Data Protection

Privacy Policy

How MGM Energy Ltd collects, uses, and protects your personal data when you visit our website, contact us, or use our solar products and services.

Last updated: 2025

Quick summary

Use these links to jump to the part you're interested in.

  1. 1. Who We Are
  2. 2. Personal Data We Collect
  3. 3. How We Collect Data
  4. 4. Legal Bases for Processing
  5. 5. How We Use Your Data
  6. 6. Payment Processing
  7. 7. Sharing of Personal Data
  8. 8. International Transfers
  9. 9. Data Retention
  10. 10. Your Rights
  11. 11. Children's Data
  12. 12. Security
  13. 13. Complaints
  14. 14. Changes to This Policy
  15. 15. Contact Us

How we treat your information

We only collect the information we need to design, deliver, and support your solar solutions, process payments, and keep our systems secure. We do not sell your data, and we handle it in line with the Nigeria Data Protection Act 2023 and other applicable laws.

This Privacy Policy explains how MGM Energy Ltd ("MGM Energy", "we", "us", or "our") collects, uses, discloses, and protects your personal data when you visit www.mgmenergyng.com, contact us, or purchase our products and services.

We are committed to protecting your privacy and processing your personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and any other applicable Nigerian laws, as well as the principles of the former Nigeria Data Protection Regulation (NDPR). Where applicable, we also consider the requirements of the EU General Data Protection Regulation (GDPR), for example when we deal with customers located in the European Union.

1. Who We Are

2. Personal Data We Collect

We may collect the following categories of personal data:

  • Contact information: name, phone number, email address, physical address.
  • Account and order information: products and services you request, quotations, invoices, installation details, and communication history.
  • Technical information: IP address, device type, browser type, approximate location (based on IP), and basic usage data when you visit our Site.
  • Payment information: limited payment details such as transaction references. Full card details are processed directly by our payment partner (e.g. Paystack) and are not stored by us.
  • Support information: details you provide when you contact us for advice, after-sales support, or warranty claims.

3. How We Collect Personal Data

  • When you contact us by phone, email, WhatsApp, or through our Site.
  • When you request a quotation, place an order, or enter into a contract with us.
  • When you subscribe to our newsletter or marketing communications.
  • Automatically, through cookies or similar technologies that are necessary for the operation and security of the Site (see our Cookies Policy).

Under the NDPA, we must have a lawful basis to process your personal data. Depending on the context, we rely on:

  • Contract: processing necessary to prepare or perform a contract with you (e.g. to supply and install solar equipment, process payments, or provide support).
  • Consent: where you subscribe to our newsletter or agree to optional communications.
  • Legal obligation: processing required to comply with tax, anti-money-laundering, or regulatory requirements.
  • Legitimate interests: processing necessary for our business operations (for example, improving our services, securing our systems, or responding to enquiries), provided that your rights and freedoms are not overridden.

5. How We Use Your Personal Data

We use personal data to:

  • respond to your enquiries and provide quotations;
  • design, deliver, and install solar systems and related products;
  • process and confirm your payments and orders;
  • manage warranties, maintenance, and after-sales support;
  • send important service communications, such as installation updates, safety notices, or policy changes;
  • send optional marketing or newsletter communications (only where you have consented and can opt out at any time);
  • maintain the security and proper functioning of our Site and systems; and
  • comply with applicable legal and regulatory obligations.

6. Payment Processing

We use third-party payment processors such as Paystack to handle online payments. When you make a payment, you are redirected to their secure payment pages, and your card or bank details are processed directly by them under their own security and privacy policies.

We receive transaction details such as your name, contact information, transaction reference, and payment status so that we can confirm your order, prevent fraud, and meet our legal obligations.

7. Sharing of Personal Data

We do not sell your personal data. We may share your personal data with the following categories of recipients, only as necessary:

  • Service providers: payment processors (e.g. Paystack), hosting providers, IT and security providers, logistics partners, and professional advisers.
  • Installation partners or technicians: where required to carry out surveys, installation, or maintenance at your premises.
  • Regulators and authorities: where required by law or in response to valid legal requests.

8. International Transfers

Some of our service providers may process data in other countries. Where this occurs, we will take reasonable steps to ensure that your personal data is protected in accordance with Nigerian law and, where applicable, international standards, for example by using contractual safeguards.

9. Data Retention

We keep your personal data only for as long as necessary for the purposes described in this Policy, including:

  • to provide products and services and maintain records of your installations;
  • to comply with tax, accounting, and regulatory obligations;
  • to resolve disputes and enforce our agreements.

When data is no longer required, we will delete it or anonymise it, subject to any legal or regulatory requirements to retain it for a longer period.

10. Your Rights

Under the NDPA (and, where applicable, the GDPR), you may have the following rights in relation to your personal data:

  • Right to be informed about how your data is processed.
  • Right of access to obtain a copy of your personal data.
  • Right to request correction of inaccurate or incomplete data.
  • Right to request deletion of your personal data where it is no longer required or where you withdraw consent, subject to legal exemptions.
  • Right to restrict or object to certain types of processing, including direct marketing.
  • Right to data portability, where applicable.

To exercise any of these rights, please contact us at info@mgmenergyng.com. We may need to verify your identity before responding to your request.

11. Children's Data

Our Site and services are not targeted at children under 18. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can delete it where appropriate.

12. Security

We implement reasonable technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. However, no system is completely secure, and we cannot guarantee absolute security.

13. Complaints

If you have concerns about how we process your personal data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or any other competent supervisory authority.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The "Last updated" date will indicate the latest revision. We encourage you to review this Policy periodically.

15. Contact Us

For questions about this Privacy Policy or our data protection practices, please contact:

Last updated: 2025