1. About this policy
This Privacy Policy describes how Limestone Technology Services Limited ("Limestone", "we", "us", or "our") collects, uses, and discloses personal information when you visit our websites, use our applications or services, purchase from us, or otherwise communicate with us.
It covers Limestone websites and apps, including StoneCircle Admin, StoneCircle APP, and StoneCircle Terminal. By accessing the services, you acknowledge the practices described here. We may revise this policy to reflect operational, legal, or regulatory changes and will update the date shown above.
2. Information we collect
The information we collect depends on how you interact with Limestone. It may include:
- Contact and account details such as your name, address, telephone number, email address, username, password, and security questions.
- Order, billing, shipping, payment confirmation, purchase, cart, wishlist, and customer-support information.
- Device, browser, network, IP address, connection, cookie, pixel, software development kit, and usage information.
- Real-time GPS location when a panic feature is triggered, background location where enabled for safety features, and historical location where required for incident logs or safety audits.
- Information you submit in messages, incident reports, reviews, media, forms, or communications with Limestone.
Some features require specific information. You may choose not to provide it, but that can prevent the relevant feature from working.
Information from third parties
We may receive information from service providers that support our sites and services, payment processors, analytics providers, advertising partners, and other vendors acting for us. We treat that information in accordance with this policy. We do not retain user data obtained from Workspace APIs to develop, improve, or train generalised AI or machine-learning models.
3. Chats, communities, and circles
StoneCircle enables residents to communicate and share content in chats, communities, and circles. Depending on the feature, we may process timestamps, sender and recipient identifiers, message size, delivery and read status, connection logs, device identifiers, settings, membership relationships, and shared content.
- Stored media and backups are protected with encryption at rest, and transmissions use secure transport protocols such as TLS/HTTPS.
- Access is restricted through role-based controls, least-privilege practices, audit logging, security oversight, and secure key management.
- We may access or disclose non-encrypted data where required by law, to investigate fraud or abuse, enforce our terms, respond to security incidents, provide requested support, or produce aggregated or anonymised analytics.
- Users may delete conversations or media and leave circles or communities. Deletion remains subject to lawful retention, backup, and disposal requirements.
4. How we use personal information
- Provide products and services: operate accounts, process payments, fulfil orders, manage transactions, deliver notifications, enable features, and provide support.
- Safety and emergency response: transmit a user's selected emergency type and real-time location to their circles or community, coordinate response workflows, and maintain status logs.
- Communication and improvement: answer enquiries, maintain our relationship with you, understand service usage, and improve performance.
- Security and fraud prevention: detect, investigate, and act on fraudulent, illegal, abusive, or malicious activity.
- Marketing and advertising: send promotional communications and tailor services or advertising where permitted. You can unsubscribe from promotional email while continuing to receive necessary account or transaction messages.
- Legal and contractual obligations: comply with law, enforce applicable terms, and protect Limestone, our users, and others.
Our legal bases include performance of a contract, compliance with legal obligations, legitimate interests that do not override your rights, and consent where required. We process information under applicable data-protection law, including Nigeria's data-protection framework and the GDPR where applicable.
7. Children's data
The services are not intended for children, and we do not knowingly collect personal information from children. A parent or guardian who believes a child has provided information may contact us to request deletion. We do not knowingly sell or share personal information belonging to anyone under 16 as those terms are defined by applicable law.
8. Your rights and choices
Depending on where you live and the circumstances, you may have rights to:
- Access or know what personal information we hold and how it is used or shared.
- Correct inaccurate information, request deletion, or receive a portable copy.
- Restrict processing, withdraw consent, or object to certain uses.
- Opt out of sale, sharing, or targeted advertising where those rights apply, including through recognised preference signals such as Global Privacy Control.
- Limit use or disclosure of sensitive personal information and appeal a decision on a request.
- Manage promotional communication preferences.
These rights are not absolute. We may need to verify your identity or an authorised agent before completing a request. We will not discriminate against you for exercising an applicable privacy right.
9. Security and retention
We protect sensitive information in transit and at rest, restrict access to authorised personnel, use role-based controls and authentication, minimise collection, monitor systems, maintain security logs, conduct audits and penetration testing, and train personnel responsible for data.
No security method is perfect. Avoid sending sensitive information through unsecured channels. We retain personal information only for as long as needed to operate your account and services, meet legal obligations, resolve disputes, enforce agreements, investigate incidents, or satisfy legitimate business needs. Information is then deleted or anonymised using appropriate procedures.
10. Complaints and international processing
Information may be stored or processed outside your country by Limestone personnel and service providers. Where required, we use recognised transfer mechanisms or equivalent contractual protections. You may complain to Limestone about our processing and, where applicable, lodge a complaint with your local data-protection authority if you are dissatisfied with our response.
11. Contact Limestone
For questions about this policy, a privacy request, or a complaint, contact Limestone at:
Limestone Technology Services Limited
Road 7A, Dr Shaffideen Amuwo Street
Lekki Scheme 2, Ajah, Lagos 10024, Nigeria