Privacy Policy
Last updated: 1 May 2026
This Privacy Policy explains how Casia Growth Lab Limited ("Casia Lab", "we", "us", or "our") collects, uses, stores, and protects personal data when you visit www.casialab.com, contact us, or use our products. We operate from Lagos, Nigeria, and process personal data in line with the Nigeria Data Protection Act, 2023 (NDPA) and related regulations issued by the Nigeria Data Protection Commission (NDPC).
This Privacy Policy applies to the Casia Lab marketing website and the forms and communications channels associated with it. Each Casia Lab product (Ceazr, Yako, Paytton) may have its own product-specific privacy notice that applies in addition to this one.
1. Who we are
Casia Growth Lab Limited is a Nigerian limited liability company that builds practical operating tools for African micro and small businesses. For the purposes of the NDPA, we act as a data controller in respect of personal data we collect through this website and as a data processor when we process personal data on behalf of business customers using our products.
2. What personal data we collect
We collect only the information we need to operate the website, respond to your enquiries, and run our business.
Information you give us
- Identity details: full name, business or organization name, role.
- Contact details: email address, phone or WhatsApp number, country, city.
- Form submissions: messages, partnership interests, reseller applications, work-with-us applications, and any documents (e.g. CVs) you choose to attach.
- Communications: emails or messages you send to us.
Information we collect automatically
- Device and connection data: IP address (typically truncated), browser type, operating system, referring URL.
- Usage data: pages visited, time on page, links clicked, approximate location derived from IP.
- Cookies and similar technologies: see Section 7.
3. How we use personal data
We process personal data for the following purposes, on the legal bases indicated:
- To respond to your enquiries (consent / legitimate interest): when you fill in a contact, partnership, reseller, or work-with-us form.
- To deliver our products and services (contract): account creation, customer support, service updates.
- To improve our website and products (legitimate interest): analytics, performance monitoring, error diagnostics.
- To communicate with you (consent / legitimate interest): newsletters, product updates, partnership announcements. You can unsubscribe at any time.
- To meet legal obligations (legal obligation): tax, anti-fraud, regulatory reporting, and compliance with the NDPA.
4. Sharing personal data
We do not sell personal data. We may share personal data with:
- Service providers who help us operate our website, hosting, analytics, email, and form processing — bound by written agreements that meet NDPA processor requirements.
- Casia Lab products and ecosystem partners (Log10 Media, Casia Consulting) only where you have asked us to route your enquiry to them, or where this is necessary to deliver a service you requested.
- Professional advisers (legal, tax, audit) where reasonably required.
- Authorities, courts, and regulators where required by law.
5. International transfers
Some of our service providers may be located outside Nigeria. Where personal data is transferred outside Nigeria, we rely on transfer mechanisms permitted under the NDPA, including adequacy decisions, contractual safeguards, and your explicit consent where applicable.
6. Data retention
We keep personal data only for as long as necessary for the purposes set out in this policy or as required by law. Form submissions are typically retained for up to 24 months from last contact, unless a longer retention is required to deliver an ongoing service or meet a legal obligation.
7. Cookies
Our website uses a small number of cookies and similar technologies to make the site function and to understand how it is used. We use:
- Strictly necessary cookies for site functionality.
- Analytics cookies in aggregated, anonymized form, only where you have given consent.
You can disable cookies in your browser settings. Doing so may affect parts of the site that depend on them.
8. Your rights under the NDPA
You have the following rights in relation to your personal data:
- Right to be informed about how your data is processed.
- Right of access to the personal data we hold about you.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure ("be forgotten") in defined circumstances.
- Right to restrict or object to processing.
- Right to data portability where technically feasible.
- Right to withdraw consent at any time, without affecting prior lawful processing.
- Right to lodge a complaint with the Nigeria Data Protection Commission.
To exercise any of these rights, email corporate@casialab.com. We respond within 30 days, or sooner where the law requires.
9. Security
We implement reasonable technical and organizational safeguards — including encryption in transit, access controls, and vendor due diligence — to protect personal data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Children
Our website and products are intended for adult business owners and operators. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised. Material changes will be highlighted on the website.
12. Contact
For privacy questions, complaints, or requests under the NDPA, contact:
- Casia Growth Lab Limited
- Lagos, Nigeria
- Email: corporate@casialab.com