The company behind this notice.
Veridia Lab Ltd is a Nigerian company registered with the Corporate Affairs Commission (RC 8748112) and with the Nigeria Data Protection Commission as a Data Controller and Data Processor of Major Importance. Our registered office is at 10b Paul Odulaja Crescent, Gbagada, Lagos.
We design and operate AI agents, automation systems, and managed digital infrastructure for organisations in regulated industries.
The information we hold about you.
We collect personal information in four situations:
- When you contact us — through our website, by email, on social media, or through a referral — we collect your name, contact details, organisation, and the content of your enquiry.
- When you become a client or supplier — we collect the contact and operational information needed to deliver our services or manage our relationship.
- When you visit our website — we collect basic technical information such as your IP address, browser type, and pages visited. We will not place tracking cookies or use analytics tools on your visit without a clear consent banner notifying you first.
- When you receive our communications — we may keep a record of what we have sent and how you engaged with it, where applicable.
We do not collect sensitive personal data through our website or in the normal course of business development. Where sensitive data is involved in a client engagement, it is handled under a written Data Processing Agreement with the client.
The purposes for which we process data.
We use personal information for a limited set of purposes:
- To respond to enquiries and conversations you initiate with us.
- To deliver the services we have been engaged to provide.
- To manage our relationships with clients, suppliers, and partners — including invoicing, contracting, and record-keeping.
- To comply with our obligations under Nigerian law, including tax and corporate record-keeping.
- To communicate occasionally about our work, where we have a legitimate interest in doing so or where you have asked us to.
We do not sell personal data. We do not share personal data with third parties for their own marketing purposes.
The legal grounds we rely on.
Under the Nigeria Data Protection Act 2023, we process personal data on the basis of: your consent (where you've given it), the performance of a contract with you, our legitimate interests in running and growing the business, and our legal obligations as a Nigerian company.
Where we rely on legitimate interests, we have considered them against your rights and freedoms and believe the processing is proportionate.
The periods we hold your information for.
We keep personal information only for as long as we need it. Specifically:
- Enquiry and prospect data — up to 24 months from your last interaction with us.
- Client engagement data — for the duration of the engagement and for 90 days after it ends.
- Financial, tax, and contractual records — for 6 years, as required by Nigerian law.
- Marketing communications data — until you ask us to stop, or for 24 months from last engagement, whichever comes first.
After these periods, we delete the data or anonymise it so it can no longer be linked to you.
What you can ask us to do with your data.
Under the Nigeria Data Protection Act 2023, you have the right to:
- Know what personal data we hold about you and get a copy of it.
- Have inaccurate data corrected.
- Have your data deleted in certain circumstances.
- Restrict how we use your data in certain circumstances.
- Receive your data in a portable format.
- Object to processing based on our legitimate interests.
- Withdraw consent where we are relying on it.
- Complain to the Nigeria Data Protection Commission if you believe we have not handled your data properly.
To exercise any of these rights, contact our Data Protection Officer at dpo@veridialab.com. We will acknowledge your request within 5 working days and respond substantively within 30 days.
The safeguards we maintain.
We use appropriate technical and organisational measures to protect personal data — including encryption, access controls, secure authentication, and documented internal policies. We review our security practices at least annually.
Despite these measures, no system is perfectly secure, and we cannot guarantee the absolute security of information transmitted over the internet.
If we ever experience a personal data breach that is likely to affect you, we will notify the Nigeria Data Protection Commission within 72 hours and, where required, notify you directly.
The people behind this notice.
We respond to every enquiry.
Email: dpo@veridialab.com
Post: Veridia Lab Ltd, 10b Paul Odulaja Crescent, Gbagada, Lagos, Nigeria
If you are not satisfied with our response, you can lodge a complaint with the Nigeria Data Protection Commission at registration@ndpc.gov.ng or via ndpc.gov.ng.
How we keep this current.
We review this notice at least annually and update it when our practices change. The current version is always available at veridialab.com/privacy. Material changes will be flagged at the top of the notice.