Last updated: 23 October 2026
Who we are
This website is run by Durian Africa Ltd (“Durian Africa”, “we”, “us”). Durian Africa is the data controller for the personal data described in this policy.
Head office: Durian Craft Village Building, Imafon, Akure, Ondo State, Nigeria.
Email: durianafrica@gmail.com
Phone: +234 806 081 6106
For any question about this policy or your personal data, contact us at the email address above.
What this policy covers
This policy explains what personal data we collect through durianafrica.org, why we collect it, who receives it, how long we keep it and what rights you have under the Nigeria Data Protection Act 2023.
What we collect
When you send an enquiry
Our enquiry form asks for:
- your name or organisation;
- your email address;
- your phone number, if you choose to give it;
- the value chain you are interested in;
- your message;
- which pathway you chose (buyer, producer or partner).
With each enquiry, our form system also records the date and time, the page you sent it from, the name of your web browser and operating system (for example “Chrome” and “Android”), and, where our hosting provider passes it on, the country your connection comes from. It does not record your IP address.
Please do not include sensitive personal data, such as health, religious or financial account details, in your message.
When you browse the website
Like most websites, our web host keeps standard server logs, which can include your IP address, browser type and the pages you request. These are used to keep the site running and secure. Our website is hosted by Namecheap, which keeps these logs for a limited period under its own policies.
At the time this policy was written, the website does not use analytics, advertising or social-media tracking, and it does not set cookies for visitors who are not logged in. Fonts, images and videos are served from our own website, not from third-party services. If this changes, we will update this policy first.
Why we use your data, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Reading and replying to your enquiry, and discussing a possible sourcing, supply or partnership arrangement | Steps taken at your request before entering into a contract, and our legitimate interest in responding to business enquiries |
| Keeping a record of enquiries so we can follow up and manage our business relationships | Our legitimate interest in running our business |
| Keeping the website secure and preventing spam | Our legitimate interest in protecting the website |
| Meeting legal, tax or regulatory obligations | Legal obligation |
We do not use your data for automated decision-making or profiling. We do not sell your personal data. We will only send you marketing messages if you have agreed to receive them, and you can stop them at any time.
Who receives your data
- Our team. Enquiries are emailed to durianafrica@gmail.com and tonyjoyafrica@gmail.com, and only people who need them to reply can see them.
- Email provider. Those inboxes are provided by Google (Gmail), so Google processes enquiry emails on our behalf.
- Website host. A copy of each enquiry is stored in the website’s database, hosted by Namecheap.
- Email delivery. The website sends enquiry emails through Google’s Gmail service.
- Authorities. We may disclose data where the law requires it.
Transfers outside Nigeria
Our website host (Namecheap) and our email provider (Google) store and process data outside Nigeria. When personal data is transferred outside Nigeria, we rely on the safeguards the Nigeria Data Protection Act 2023 allows, in particular these providers’ contractual data-protection commitments.
How long we keep your data
We keep enquiries for 24 months after our last contact with you, then delete them from the website and from our email inboxes. If the enquiry leads to a business relationship, we keep the records we need for that relationship and for as long as tax and company law require. After that, we delete the data or make it anonymous.
How we protect your data
The website uses an encrypted (HTTPS) connection. Access to enquiries is limited to the people who need them. The website and email accounts are protected by strong passwords and two-factor authentication (Google Authenticator).
Your rights
Under the Nigeria Data Protection Act 2023, you have the right to:
- be told how your personal data is used (this policy);
- get a copy of the personal data we hold about you;
- have inaccurate or out-of-date data corrected;
- have your data deleted when we no longer need it or have no lawful basis to keep it;
- ask us to restrict how we use your data in certain situations;
- object to our use of your data, including at any time for direct marketing;
- withdraw your consent at any time, where we rely on consent;
- not be subject to decisions made solely by automated processing (we do not make such decisions);
- receive your data in a commonly used electronic format and have it sent to another organisation, where this applies.
To use any of these rights, email durianafrica@gmail.com. We may need to confirm your identity first. We will reply within 30 days.
Complaints
If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Nigeria Data Protection Commission (NDPC): ndpc.gov.ng.
Children
This website is for businesses, producers and partners. It is not aimed at children, and we do not knowingly collect children’s personal data.
Changes to this policy
We may update this policy, for example if we add a new service to the website. The date at the top shows when it last changed.