How Erikiimo collects and uses personal data

Who we are

TheHyWing Ltd ("Erikiimo", "we", "us") provides the Erikiimo website at erikiimo.io and the application at app.erikiimo.io. We are the data controller for account, billing and website data.

For operational records your organisation enters into its workspace, your organisation decides what is recorded and who can see it. We process those records on its behalf to provide the service.

Contact us about privacy at support@erikiimo.io.

What we collect

Depending on how you use Erikiimo, we process:

• Account data: your email address, sign-in codes and sign-in history.
• Workspace data: organisation name, members, roles and invitations.
• Operational data entered by your organisation: facilities and their addresses or map coordinates, assets, inventory, protection plans, process checks, tasks, actions, incidents and uploaded evidence files such as photos and documents.
• Alert data: phone numbers and email addresses you register for alerts, your consent and verification records, alert preferences and delivery status.
• Payment data: plan, amount and payment reference. Card and bank details are entered with our payment provider and never stored by Erikiimo.
• Technical data: IP address, browser and device information, request times, error codes and security events.
• Messages you send to our support address.

How we use it and our legal bases

We use personal data to create and secure your account, run your workspace, show weather and location information for your facilities, send alerts you have enabled, process payments, provide support, prevent abuse and meet legal obligations.

Under the Nigeria Data Protection Act 2023 and similar laws, we rely on performing our contract with you or your organisation, your consent (for example WhatsApp and email alerts), our legitimate interest in keeping the service secure and reliable, and compliance with legal obligations.

We do not use your data for advertising, sell it, or use your workspace records to train models or in examples without written agreement.

WhatsApp and email alerts

Alerts are sent only to numbers and addresses that have been verified and given consent. An alert contains the facility name, the action and its due time, the hazard, the responsible owner and a link back to Erikiimo.

WhatsApp messages are delivered through the WhatsApp Business Platform and an approved messaging partner, and emails through our email delivery provider. Replies you send to our WhatsApp number may be seen by our support team. You can turn alerts off in your notification settings at any time.

Location and weather

Erikiimo uses the locations of facilities, not the live location of people. Address searches are sent to our address-lookup provider to find coordinates, and facility coordinates are sent to our forecast and elevation data provider. Where enabled, Nigerian postcodes are checked with the national postcode service.

Forecasts and alerts support your decisions. They can be delayed, incomplete or wrong and are not a guarantee of safety.

Free risk snapshot on this website

When you request a free risk snapshot, the address you enter is sent to our address-lookup and forecast providers to produce the result. We do not ask for your name or email and do not link the address to you. Results are cached for up to one hour, and your IP address is used, in hashed form and for up to one hour, only to limit abuse.

Website visit counts

We count anonymous page visits, snapshot requests and sign-up clicks on this website as daily totals, without cookies, identifiers or storing IP addresses. If your browser sends a Do Not Track or Global Privacy Control signal, we do not count you.

Service providers

We share personal data only with providers that help us run Erikiimo, under contracts that limit their use of it, or when the law requires it. They fall into these categories:

• Cloud hosting, database and file storage (United Kingdom and European Union), including encrypted backups.
• Sign-in and identity verification.
• Email delivery for sign-in codes and alerts.
• WhatsApp messaging for alerts and replies.
• Address lookup, forecast and elevation data.
• Payment processing for paid plans.
• Domain name services and availability monitoring.
• Our support mailbox. A current list of sub-processors, with their locations, is available on request from support@erikiimo.io.

International transfers

Erikiimo stores data in the United Kingdom and the European Union, and some providers may process it in other countries. When personal data leaves Nigeria or your country, we rely on safeguards recognised by applicable law, such as adequacy decisions, contractual protections and the provider's security commitments.

How long we keep data

We keep account and workspace data while your account or workspace is active. Workspace administrators can set how long completed operational history and evidence are kept, and can place legal holds.

When an account or workspace is closed, we delete or anonymise its data within a reasonable period unless the law requires us to keep it. Encrypted database backups are kept for up to 35 days and then deleted automatically. Technical logs are rotated automatically and kept only as long as needed for security and troubleshooting.

Security

Data is encrypted in transit and at rest. Each organisation's workspace is isolated by database access rules, uploaded files are scanned for malware, and staff access is limited to what support and operations require. No system is perfectly secure; we will notify you and the authorities of a personal data breach where the law requires.

Your rights

Subject to applicable law, you can ask to access, correct, delete, restrict or object to the processing of your personal data, ask for a portable copy, and withdraw consent at any time without affecting earlier processing.

Email support@erikiimo.io. For records held in an organisation's workspace, we may refer your request to that organisation. If you are not satisfied, you can complain to the Nigeria Data Protection Commission or your local data protection authority.

Cookies

The Erikiimo application uses only cookies needed to keep you signed in and protect your session. This website and the application use no analytics, advertising or tracking cookies.

Children

Erikiimo is a business service for people aged 18 and over. We do not knowingly collect personal data from children.

Changes to this policy

We will update this page when our practices change and tell account holders about significant changes by email or in the application.

Contact

Email support@erikiimo.io.