled by Paystack. We never receive or store card or bank details.
- If a personal data breach puts your rights at risk, we notify the NDPC within 72 hours of becoming aware of it, and we tell you directly, without undue delay, if the risk to you is high, with advice on how to protect yourself.
Your rights
Under the NDPA you have the right to:
- Be informed about how we use your data (this policy).
- Access your data and get a copy of it.
- Correct data that is wrong or incomplete.
- Delete your data when we no longer need it, when you withdraw consent, or when it was processed unlawfully.
- Restrict our use of your data while a complaint or correction is being looked at.
- Data portability: receive your data in a common machine-readable format (JSON or CSV) or have us send it to another organisation.
- Object to processing based on our legitimate interests, and to direct marketing at any time.
- Withdraw consent at any time, where we rely on consent. This does not affect what we did before you withdrew it.
- Not be subject to a decision based only on automated processing that significantly affects you, and to ask for a person to review it.
- Complain to the Nigeria Data Protection Commission (see "Complaints" below).
How to use your rights
- Fill in our privacy request form, or email dpo@nlbs.com.ng.
- It is free. We may ask you to confirm your identity first, usually by replying from the email address you used with us, so we never give your data to someone else.
- We answer within 30 days. If a request is complex we will tell you within that time why we need longer.
- If we cannot do what you ask (for example, we must keep sales records by law), we explain why.
Children
Our websites and forms are for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18 without the consent of a parent or guardian. If you believe a child has sent us personal data, email dpo@nlbs.com.ng and we will delete it.
Complaints
Please contact us first at dpo@nlbs.com.ng so we can put things right. You also have the right to complain to the regulator at any time:
- Nigeria Data Protection Commission (NDPC)
- Email: dpo@ndpc.gov.ng
- Website: ndpc.gov.ng
Changes to this policy
This policy took effect on 1 October 2026 (version 2026-10-10). If we change how we use your data, we update this page and its date, and where the change matters to you we tell you before it applies. Each form records the version of this policy that was shown when you submitted it.