Who we are
Peacebrooks Integrated Solutions LTD provides bookkeeping, accounting, tax compliance and business registration services to businesses in Nigeria. Our registered address is 16 Iletura, Ilorin, Kwara State.
This policy is written under the Nigeria Data Protection Act 2023 (NDPA) and the NDPC's General Application and Implementation Directive (GAID) 2025, which took effect on 19 September 2025.
The short version. We collect only what we need to reply to you and do your books. We never sell your information. Client records are kept for six years because Nigerian tax and company law require it. You can ask at any time what we hold, and ask us to correct or delete it.
Our two roles
This distinction matters, because it determines who decides what happens to your data.
| Whose data | Our role | What it means |
|---|---|---|
| Yours, as an enquirer or client — your name, contact details, and our correspondence with you | Data controller | We decide what is collected and why, and we are accountable for it |
| Your business's records, and your employees' payroll data | Data processor | We handle it on your instructions. You remain the controller of your own staff's data — we act on your behalf |
Where we act as your processor, our engagement letter sets out what we may do with the data. We will not use your employees' information for anything beyond the work you have asked us to do.
What we collect
When you fill in our enquiry form
- Your name and business name
- Your WhatsApp number and email address
- Which service you are interested in, and where your business is based
- Anything you choose to write in the message box
When you become a client
To do the work we handle your financial records — bank statements, invoices, receipts, payroll schedules, Tax Identification Numbers and similar. Where you employ staff, this includes their names, salaries, pension details and tax records.
All of it is confidential. As an ICAN member, our Managing Director is bound by a professional code of ethics on confidentiality that sits on top of everything in this policy.
Automatically, when you visit this page
- Standard technical information your browser sends — device type, browser, approximate location, and which pages you viewed
- If you arrived from an advert, the campaign reference on that link, so we can tell which adverts actually work
We do not collect sensitive personal data — such as health, biometric, religious or political information — and you should not send it to us.
Why we use it, and our lawful basis
Section 25 of the NDPA requires a specific lawful basis for each use. Ours are:
| What we do | Why | Lawful basis |
|---|---|---|
| Reply to your enquiry | You asked us to | Steps before a contract |
| Provide bookkeeping and tax services | To do the work you engaged us for | Performance of a contract |
| File returns with the NRS, State IRS and pension bodies | Required by law on your behalf | Legal obligation |
| Keep records for six years | CITA s.63 and CAMA s.864 require it | Legal obligation |
| Measure which adverts bring enquiries | To spend our marketing budget sensibly | Legitimate interest |
Who else sees it
We do not sell your information, and we do not share it for anyone else's marketing. We share it only where we must:
- Government bodies — the Nigeria Revenue Service (NRS), your State Internal Revenue Service, pension fund administrators and the Corporate Affairs Commission, where we file on your behalf
- Our software providers — the accounting platform your books sit in (QuickBooks, Zoho Books or Xero), our email provider, and Airtable, where enquiries from this page are stored
- Your bank or lender — only where you have specifically asked us to prepare or send financial statements
- Where the law compels us — for example a valid court order or a lawful regulatory demand
Transfers outside Nigeria
Some of these providers store data on servers outside Nigeria. Under section 41 of the NDPA we may only do this where the destination offers adequate protection. We rely on providers whose contractual terms commit them to data protection standards equivalent to those required in Nigeria, and we keep a record of that basis.
Analytics and advertising
This page may use Google Analytics and the Meta (Facebook) advertising pixel. They tell us how many people visited, which sections they read, and whether an advert led to an enquiry. They do not tell us who you are by name.
You can opt out of Google Analytics with Google's browser add-on, and adjust Meta's ad settings inside your Facebook account. Most browsers can block these outright through their privacy settings.
How long we keep things
| Record | Kept for | Why |
|---|---|---|
| Enquiries that do not become clients | 24 months | Our own follow-up, then deleted |
| Client accounting and tax records | 6 years after the relevant year of assessment | CITA s.63 |
| Company records and financial statements | 6 years | CAMA s.864 |
| Employee and payroll records | 3 years after the period they relate to, or 6 years where they support a tax filing | Labour Act s.75; CITA s.63 |
These periods are legal requirements, not preferences. They apply even if you ask us to delete your records sooner. Note also that where fraud, wilful default or negligence is alleged, the six-year limit does not apply and records may be requested at any time.
How we protect it
- This website is served over an encrypted connection (HTTPS)
- Enquiry submissions are handled on our own server; no system credentials are exposed in the page you are reading
- Access to client records is limited to the people doing your work
- Our accounting platforms are protected with strong passwords and, where available, two-factor authentication
- A non-disclosure agreement is available on request before you send us anything at all
If something goes wrong
No system is perfect and we will not pretend otherwise. If a breach occurs that is likely to risk your rights, section 40 of the NDPA requires us to notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and to tell you directly without undue delay where the risk to you is high. We will do both.
Your rights under the NDPA
Sections 34 to 37 of the NDPA give you the right to ask us to:
- Show you what personal information we hold about you
- Correct anything inaccurate or incomplete
- Delete it — subject to the retention rules above
- Restrict how we use it while a dispute is resolved
- Stop using it for marketing, which we will action immediately
- Send you a copy in a portable, machine-readable format
- Object to a particular use, and we will explain our reasoning or stop
- Withdraw consent at any time, where consent was our basis
Email support@peacebrooks.com. We respond within 30 days, at no charge. If we need longer for a complex request we will tell you why.
Complaints
If you are unhappy with how we have handled a request, please tell us first — most things are quickest to fix directly. You also have the right to complain to the Nigeria Data Protection Commission at any time, through ndpc.gov.ng.
Cookies
This page sets no cookies of its own. Where analytics or advertising tools are active, they may set their own. You can block or delete cookies in your browser settings, and nothing on this page will stop working if you do.
Children
Our services are for businesses. We do not knowingly collect information from anyone under 18. If you believe a child has sent us information, contact us and we will delete it.
Changes to this policy
If we change how we handle your information we will update this page and the date at the top. Where a change materially affects existing clients we will tell you directly rather than expect you to notice.
Data protection contact
For anything in this policy, or to exercise any of your rights:
Peacebrooks Integrated Solutions LTD
16 Iletura, Ilorin, Kwara State, Nigeria
Email: support@peacebrooks.com
Phone / WhatsApp: 0704 752 9069
Regulator: Nigeria Data Protection Commission — ndpc.gov.ng