Data Protection
Last updated 28 October 2026
Our commitment
LINEARJEPH LTD processes personal data in line with applicable data protection law, including the EU/UK GDPR where it applies and the Nigeria Data Protection Act 2023 where it applies, and other laws in the countries we serve.
Roles
- Controller: we control account, billing and security data about our customers.
- Processor: for personal data inside Your Content (for example user records in a database you host with us) we act as your processor and process it only on your instructions. A data processing agreement is available on request from [email protected].
Principles we apply
- Minimization: we collect only what each feature needs.
- Purpose limitation: data collected for billing isn't used for unrelated purposes.
- Security by design: encryption, access control, audit trails and tested backups.
- Storage limitation: retention periods are defined in the Privacy Policy.
Technical and organizational measures
- TLS for all traffic; HSTS on our sites.
- Passwords hashed with Argon2id; two-factor secrets and integration keys encrypted with keys held outside the database.
- Mandatory two-factor and step-up confirmation for staff; role-based access with least privilege.
- Immutable audit log of administrative and financial actions.
- Network segmentation; databases and internal services not exposed to the internet.
- Encrypted backups, kept separately from production credentials.
- Automated abuse detection and honeypots that alert our security team.
Breach notification
If a personal data breach is likely to put your rights at risk, we notify affected customers and the competent authority without undue delay, and where required within 72 hours of becoming aware of it.
Data subject requests
Send requests to [email protected]. We verify identity before acting and respond within 30 days. Processor requests about Your Content are forwarded to you.
Sub-processors
We use vetted providers for payments, network/edge security, infrastructure and email. A current list is available on request; we give notice before adding a new sub-processor for customer content.
Effective 28 October 2026.