Privacy Notice

NAZIMSOFT LTD is a private company limited by shares under CAMA 2020 — RC 9982762, TIN 2623602692482 — of Gada Biyu, Gidan Dutsi, Gusau, Zamfara State, Nigeria. In this notice "we" and "us" mean that company.

We provide four products. They are business names (trade lines) of NAZIMSOFT LTD, not separate companies:

• NAZIMSolar Hub — our multi-vendor solar marketplace. A registered business name of NAZIMSOFT LTD, business name registration RC 9994331.
• NAZIMSolar Store — our solar storefront. A name reserved with the Corporate Affairs Commission; the business name registration is in progress.
• NAZIMSolar Quote Services — our solar sizing and quoting service. A name reserved with the Commission; registration is in progress.
• NAZIMRealPro Hub — our real-property platform for markets and operators. A name reserved with the Commission; registration is in progress.

Two different numbers, and they are not interchangeable: 9982762 is the company, and 9994331 is NAZIMSolar Hub's business name registered under it.

Whichever of the four you are dealing with, the trading entity is NAZIMSOFT LTD — and it is the company, not the trade line, that is your data controller and owes you the obligations in this notice. For any question, or to exercise your rights, contact our data protection contact at azmin@nazimsoft.com.

This notice covers personal data we process when you:

• create an account or browse a platform;
• buy goods or services as a buyer;
• register as a vendor and offer goods or services; or
• contact us, complain, or take part in a promotion.

It does not cover what a vendor does with your data. Vendors are separate businesses and separate data controllers. Where you deal with a vendor, the vendor's own privacy notice applies to their processing. See section 5.3.

We do not knowingly collect more than we need. We do not ask for your date of birth, your national identification number, or your bank details unless a specific purpose requires it.

Where we rely on legitimate interests, we have balanced our interests against your rights. You may object — see section 8.

5.1 We do not sell your personal data. We do not share it for third parties' own advertising.

5.2 Service providers (processors). We use providers to run the platform — hosting, email, analytics, customer support and, where relevant, payment services. They act on our instructions under written agreements, and may use your data only to provide their service to us.

5.3 Vendors — the important one. When you buy from a vendor, we pass that vendor the details they need to fulfil your order — typically your name, delivery address, contact details and the order details. The vendor then becomes responsible for that data as its own controller. Vendors are contractually required to use it only to fulfil your order, not for their own marketing, and to protect it. If you have a concern about a vendor's use of your data, contact us and we will raise it.

5.4 Professional advisers. Lawyers, accountants and auditors, where needed.

5.5 Authorities. Regulators, law enforcement or courts, where the law requires it.

5.6 A sale of the business. If the Company is sold or restructured, data may transfer as part of it, on the same terms as this notice.

Our hosting and infrastructure provider (Cloudflare) operates a global network, so your personal data may be processed or stored outside Nigeria. Where we transfer personal data out of Nigeria, we do so only with the safeguards required by the Nigeria Data Protection Act 2023, currently by way of contractual safeguards agreed with our service providers.

We delete or anonymise data when the period ends, unless the law requires us to keep it longer.

You may:

• access the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• delete data where there is no good reason for us to keep it;
• restrict or object to processing, including profiling and direct marketing;
• withdraw consent at any time, where we relied on consent;
• port data you gave us, in a usable format; and
• complain to us, or to the Nigeria Data Protection Commission.

To exercise any of these, email azmin@nazimsoft.com. We will respond within 30 days. We may ask for proof of identity — this protects you from someone else obtaining your data.

Some rights are limited: for example, we cannot delete records we must keep for tax, or data needed to defend a legal claim.

We use appropriate technical and organisational measures, including: encryption in transit and at rest; access controls and least-privilege permissions; two-factor authentication on business accounts; logging; and written agreements with our processors. No system is perfectly secure, and we keep a breach-response plan.

We use cookies and similar technologies for: essential functions (keeping you signed in, your basket); preferences; analytics (understanding how the platform is used); and, only with your consent, advertising. You can control non-essential cookies through your browser settings. Blocking essential cookies may break parts of the platform.

The platforms are not intended for children under 18. We do not knowingly collect their data. If you believe a child has given us personal data, contact our data protection contact and we will delete it.

Contact us first at azmin@nazimsoft.com — most issues are resolved quickly. If you are not satisfied, you may complain to the Nigeria Data Protection Commission.

We may update this notice. The version and effective date are always shown at the top, and we will give notice on the platform of any material change. Continuing to use the platform after a change means you accept the updated notice.

Effective date: 10 November 2026 · Version 2.0