Privacy Policy

Table of Contents

1. Introduction
2. Information We Collect
3. How We Use Your Information
4. Legal Basis for Processing
5. Information Sharing
6. Cross-Border Data Transfers
7. Your Rights
8. Data Retention
9. Data Security
10. Children's Privacy
11. Your Choices and Controls
12. Third-Party Services
13. Policy Updates
14. Contact Information

1. Introduction

At Seamium Ltd. (referred to as "Seamium," "we," "our," or "us"), protecting your personal information is a top priority. This Privacy Policy describes how we collect, use, share, and protect your data when you use our services, including our mobile app, web platform, Seamium Pay, and related tools (together called the "Services").

We protect your privacy according to the Nigeria Data Protection Act, 2023 (NDPA) and other international standards like the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act where they apply.

This Privacy Policy covers everyone who uses our platform in Nigeria and other countries, across all Seamium Services, whether you access them through mobile app, desktop, or integrated systems, plus any interaction you have with our team, support, billing, or automated systems.

By using Seamium, you agree to what's described in this Privacy Policy. If you don't agree with these terms, please stop using our Services.

2. Information We Collect

To provide and improve our Services, Seamium collects these types of information:

A. Personal Information

Information that identifies you directly or indirectly:

• Full name
• Email address
• Phone number
• Account login details (stored securely)
• Business or home address (when needed for energy services)

B. Energy Usage and System Data

Collected through connected devices and platform use:

• Real-time and past energy consumption
• Device usage patterns (like solar panels, EV chargers, batteries)
• System diagnostics and performance data
• Automation settings and your preferences

C. Technical and Device Information

Collected automatically for service function and security:

• IP address
• Browser type and version
• Operating system and device identifiers
• App version and platform activity logs

D. Location Data

Collected only when necessary and with your permission:

• Approximate or exact location (for optimization or grid alignment)
• Location-based preferences for mobile app users

E. Payment and Transaction Data (Seamium Pay)

Handled securely through encrypted channels:

• Billing details (payment methods, transaction history)
• Invoices and energy-related billing data
• Smart billing preferences (auto-pay, alerts)

F. Communication Data

When you contact our team or interact with support:

• Emails, messages, and service tickets
• Feedback or survey responses
• Communication preferences

G. Third-Party Integrations

If you connect external tools (like Google Home, smart meters):

• Data shared through authorized APIs (with your permission)

3. How We Use Your Information

Seamium processes your data for valid purposes and never sells your personal information. We use your data to:

A. Provide and Improve Our Services

• Enable energy monitoring, smart planning, and predictive optimization
• Maintain your account, profile, and settings
• Support device integrations and automation routines
• Personalize your energy experience based on usage patterns

B. Power Seamium Pay

• Generate accurate, AI-optimized billing
• Process payments securely
• Provide real-time usage reports and cost summaries
• Prevent fraud and unauthorized transactions

C. Communicate with You

• Send service updates, alerts, and performance summaries
• Provide customer support and respond to questions
• Deliver onboarding guides and troubleshooting information
• Share marketing updates (if you've opted in)

D. Improve and Secure Our Platform

• Analyze performance trends to optimize services
• Detect problems, prevent fraud, and keep systems reliable
• Conduct troubleshooting and diagnostics
• Develop new features and improvements

E. Comply with Legal Obligations

• Respond to lawful requests from regulators or courts
• Maintain business records for tax, audit, or regulatory compliance
• Enforce your Terms of Service and protect our rights

F. With Your Consent

• Enable participation in beta testing or research
• Share usage data with third-party services you've connected
• Deliver personalized recommendations or offers

4. Legal Basis for Processing

Seamium processes personal data according to applicable privacy laws. We rely on these legal bases:

A. Consent

We process your data with your clear informed consent when:

• You sign up and agree to this Privacy Policy
• You opt-in to receive marketing communications
• You authorize integration with third-party systems

You may withdraw your consent anytime by contacting us or adjusting your account settings.

B. Contractual Necessity

We process your data to fulfill our contractual obligations:

• To provide access to Seamium's energy management services
• To process payments through Seamium Pay
• To deliver support and maintain your account

C. Legal Obligation

We process data to comply with legal requirements:

• Tax laws, financial reporting, and regulatory compliance
• Fraud prevention, dispute resolution, or lawful investigations

D. Legitimate Interests

We process data for valid business purposes that don't override your rights:

• Monitoring system performance and improving our Services
• Conducting internal analytics and behavioral studies
• Responding to security threats or service misuse
• Offering personalized features and recommendations

E. Vital Interests

In rare cases, we may process data to protect vital interests (like critical safety alerts).

5. Information Sharing

Seamium never sells your personal information. We share your data only when necessary to deliver our services, fulfill legal obligations, or improve your experience with proper safeguards.

A. Service Providers and Partners

We work with trusted third parties who help us operate Seamium:

• Cloud infrastructure providers
• Analytics tools (for usage data and optimization)
• Payment processors (for Seamium Pay transactions)
• Customer support and communication platforms

These partners access only the data needed for their specific function and are contractually required to protect it.

B. Device and Platform Integrations

If you connect Seamium with third-party energy tools or platforms, we may share relevant data with those systems with your permission. You control and can revoke these integrations at any time.

C. Legal and Regulatory Disclosure

We may disclose your personal information if:

• Required by law, regulation, subpoena, or court order
• Necessary to report fraud, abuse, or illegal activity
• Needed to protect the rights or property of Seamium, its users, or the public

D. Business Transfers

If Seamium is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. We will notify you and maintain protection of your information.

E. With Your Consent

With your clear consent, we may share your information for other purposes not listed above.

6. Cross-Border Data Transfers

As a cloud-based platform, your personal data may be transferred to, stored in, or processed in countries outside Nigeria, including regions where our trusted service providers operate.

A. International Hosting

We may store and process data on secure servers hosted by cloud providers in different locations. These providers must:

• Put in place proper safeguards (encryption, access controls)
• Comply with privacy laws and data protection standards
• Process data only according to our instructions

B. Legal Protections

For international transfers, we make sure:

• Data protection agreements are in place (like Standard Contractual Clauses)
• Transfers are made to countries with proper privacy protections
• Technical measures protect your data in transit and at rest

C. Your Rights

Regardless of where your data is processed, your privacy rights outlined in this policy remain fully protected and enforceable.

7. Your Rights

Seamium respects your personal data rights. Depending on your location and applicable laws, you may exercise these rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Update or correct any inaccurate or incomplete information.
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your data, subject to legal retention requirements.
• Right to Restrict Processing: Limit how your personal data is used.
• Right to Data Portability: Receive your data in a machine-readable format for transfer to another service.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw previously granted consent at any time.
• Right to Lodge a Complaint: Contact the Nigeria Data Protection Commission (NDPC) or your local data protection authority if you are unsatisfied with our data handling.

8. Data Retention

Seamium retains your personal data only as long as necessary to fulfill the purposes described in this Privacy Policy unless a longer period is required by law or legitimate business needs.

A. Retention Periods

• Account data: For the duration of your active account
• Usage and energy data: Up to 5 years for optimization and compliance
• Billing and financial records: At least 6 years for legal, tax, and audit purposes
• Support communications: Up to 3 years to improve service and resolve disputes
• Marketing preferences: Until you opt-out or delete your account

B. Anonymous and Aggregated Data

We may retain de-identified or aggregated data indefinitely for analytics and platform improvement.

C. Account Deletion

When you delete your account:

• Your personal data will be securely erased or anonymized within 30 days
• Third-party integrations will be disconnected
• Required records may be retained as required by law

9. Data Security

Seamium puts in place industry-standard security measures to protect your data from unauthorized access, loss, misuse, or alteration.

A. Technical Safeguards

• Encryption: All data encrypted in transit (TLS/SSL) and at rest
• Access Controls: Role-based access for authorized personnel
• Multi-Factor Authentication (MFA): For system access and admin tools
• Security Monitoring: Continuous monitoring for threats
• Regular Testing: Vulnerability scanning and penetration tests

B. Organizational Safeguards

• Complete data protection policies
• Regular staff training on privacy and security
• Vendor security reviews for all partners
• Incident response protocols

C. Your Security Responsibilities

• Keep your login details private
• Enable available security features
• Report suspected unauthorized activity promptly

D. Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify you promptly in compliance with applicable laws
• Inform relevant regulatory authorities
• Provide guidance on protective measures

10. Children's Privacy

Seamium's services are designed for adult users. We do not knowingly collect personal data from individuals under 16 years of age or the minimum age required by local laws.

If we discover we have accidentally collected data from a child, we will promptly delete the information and disable the associated account.

11. Your Choices and Controls

Seamium provides various options to control your data:

A. Account Management

• Update your profile and preferences through your account settings
• Request account deactivation or deletion via your dashboard or [email protected]

B. Communication Preferences

• Opt in or out of marketing communications
• Manage push notifications in your app settings
• Essential service messages (billing, security) cannot be disabled

C. Tracking Controls

• Manage cookies through our cookie banner or browser settings
• Control analytics and tracking tools where available

D. Third-Party Connections

• Enable or disable integrations with other platforms
• Revoke access through Seamium settings

E. Location Services

• Control location sharing through device or app permissions

12. Third-Party Services

Seamium may integrate with or link to third-party services that operate under their own privacy policies.

A. Integrations

When you connect Seamium with third-party services (like smart devices, payment systems), these parties may collect and process your data according to their own terms. We recommend reviewing their privacy policies before enabling integrations.

B. External Links

Our platform may contain links to external websites. We are not responsible for the privacy practices of these sites.

C. Third-Party Tools

We may use analytics, security, and marketing tools from trusted vendors who must:

• Use data solely for authorized purposes
• Put in place adequate protection measures
• Comply with applicable privacy laws

13. Policy Updates

We may occasionally update this Privacy Policy to reflect changes in our practices or legal requirements.

A. Notification

For material changes, we will:

• Post the revised policy on our website and app
• Update the "Last Updated" date
• Notify you directly when changes significantly affect your rights

B. Review

We encourage you to review this policy periodically. Your continued use after updates means acceptance of the revised terms, unless applicable law requires explicit consent.

14. Contact Information

For questions, concerns, or requests regarding this Privacy Policy:

Legal and Compliance Contact
Seamium HQ.
Email: [email protected]

We aim to respond to all inquiries within a reasonable timeframe, typically within 5 to 10 business days.