Privacy Policy

Last updated: May 2026

This Privacy Policy is provided in compliance with the Nigeria Data Protection Act 2023 (NDPA) and, where applicable to visitors and clients based in the United Kingdom or European Economic Area, the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Amber Royal Multi Ltd is a multi-sector services group headquartered in Lagos, Nigeria, with a branch office in the United Kingdom (Amber Multi UK Ltd, registered in England and Wales under company number 14017710). We are the data controller for personal information collected through this website and our service engagements.

2. Information We Collect

We may collect the following personal information:

• Contact details — name, email address, phone number, and company name, provided when you contact us, request a quote, or submit an enquiry.
• Career applications — CV, qualifications, work history, and related information submitted through career enquiries.
• Service engagement data — project details, specifications, and correspondence related to active engagements.
• Website usage data — IP address, browser type, pages visited, and visit duration, collected through cookies and analytics tools.

3. How We Use Your Information

We use your personal information to:

• Respond to enquiries and provide quotes
• Deliver and manage our services
• Process career applications
• Communicate about ongoing engagements
• Improve our website and services
• Comply with legal and regulatory obligations

We do not sell or rent your personal information to third parties.

4. Legal Basis for Processing

We process personal data on the following legal grounds:

• Contractual necessity — to fulfil service agreements and respond to enquiries.
• Legitimate interest — to improve our services and maintain business relationships.
• Consent — where you have opted in to receive communications from us.
• Legal obligation — to comply with applicable laws and regulations.

5. Data Sharing

We may share personal information with:

• Amber Multi UK Ltd — our UK branch office (registered with the UK ICO under reference ZB573769), for engagements involving UK or European operations.
• Service providers — trusted third parties who assist in delivering our services (e.g. IT hosting, email services), bound by confidentiality agreements.
• Legal authorities — when required by law, regulation, or legal proceedings.

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is retained for up to 24 months. Service engagement records are retained in accordance with our contractual and legal obligations. Career application data is retained for up to 12 months after the application, unless you request earlier deletion.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes encrypted communications, access controls, and regular security reviews.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at info@amberroyalmulti.com.

Right to complain. You have the right to lodge a complaint with a data protection supervisory authority if you believe we have not handled your personal data in accordance with applicable law:

• In Nigeria: the Nigeria Data Protection Commission (NDPC) — see ndpc.gov.ng.
• In the United Kingdom: the Information Commissioner's Office (ICO) — see ico.org.uk or call 0303 123 1113.

9. International Transfers

Personal data may be transferred between Amber Royal Multi Ltd in Nigeria and our UK branch office, Amber Multi UK Ltd, where necessary to deliver coordinated services across the group.

Nigeria does not currently have an adequacy decision from the UK Government under the UK GDPR. Transfers of personal data from the United Kingdom to Nigeria are made under appropriate safeguards in accordance with UK GDPR Articles 46 to 49, including the UK International Data Transfer Agreement (IDTA), Standard Contractual Clauses (SCCs), or other lawful transfer mechanisms.

You may request information about the specific safeguards applied to a transfer relating to your personal data by contacting us using the details in the Contact section below.

10. Automated Decision-Making

We do not use your personal data for automated decision-making, including profiling, that produces legal or similarly significant effects on you. Decisions affecting our engagements with you are made by people.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.