ORREL

Privacy Policy

Last updated: 1 April 2026

Note: This Privacy Policy is provided for informational purposes. ORREL recommends that you seek independent legal advice to ensure full compliance with the Nigeria Data Protection Act (NDPA) 2023 and applicable international data protection regulations.

1. Who we are

Osmium Robotics and Renewable Energies Ltd ("ORREL", "we", "us", "our") is a Nigerian deep-technology company registered in Nigeria. Our registered address is Nigeria. We operate the website at orrelng.com and its subdomains, including the SolarCheckNG platform at solar.orrelng.com.

For privacy-related enquiries, contact us at: info@orrelng.com

2. What data we collect

We collect the following categories of personal data:

  • Contact information — name, email address, phone number, and organisation name submitted via our contact form.
  • SolarCheckNG inputs — your Nigerian state, user type (household, SME, industrial), appliance selections, and system preferences. This data is processed locally in your browser and is not stored on our servers unless you explicitly submit a request.
  • Communication data — the content of emails, WhatsApp messages, or other communications you send to us.
  • Technical data — IP address, browser type, device type, pages visited, and time spent on our website, collected via standard web server logs and analytics tools.
  • Cookies — small files placed on your device to improve your browsing experience. See our Cookies Policy for full details.

3. How we use your data

We use your personal data for the following purposes:

  • To respond to your enquiries and provide the services you have requested.
  • To deliver and improve the SolarCheckNG advisory tool.
  • To send you information about our services where you have requested this.
  • To comply with our legal obligations under Nigerian and applicable international law.
  • To protect the security and integrity of our website and services.
  • To analyse how our website is used so we can improve it.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Legal basis for processing

Under the Nigeria Data Protection Act (NDPA) 2023 and applicable international regulations, we process your personal data on the following legal bases:

  • Consent — where you have given us clear consent to process your data for a specific purpose.
  • Contract — where processing is necessary to perform a contract with you or to take steps at your request before entering a contract.
  • Legitimate interests — where processing is necessary for our legitimate business interests, provided these are not overridden by your rights.
  • Legal obligation — where we are required to process your data to comply with applicable law.

5. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Contact form submissions are retained for up to 2 years. Technical and analytics data is retained for up to 12 months. You may request deletion of your data at any time by contacting us.

6. Data sharing

We may share your personal data with:

  • Service providers — third-party companies that provide services on our behalf, including hosting providers (Hostinger), AI API services (Anthropic), and analytics providers. These providers are contractually bound to protect your data.
  • Legal authorities — where we are required to disclose data by law, court order, or government authority.
  • Business transfers — in the event of a merger, acquisition, or sale of our business, your data may be transferred to the relevant third party.

We do not transfer your personal data outside Nigeria unless appropriate safeguards are in place in accordance with the NDPA 2023.

7. Your rights

Under applicable data protection law, you have the following rights:

  • Right of access — to request a copy of the personal data we hold about you.
  • Right to rectification — to request correction of inaccurate or incomplete data.
  • Right to erasure — to request deletion of your personal data in certain circumstances.
  • Right to restrict processing — to request that we limit how we use your data.
  • Right to data portability — to receive your data in a structured, machine-readable format.
  • Right to object — to object to processing based on legitimate interests.
  • Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time.

To exercise any of these rights, contact us at info@orrelng.com. We will respond within 30 days.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include HTTPS encryption, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Third-party links

Our website contains links to third-party websites including GSASConnect, AlphaPorous, and external research publications. We are not responsible for the privacy practices of these third parties and encourage you to review their privacy policies.

10. Children's privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated effective date. Your continued use of our services after any changes constitutes acceptance of the updated policy.

12. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at:

Osmium Robotics and Renewable Energies Ltd
Email: info@orrelng.com
Phone: +234 901 365 6342
Website: orrelng.com