Privacy Policy

Gestion Energy (“we,” “our,” or “us”) is a commercial fuel supply and energy logistics company incorporated and operating in Lagos, Nigeria. This Privacy Policy explains how we collect, use, disclose, and safeguard information obtained through our website, service enquiry forms, supply request submissions, and related communications.

This policy applies to all individuals and organisations that interact with Gestion Energy’s digital properties, including procurement officers, logistics managers, operations directors, and other business representatives who submit supply requests, make enquiries, or otherwise provide information to us.

We are committed to compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and its implementing guidelines issued by the National Information Technology Development Agency (NITDA). By using our website or services, you acknowledge the practices described in this policy.

We collect information that is necessary to provide our fuel supply and logistics services, respond to enquiries, and maintain commercial relationships with our clients and partners.

Information you provide directly

• Contact information: Full name, job title, business email address, and phone number submitted through our contact or enquiry forms.
• Organisation information: Company name, industry sector, registered address, and operational site details relevant to fuel delivery logistics.
• Supply request details: Fuel product type (AGO, LPG), estimated volume, delivery timeline, destination location, and any special requirements provided when initiating a supply request.
• Testimonials: Name, company, role, and feedback content submitted voluntarily through our testimonial form. Submissions are reviewed before publication and may be withheld without notice.
• Commercial correspondence: Information contained in emails, WhatsApp messages, and calls made to our commercial team.

Information collected automatically

• Server logs: IP address, browser type, operating system, referring URL, pages visited, and session duration collected automatically when you access our website.
• Device information: Hardware model, screen resolution, and locale settings transmitted by your browser during standard HTTP requests.

Information we do not collect

We do not collect payment card information, bank account details, or any financial credentials through this website. Payment processing for commercial engagements is handled through direct banking channels agreed upon at the point of contract.

We use collected information exclusively for legitimate business purposes connected to the supply of petroleum products, related logistics, and the operation of our commercial platform. Specific uses include:

• Processing and responding to supply requests, price enquiries, and logistics coordination messages.
• Generating commercial quotations, pro forma invoices, and supply agreements for prospective and existing clients.
• Communicating operational updates, delivery scheduling information, and order status notifications.
• Maintaining records required for commercial compliance, including records of transactions, correspondence, and supply chain documentation.
• Publishing approved client testimonials on our public website to support legitimate commercial trust-building activities.
• Analysing website usage patterns to improve service presentation and reduce friction in the commercial enquiry process.
• Meeting reporting and documentation obligations under Nigerian commercial and tax law.

Our website uses a minimal set of cookies and browser storage mechanisms required for the site to function correctly. We do not deploy third-party advertising trackers, social media pixels, or behavioural analytics platforms.

Essential cookies

These are technically necessary for the website to operate and cannot be disabled without breaking core functionality. They do not collect personal data for tracking or marketing purposes.

Analytics

Where analytics are used, they are configured in a privacy-preserving mode — IP addresses are anonymised, data is not shared with advertising networks, and retention is limited to the minimum period required for site performance analysis.

Session storage

Temporary session data may be stored in your browser to preserve form state during a single visit. This data is cleared when your browser session ends and is never transmitted to third-party services.

You may configure your browser to block or delete cookies at any time. This may affect the availability of certain website features but will not prevent you from making direct enquiries via email or phone.

Gestion Energy does not sell, rent, or trade personal information to third parties for commercial or marketing purposes. Information is shared only in the following limited circumstances:

Operational service providers

We engage a small number of technology service providers to operate our website and communication infrastructure. These include:

• Hosting infrastructure: Cloud hosting providers used to serve the website and store operational data. These providers process data on our behalf under data processing agreements.
• Email delivery: Transactional email services used exclusively to deliver confirmation and communication messages you initiate.

Legal and regulatory disclosure

We may disclose information when required to do so by applicable Nigerian law, a court order, a regulatory body, or a legitimate law enforcement request. We will notify affected parties where legally permitted to do so.

Business continuity

In the event of a merger, acquisition, or restructuring, client and contact information may be transferred as part of the transaction, subject to the equivalent data protection commitments described in this policy.

We retain personal and business information for as long as necessary to fulfil the purposes described in this policy, to meet contractual obligations, and to comply with applicable Nigerian legal requirements.

• Current client records: Retained for the duration of the commercial relationship and for a minimum of seven (7) years following the final transaction, in accordance with Nigerian commercial and tax law.
• Enquiry and contact data: Retained for up to twenty-four (24) months from the date of last contact where no commercial relationship was established. Retained for the duration of the commercial relationship where one was established.
• Website server logs: Retained for up to ninety (90) days for security monitoring and operational troubleshooting.
• Published testimonials: Retained until you request removal or until we elect to remove them in the ordinary course of content management.

When information is no longer required, we securely delete or anonymise it in a manner consistent with industry best practice.

We implement organisational and technical measures designed to protect information against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit using TLS/HTTPS across all website and API endpoints.
• Access controls limiting internal access to information on a need-to-know basis, with role-based permissions enforced at the application and infrastructure level.
• Secure credential management practices including hashed storage of authentication credentials and time-limited session tokens.
• Audit logging of administrative access to client records and sensitive operational data.
• Regular review of security configurations on hosting and database infrastructure.

No system is impenetrable. While we take security seriously, we cannot guarantee absolute protection of data transmitted over public networks. If you believe your information has been compromised, please contact us immediately at sales@gestionenergy.com.

As a Nigerian company, our primary data processing operations are located in Nigeria. However, some of our infrastructure and service providers operate internationally, which may involve transferring data to servers outside Nigeria.

Where data is transferred internationally, we take steps to ensure that the receiving party provides an adequate level of protection consistent with the NDPR 2019, including through contractual data protection clauses.

Cloud infrastructure used by Gestion Energy may store data in geographically distributed data centres. In all cases, such transfers are governed by our data processing agreements with service providers and do not change the purposes for which the data is used.

Under the Nigeria Data Protection Regulation (NDPR) 2019, individuals have the following rights regarding their personal information:

• Right of access: You may request confirmation of whether we hold personal information about you and a copy of that information.
• Right to rectification: You may request correction of inaccurate or incomplete personal information we hold about you.
• Right to erasure: You may request deletion of personal information we hold, subject to our legal obligations to retain certain records.
• Right to restrict processing: You may ask us to limit how we use your information in specific circumstances.
• Right to object: You may object to processing based on legitimate interests where your particular circumstances justify it.
• Right to data portability: Where processing is carried out by automated means, you may request your data in a commonly used, machine-readable format.

To exercise any of these rights, contact us at sales@gestionenergy.com. We will respond within 30 days. Requests may require identity verification. Where we cannot fulfil a request due to a conflicting legal obligation, we will explain the reason.

Gestion Energy provides commercial B2B services to businesses and their authorised representatives. Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

If you believe a minor has submitted information through our website, please contact us immediately and we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the services we provide. We will indicate the date of the most recent update at the top of this page.

For material changes — those that significantly affect how we handle your information — we will take reasonable steps to provide advance notice, which may include a notice on our website or direct communication to affected parties.

Your continued use of our website or services following any change constitutes acceptance of the updated policy. If you do not agree to the revised terms, you should discontinue use and contact us to discuss your concerns.

For privacy-related enquiries, data subject rights requests, or any concern about how Gestion Energy handles your information, please contact us through the following channels:

• Email: sales@giremontnenergy.com
• Phone: +234 (0) 904 392 1412
• Address: Apapa Depot, Lagos, Nigeria

We aim to acknowledge all privacy enquiries within two business days and to resolve them within thirty calendar days.