Skip to content
Osobase

Legal

Privacy policy

Last updated

This policy explains what personal data osobase.com collects, why, and what rights you have. The website is operated by Ciphermedia Co, trading as Osobase.

It is written to meet the Nigeria Data Protection Act 2023.

1. Who is responsible for your data

The data controller is Ciphermedia Co, trading as Osobase.

For anything about your personal data, email hello@osobase.com.

2. What I collect

Only what you choose to send, plus a small amount of technical information:

  • Audit requests: your name, company, email, website, and your answers about your business (industry, primary offer, current channels, biggest challenge, approximate monthly leads and what improving acquisition would mean).
  • Contact messages: your name, email, optional company, website and topic, and your message.
  • How you found the site: when you arrive, the site notes the referring website (its address without any search terms or other query details), the page you landed on and any campaign tags in the link (utm_source and similar). This is stored in your browser for the visit and sent only if you submit a form.
  • Technical data: like almost every website, the hosting server records requests (IP address, browser type, page requested and time) in its logs for security and troubleshooting.
  • Analytics data, only if you accept analytics (see below).

The site does not ask for, and please do not send, sensitive information such as health, financial or identity documents.

3. How I use it, and why

  • To respond to your audit request or message and to prepare the audit you asked for. Legal basis: your request, as steps taken before a possible agreement, and my legitimate interest in replying to enquiries.
  • To understand which channels bring enquiries (the "how you found the site" data). Legal basis: legitimate interest in running and improving the business.
  • To keep the site secure and working (server logs). Legal basis: legitimate interest.
  • To understand how the site is used (analytics). Legal basis: your consent, which you can withdraw at any time.

Your details are not sold, and are not used for automated decisions about you.

4. Analytics and cookies

The site uses Google Analytics 4 only if you choose "Accept analytics". Until you do, nothing is loaded from Google and no analytics cookies are set.

If you accept, Google Analytics sets cookies named _ga and _ga_ followed by an identifier, to recognise repeat visits and measure which pages and actions (for example, starting the audit form) are used. Google processes your IP address to estimate your approximate location.

Analytics data is kept for 14 months.

You can change your choice at any time using "Cookie settings" in the footer. Declining removes the analytics cookies from this site.

The site also stores two small items in your browser that are not cookies and are never used for tracking across sites: your analytics choice, and the "how you found the site" note for the current visit.

5. Who else processes your data

A few service providers process data on my behalf, under their own security and data protection commitments:

  • Hawk Host Inc.: hosts the website and the hello@osobase.com mailbox. Form submissions are delivered by email to that mailbox. The server is located in the United States.
  • Google LLC: Google Analytics, only if you accept analytics.
  • Sanity AS: stores the website's editorial content and serves its images. When a page shows an image, your browser requests it from Sanity's image service, which receives your IP address as part of that request.

Data may also be disclosed where the law requires it.

6. International transfers

Some of these providers process data outside Nigeria, including in the United States. Where that happens, I rely on the providers' contractual and security safeguards and on the conditions for transfers permitted under the Nigeria Data Protection Act 2023.

7. How long I keep it

  • Audit requests and messages: for as long as needed to respond and to manage any resulting work, and then for no longer than 24 months, unless we agree otherwise or the law requires longer.
  • Analytics data: 14 months, then deleted automatically by Google Analytics.
  • Server logs: kept by the hosting provider for a short period for security and troubleshooting.

8. Your rights

Under the Nigeria Data Protection Act 2023 you can ask to:

  • access the personal data held about you;
  • correct it if it is wrong;
  • delete it;
  • restrict or object to how it is used;
  • receive it in a portable format;
  • withdraw consent (for analytics) at any time.

Email hello@osobase.com and I will respond within the time the law allows. If you are not satisfied, you can complain to the Nigeria Data Protection Commission.

9. Security

The site is served over HTTPS, forms are validated and protected against spam on the server, and form contents are never written to application logs. No method of transmission or storage is completely secure, but reasonable measures are taken to protect your data.

10. Children

This website is for businesses and is not directed at anyone under 18.

11. Changes to this policy

If the way the site handles personal data changes, this page will be updated and the date below will change. If new analytics or tracking tools are added, you will be asked for consent again.