Privacy Policy

This Privacy Policy explains how PADARLabs (“PADARLabs”, “we”, “us”) collects, uses, discloses and safeguards personal data when you visit padarlabs.com, contact us, or engage us for engineering, automation and AI services.

PADARLabs is based in Lagos, Nigeria and acts as a data controller for the personal data described here. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and, where it applies to visitors or clients in the United Kingdom and European Economic Area, the UK GDPR and EU GDPR.

When we build or operate systems on behalf of a client, we typically act as a data processor for the personal data inside those systems. In that case the client’s own privacy notice and our data processing agreement govern that data, not this policy.

We collect only what we need for the purposes set out below.

Information you give us

• Contact & enquiry data — your name, email address, company and the content of any message you send through our contact form or by email.
• Client & project data — business contact details, billing information, and information shared with us during an engagement (documents, credentials issued to us, and project correspondence).
• Recruitment data — if you apply to work with us, the information in your application, CV and portfolio.

Information collected automatically

• Device & usage data — IP address, browser and device type, pages viewed, referring page and timestamps.
• Cookies and similar technologies — set only according to the choices you make in our cookie banner. See our Cookie Policy.

We do not intentionally collect special-category or sensitive personal data through this website. Please do not include such data in your messages to us.

The table below sets out our purposes and the lawful basis we rely on under the NDPA and GDPR.

PADARLabs builds automation and AI systems. This is relevant to your data in two ways:

• Our website. We do not use automated decision-making that produces legal or similarly significant effects about visitors, and we do not profile you for advertising unless you opt in to marketing cookies.
• Client projects. Where an engagement involves training models, retrieval over documents, or automated decisioning, that work is governed by a written data processing agreement with the client, who determines the purpose and remains the controller. We apply data minimisation, access controls, evaluation and human-oversight safeguards as standard.

We do not submit personal data you send us to third-party AI services for model training.

We do not sell personal data. We share it only with:

• Service providers (processors) acting on our instructions — for example cloud hosting, email delivery, error monitoring, analytics and accounting tools. Each is bound by a contract that limits use to our instructions.
• Professional advisers such as lawyers, auditors and insurers where necessary.
• Authorities where we are required to by law or to protect our rights, users or the public.
• A successor entity in connection with a merger, acquisition or reorganisation, subject to this policy.

Some of our providers are located outside Nigeria, including in the United States and the European Union. Where we transfer personal data across borders we rely on a lawful transfer mechanism, such as:

• a decision or approval that the destination provides adequate protection;
• standard contractual clauses or equivalent contractual safeguards; and
• for data subject to the NDPA, the conditions for transfer set out in the Act and any instrument issued by the Nigeria Data Protection Commission (NDPC).

You can request details of the safeguards we use by contacting us.

We keep personal data only as long as needed for the purpose it was collected, then delete or anonymise it. Typical periods:

• Enquiries that do not become projects — up to 24 months from last contact.
• Client records and contracts — for the engagement and then up to 7 years to meet tax and legal requirements.
• Recruitment data — up to 12 months after a decision, unless you ask us to keep it on file.
• Website analytics — retained in aggregated form; raw event data is kept for no more than 14 months.

We maintain technical and organisational measures appropriate to the risk, including encryption in transit, access control on a need-to-know basis, least-privilege credentials, logging and monitoring, secure software development practices, vendor due diligence and staff confidentiality obligations.

If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the NDPC and, where required, affected individuals without undue delay.

Subject to conditions and exemptions in the NDPA and GDPR, you may:

• access a copy of the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• have your data deleted where there is no overriding reason to keep it;
• restrict or object to certain processing, including direct marketing;
• receive data you gave us in a portable, machine-readable format;
• withdraw consent at any time, without affecting processing already carried out; and
• not be subject to a decision based solely on automated processing that has a legal or similarly significant effect on you.

To exercise any right, email admin@padarlabs.com. We will respond within the timeframe required by law (generally one month). We may ask you to verify your identity.

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (ndpc.gov.ng) or, if you are in the UK or EEA, with your local supervisory authority. We would appreciate the chance to address your concern first.

This website is intended for a business audience and is not directed at children under 18. We do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

Our site may link to third-party websites and services. We are not responsible for their content or privacy practices. Review their policies before providing them your data.

We may update this policy to reflect changes in our practices or the law. We will post the revised version here with a new “last updated” date and, for material changes, take reasonable steps to notify you.

For any privacy question or request:

• Email: admin@padarlabs.com
• Post: PADARLabs, Lagos, Nigeria