Privacy Policy

Last updated 27 October 2026. VisuaCore Technology Limited, RC 9591888.

1. 1. Who we are
2. 2. Our two roles
3. 3. Data from this website
4. 4. Data we process for client businesses
5. 5. Photographs and skin analysis
6. 6. Legal basis
7. 7. Who we share data with
8. 8. International transfers
9. 9. Security
10. 10. How long we keep data
11. 11. Your rights
12. 12. How to delete your data
13. 13. Children
14. 14. Changes and contact

1. Who we are

VisuaCore Technology Limited ("VisuaCore", "we", "us") is a technology company registered in Nigeria with the Corporate Affairs Commission (RC 9591888). Our registered office is at No 17 Benemoh Street, Opposite Royal Dream, Mararaba, Nasarawa State, Nigeria. You can reach us at [email protected].

2. Our two roles

As a data controller, we decide how personal data is used on this website and in our own direct business, for example when you send us an enquiry.

As a data processor, we build and run software, including WhatsApp messaging services, on behalf of client businesses. In that case the client business (for example, a retailer whose WhatsApp number you message) is the data controller, and we process personal data only on its documented instructions and under a written agreement. If you are a customer of one of our clients, that business's own privacy notice also applies to you.

3. Data from this website

• Contact form: your name, email address, organisation, role, the topic you choose and your message. We use these only to reply to you and to keep a record of the enquiry.
• Server logs: technical data such as IP address, browser type and the pages requested, used to keep the site secure and working.
• Cookies: we do not use advertising or tracking cookies. A single session cookie protects the contact form against misuse.

4. Data we process for client businesses

When we run a WhatsApp service for a client business through Meta's WhatsApp Business Platform, we may process:

• your WhatsApp phone number and profile name;
• the messages, button choices and form answers you send in that chat;
• images you choose to send, such as a photograph for a skin analysis (see section 5);
• order details, delivery or pickup details, and payment status. We do not receive or store your full card number or bank login details; payments are handled by licensed payment providers;
• the results and recommendations the service produces for you.

When we run a website chat (an AI shop assistant) on a client business's website, we process the same kinds of data you send in that chat: your messages and button choices, any photo you choose to send, and, if you place an order, your name, phone number, delivery address and payment status. The chat also remembers your conversation in your own browser (local storage) so you can continue where you left off; clearing your browser data removes that copy. The chat does not use advertising or tracking cookies.

We use this data only to deliver the service you asked the business for, to let the business's staff help you, to keep records the business is required to keep, and to keep the service secure. We do not sell it, we do not use it for advertising, and we do not use it for any purpose of our own.

5. Photographs and skin analysis

Some services, such as SabiSkin, analyse a photograph of your face to suggest a cosmetic skincare routine. For these services:

• we ask for your consent before you send a photograph, and the service is for adults aged 18 and over;
• the photograph is used only to produce your analysis. It is not used for facial recognition, to identify you, or to build a database of faces;
• the original photograph is deleted within 48 hours of your analysis being completed; photographs sent through a website chat are deleted within one hour of being received. We keep the written result, so you and the business can refer back to it;
• the analysis may be carried out with the help of an AI service provider bound by contract to process the image only to return the result;
• results are cosmetic skincare guidance only. They are not a medical diagnosis and do not replace advice from a qualified health professional.

6. Legal basis

Under the Nigeria Data Protection Act 2023 we rely on: consent, for photographs and any information about your skin; contract, to deliver a service you requested; legitimate interests, to keep our systems secure and to answer enquiries; and legal obligation, where the law requires us to keep or disclose records. You can withdraw consent at any time, without affecting processing that happened before.

7. Who we share data with

We share personal data only with service providers that help us run the services, each under contract and only for that purpose:

• Meta Platforms, which operates WhatsApp and the WhatsApp Business Platform;
• hosting and infrastructure providers, including Hetzner Online (servers) and Cloudflare (security and delivery);
• email delivery providers, such as Brevo, for messages sent from this website;
• payment providers, such as Flutterwave and Paddle, which process payments under their own licences and privacy policies;
• AI service providers, where a service analyses an image or text;
• the client business whose service you are using, and authorities where the law requires it.

8. International transfers

Some providers store or process data outside Nigeria, for example servers located in the European Union. Where that happens, we rely on the safeguards permitted by the Nigeria Data Protection Act, such as contractual protections and transfers to countries with adequate data protection.

9. Security

We use encrypted connections (HTTPS), access controls and strong authentication on administrative accounts, firewalls and rate limiting, regular backups, and we limit staff access to what each task needs. No system is perfectly secure; if a breach affects your data, we will notify the business concerned, the Nigeria Data Protection Commission and you where the law requires.

10. How long we keep data

• Face photographs for analysis: deleted within 48 hours of the analysis being completed, and within one hour when sent through a website chat.
• WhatsApp and website chat messages, results and order records: for as long as the client business instructs, and no longer than needed for the service and legal record keeping. Inactive conversations are deleted automatically after 30 days.
• Website enquiries: up to 24 months, unless we enter a working relationship.
• Server logs: up to 90 days.

11. Your rights

Under the Nigeria Data Protection Act 2023 you may ask to access your personal data, correct it, delete it, restrict or object to its processing, receive a copy in a portable form, and not be subject to a decision based solely on automated processing that significantly affects you. You may also complain to the Nigeria Data Protection Commission (ndpc.gov.ng). If your request concerns a client business's service, we will pass it to that business and help it respond.

12. How to delete your data

You can ask us to delete the personal data we hold about you, including data processed through a WhatsApp service we run for a business:

• email [email protected] with the subject "Data deletion request", or
• send the word DELETE in the WhatsApp chat or website chat of the service you used.

Tell us the phone number or email address you used. We will confirm we received your request within 7 days and complete the deletion within 30 days, except for records we are required by law to keep, which we will tell you about.

13. Children

Our services are not directed at children. Services that use photographs are for adults aged 18 and over. If you believe a child has sent us personal data, contact us and we will delete it.

14. Changes and contact

We will update this page when our services or the law change, and show the new date at the top. For any privacy question, contact [email protected] or write to our registered office above.