1. Who we are
| Data controller | Stiemfield Global Convergence |
|---|---|
| Office | Abuja, Federal Capital Territory, Nigeria |
| Privacy contact | asarpaul8@gmail.com |
| Telephone | +234 808 102 1785 |
2. What we collect
- Contact details you give us — your name, work email, organisation and role — for example when you complete the STIEM Self-Check or enquire about an engagement.
- Bid Strategy requests — your name, organisation, the funding opportunity and its deadline, the service you need, your WhatsApp number, and your email and a link to the call if you give them — when you contact us about a bid, by our form or on WhatsApp.
- Bid documents you share with us — calls for proposals, drafts, budgets and supporting evidence — used only to prepare your bid and your Bid Scorecard.
- Business figures you share with us — questionnaire answers and figures such as sales, costs and records — used only to prepare your report.
- Self-Check responses — your answers to the ten questions and the scores derived from them (your Convergence Index, weakest force and gap pattern).
- Engagement information — notes, interview records and documents you share with us during a diagnostic.
- Public information about your organisation — what its own website, news coverage and encyclopaedia entries say about it — when you send us your details, so that we come to a conversation prepared. We research the organisation, not you personally.
- Basic technical data our hosting provider records in order to serve and secure the site.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Respond to your enquiry and send your Self-Check report, a short follow-up on your weakest force three days later and a proposal a week later (reply STOP to any of them to opt out) | Your consent, and our legitimate interest in replying to people who contact us |
| Reply to your Bid Strategy request by WhatsApp or email with a quote and next steps | Your consent, and our legitimate interest in replying to people who contact us |
| Prepare for a conversation with you by reading public information about your organisation | Our legitimate interest in understanding the organisations that contact us |
| Deliver an engagement you have commissioned | Performance of a contract |
| Improve our methods and instruments | Legitimate interest — using anonymised, non-identifying learning only |
| Meet legal, tax and accounting obligations | Legal obligation |
We do not sell personal data, and we do not use it for automated decision-making that produces a legal or similarly significant effect on you.
4. Who we share it with
Only our hosting, email, messaging and research-tool providers, who process it on our instructions; our professional advisers where necessary; and anyone we are required to disclose to by law. Any vetted subcontractor working on your engagement is bound by equivalent confidentiality and data-protection obligations.
5. International transfers
Our website host and email provider may process data outside Nigeria. Where they do, we rely on providers that offer an adequate level of protection together with appropriate contractual safeguards, as the NDPA requires.
6. How long we keep it
| Enquiries and Self-Check results | Up to 24 months from your last contact with us |
|---|---|
| Engagement records | Seven years from the end of the engagement, for legal and tax purposes |
| Details used for the Self-Check follow-up emails, and the research notes on your organisation | Deleted from our server 30 days after the last email |
| Anything you ask us to delete | Deleted within 30 days, unless we are required by law to keep it |
7. Your rights
Under the NDPA you may ask us to give you access to your personal data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. Where we rely on your consent, you may withdraw it at any time.
To exercise any of these, email asarpaul8@gmail.com. We respond within 30 days. If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission.
8. Security
We apply appropriate technical and organisational measures, keep access to personal data limited to those who need it, and will notify you and the Commission of a breach where the NDPA requires it.
9. Changes
We will post any change to this policy on this page.