Legal
Privacy policy
This policy explains what personal data miftahcapital.com collects, why, and what rights you have over it. It is deliberately short, because this website does very little with your data.
Last updated 28 July 2026
Who this policy covers
This policy applies to miftahcapital.com, the corporate website of Miftah Capital.
It does not cover MiHome (mihome.finance), our finance readiness platform, which handles customer data including identity and financial information and operates under its own separate privacy policy. If you have used MiHome, that policy applies to you, not this one.
Miftah Capital is the data controller for information collected through this website.
What we collect
This website has no user accounts and no login. We collect personal data in only two ways.
Information you give us. When you submit the contact form or the developer registration form, we receive what you enter — usually your name, email address, organisation, role and your message.
Technical information. Our hosting provider records standard server logs, which may include your IP address, browser type, the pages you visited and the time of your visit. This is generated automatically by the act of visiting any website.
Why we use your data
We use the information you submit for one purpose: to respond to your enquiry and to continue that conversation if you want us to.
- Replying to enquiries about finance readiness, developer partnerships and press
- Sending information you have asked us for
- Keeping a record of who we have spoken to, so we do not lose or duplicate a conversation
- Maintaining the security and reliability of the website
Lawful basis
Where you submit a form, we process your data on the basis of your consent and our legitimate interest in responding to enquiries directed at the business.
We do not sell your data, and we do not add you to a marketing list on the basis of a business enquiry.
International transfers
Our hosting and email providers may store or process data on servers outside Nigeria, including in the European Union and the United States. Where that happens, we rely on the safeguards those providers maintain for international transfers.
How long we keep it
We keep enquiry correspondence for as long as the relationship is active, and for a reasonable period afterwards so that we have a record of what was discussed. If you ask us to delete your data, we will do so unless we are required to retain it.
Your rights
Under the Nigeria Data Protection Act 2023, and under the UK and EU GDPR where those apply to you, you have rights over your personal data.
- Access — ask what personal data we hold about you
- Correction — ask us to fix anything inaccurate
- Deletion — ask us to erase your data
- Objection and restriction — ask us to stop or limit how we use it
- Portability — ask for a copy in a usable format
- Withdraw consent — at any time, without affecting processing already carried out
Complaints
If you believe we have mishandled your data, please contact us first — we would rather fix it directly.
You also have the right to complain to the Nigeria Data Protection Commission, or to the supervisory authority in your country of residence if you are in the United Kingdom or the European Union.
Security
The site is served over HTTPS, and form submissions are transmitted to our email provider over encrypted connections. No transmission over the internet is ever completely secure, and we do not claim otherwise.
Children
This website is directed at adults. We do not knowingly collect personal data from anyone under 18.
Changes to this policy
We will update this policy as the company changes — particularly once Nigerian incorporation completes and when a Data Protection Officer is appointed. The date at the top of this page shows when it was last revised.
Contact us
For any question about this policy or your data, email contact@miftahcapital.com.