Policies & Governance

Suffix Solutions Limited (“Suffix Solutions”, “we”, “us”, or “our”) is committed to protecting the privacy of individuals whose personal data we process. This Privacy Policy explains how we collect, use, store, share, and protect your personal information in accordance with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023.

We may collect the following categories of personal data:

• Contact information (name, email address, phone number, postal address)
• Professional information (job title, employer, business sector)
• Communication records (emails, enquiry forms, support tickets)
• Technical data (IP address, browser type, device identifiers, cookies)
• Financial and transactional data where applicable to service delivery

We process personal data for the following purposes:

• Delivering contracted services and fulfilling our obligations to clients
• Responding to enquiries and providing customer support
• Sending relevant communications with your consent
• Improving our website, products, and services
• Meeting our legal and regulatory obligations
• Preventing fraud and ensuring security of our systems

We process your personal data on the basis of: (a) performance of a contract or pre-contractual steps; (b) compliance with a legal obligation; (c) your consent where applicable; and (d) our legitimate interests in operating and improving our services, provided those interests are not overridden by your rights.

We do not sell personal data. We may share data with: (a) service providers who process data on our behalf under appropriate data processing agreements; (b) regulatory authorities where required by law; (c) professional advisors bound by confidentiality obligations. All third parties are required to maintain the confidentiality and security of your data.

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. Retention periods are defined in our Data Retention Schedule and reviewed annually.

Under the NDPR and NDPA, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request erasure of your data where legally permitted
• Object to or restrict processing
• Data portability where applicable
• Withdraw consent at any time without affecting prior processing

To exercise any right, contact us at: privacy@suffixsolutions.com

Our website uses cookies and similar technologies to enhance your experience. You may manage cookie preferences through your browser settings or our cookie consent tool. Essential cookies cannot be disabled as they are required for the website to function.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our information security practices are governed by our ISO/IEC 27001:2022 certified Information Security Management System.

For privacy-related enquiries or to exercise your rights, contact our Data Protection Officer at: privacy@suffixsolutions.com or write to: Suffix Solutions Limited, Lagos, Nigeria.

By accessing or using any Suffix Solutions service, website, or platform, you agree to be bound by these Terms of Service. If you do not agree, you must not access or use our services.

Suffix Solutions provides enterprise technology services including infrastructure, cybersecurity, networking, collaboration, licensing advisory, IT outsourcing, and software development. The specific scope of services is defined in the applicable Statement of Work or Service Agreement executed between the parties.

Clients are responsible for:

• Providing accurate and complete information necessary for service delivery
• Ensuring appropriate authorisations for systems and data accessed during service delivery
• Complying with all applicable laws and regulations
• Paying invoices within agreed payment terms
• Notifying Suffix Solutions promptly of any security incidents or policy breaches

Unless otherwise agreed in writing, all pre-existing intellectual property remains the property of its respective owner. Deliverables created specifically for a client under a service engagement vest in the client upon full payment. Suffix Solutions retains rights to tools, methodologies, and know-how developed independently of any client engagement.

Both parties agree to maintain the confidentiality of proprietary or sensitive information disclosed during the course of the engagement. Confidentiality obligations survive termination of any agreement for a period of three (3) years unless otherwise specified.

To the maximum extent permitted by applicable law, Suffix Solutions’ aggregate liability for any claim arising out of or relating to services shall not exceed the total fees paid by the client in the three (3) months preceding the claim. Suffix Solutions shall not be liable for indirect, incidental, or consequential damages.

These Terms are governed by the laws of the Federal Republic of Nigeria. Any disputes shall be subject to the exclusive jurisdiction of the courts of Lagos State, Nigeria.

Suffix Solutions reserves the right to update these Terms of Service. Material changes will be communicated to clients in advance. Continued use of services after notification constitutes acceptance of the updated terms.

This Data Protection Policy establishes the principles, responsibilities, and controls by which Suffix Solutions Limited manages personal data in compliance with the Nigeria Data Protection Regulation (NDPR) 2019, the Nigeria Data Protection Act (NDPA) 2023, and our ISO/IEC 27001:2022 certified information security framework.

This policy applies to all personal data processed by Suffix Solutions, including data relating to clients, prospective clients, employees, contractors, partners, and website visitors, regardless of the format in which the data is held.

All personal data must be:

• Lawfully processed: with a valid legal basis under the NDPR/NDPA
• Fairly and transparently processed: individuals must be informed of how their data is used
• Collected for specified purposes: data must not be used for incompatible purposes
• Adequate, relevant, and limited: only the minimum data necessary should be collected
• Accurate and kept up to date: inaccurate data must be corrected or erased
• Stored no longer than necessary: in accordance with retention schedules
• Secured: appropriate technical and organisational measures must be in place

• Data Protection Officer (DPO): Oversees compliance with data protection law and this policy
• Management: Ensures adequate resources and training are available
• All staff: Must comply with this policy and report any suspected breaches immediately

Suffix Solutions respects and facilitates the rights of data subjects under the NDPA, including rights of access, rectification, erasure, restriction, portability, and objection. All requests must be responded to within 30 days of receipt.

All suspected data breaches must be reported to the DPO immediately. Confirmed breaches involving risk to data subjects will be reported to the Nigeria Data Protection Commission (NDPC) within 72 hours. Affected individuals will be notified without undue delay where required.

This policy is reviewed annually or following significant changes in data protection law, business operations, or upon any major data incident.

Suffix Solutions Limited is committed to providing a safe, healthy, and environmentally responsible working environment for all employees, contractors, visitors, and third parties affected by our operations. We believe that all work-related injuries, illnesses, and environmental incidents are preventable, and we are committed to achieving the highest practicable standards of health, safety, and environmental (HSE) performance.

Suffix Solutions commits to:

• Comply with all applicable Nigerian health, safety, and environmental legislation
• Identify and mitigate workplace hazards through proactive risk assessments
• Provide adequate HSE training and resources to all personnel
• Promote a culture of safety awareness and personal responsibility
• Reduce our environmental footprint through efficient resource use and waste minimisation
• Investigate all incidents and near-misses to prevent recurrence
• Continuously improve our HSE management system

• Executive Leadership: Provides visible commitment to HSE, allocates resources, and approves policy
• HSE Officer: Implements HSE programmes, monitors performance, and reports to management
• All Employees: Follow safe working procedures, report hazards, and participate in HSE initiatives
• Contractors: Must comply with this policy and any site-specific HSE requirements

We are committed to:

• Minimising energy consumption across our operations
• Responsible disposal of electronic waste (e-waste) through certified channels
• Reducing paper consumption and promoting digital workflows
• Procuring environmentally preferable products and services where feasible

This Corporate Governance, Risk & Compliance (GRC) Policy establishes the framework by which Suffix Solutions Limited manages corporate governance, enterprise risk, and regulatory compliance. It reflects our commitment to operating with integrity, accountability, and transparency across all business activities.

Suffix Solutions maintains a governance structure comprising:

• Board / Executive Leadership: Strategic oversight, policy approval, and accountability
• Operations Management: Day-to-day governance implementation
• Risk & Compliance Function: Monitoring, reporting, and continuous improvement
• Internal Controls: Preventive and detective controls across all business processes

Our risk management approach includes:

• Annual enterprise risk assessments covering strategic, operational, financial, and regulatory risks
• A Risk Register maintained and reviewed quarterly
• Risk categorisation by likelihood and impact
• Defined risk appetite and tolerance thresholds approved by executive leadership
• Risk treatment plans with assigned owners and timelines

Suffix Solutions is committed to compliance with:

• Nigeria Data Protection Regulation (NDPR) 2019 and Nigeria Data Protection Act (NDPA) 2023
• National Information Technology Development Agency (NITDA) guidelines
• ISO 9001:2015 Quality Management System requirements
• ISO/IEC 27001:2022 Information Security Management System requirements
• All applicable Nigerian corporate law and tax legislation

• Managing Director: Accountable for the overall GRC framework
• Risk & Compliance Officer: Manages day-to-day GRC operations and reporting
• All Employees: Responsible for adhering to this policy and reporting concerns

Violations of this policy may result in disciplinary action up to and including termination of employment or contract. Serious violations may be referred to appropriate regulatory authorities.

This policy is reviewed annually, or more frequently where required by changes in regulation, significant risk events, or material changes to the business.

Suffix Solutions Limited is committed to delivering enterprise technology solutions and services that consistently meet and exceed client expectations, conform to applicable requirements, and support the sustainable success of every organisation we serve.

Our ISO 9001:2015 certified Quality Management System governs how we plan, deliver, measure, and improve our services — ensuring quality is embedded at every stage of engagement, from initial consultation through to long-term support.

We are committed to:

• Delivering services on time, to scope, and to the agreed standard
• Achieving high levels of client satisfaction across all engagements
• Continuously improving our processes, tools, and service delivery capabilities
• Meeting all contractual, regulatory, and certification requirements
• Building a culture where quality is everyone’s responsibility

We systematically measure service performance through client feedback, internal audits, non-conformance tracking, and management reviews. Identified improvements are formally documented, actioned, and verified to prevent recurrence and drive measurable progress.

We invest in the competence, training, and professional development of our people — recognising that quality delivery depends on skilled, motivated, and engaged professionals. Role-specific quality responsibilities are defined and communicated to all personnel.

Suffix Solutions complies with all applicable laws, regulations, standards, and client requirements relevant to our services. Our quality system is subject to annual external certification audit by an accredited certification body.