How do we handle your information?
In plain words. This page covers this website, and the people who contact us through it. If you took part in a study, the notice you were given at the start applies too.
Privacy notice, version 1.1, updated 9 October 2026. About nine minutes to read.
The short version
- We collect very little. On this website that means the details you give us in a form, a basic record that a page was visited, and anonymous visit counts that never identify you.
- We do not run advertising, we do not sell your details, and we do not use trackers that follow you across the web.
- We use your details only to reply to you, to check a report, or to send what you asked for.
- You can ask to see, correct or delete what we hold, and take back your consent at any time.
- You can complain to us, or to the Nigeria Data Protection Commission.
1. Who are we?
This website is run by Probatio Africa, a company registered in Nigeria with the Corporate Affairs Commission and based in Lagos. For the personal data described on this page, we decide how and why they are used.
Data protection contact: privacy@probatioafrica.com.
In the law: the Nigeria Data Protection Act 2023, and the General Application and Implementation Directive the Commission issued under it in 2025.
Beyond what the law requires, we hold ourselves to the ICC/ESOMAR International Code on Market, Opinion and Social Research — the standard self-regulatory code for our industry — on top of Nigerian law, not instead of it. See our standards and ethics page for the rest of what we commit to.
2. What do we collect, and why?
| What we collect | Why | Our lawful basis | How long we keep it |
|---|---|---|---|
| A brief you send: name, organisation, role, email, place, your decision and timeline, and any files | To reply, prepare a proposal, and tell you if a study will not help | Steps you asked for before a contract, and your consent | 12 months if no study follows, then deleted |
| A report about a survey: what happened, how you were contacted, a place, a study reference, and an optional way to reach you | To check the report, protect respondents, and act if someone is using our name | Our legitimate interest in protecting people from fraud, and your consent | 24 months, or as long as an investigation needs |
| A request about your information: what you ask, how to reply, and a study reference if there is one | To answer you, and to keep a record that we did | Our legal duty to respond to your rights | 3 years, as our proof that we replied |
| Messages you send us by email, phone or WhatsApp | To answer you | Your consent, and our legitimate interest in replying | 12 months after the last message |
| Your email address, if you sign up for updates | To send the updates you chose, and nothing else | Your consent | Until you unsubscribe |
| Technical data needed to deliver a page: your internet (IP) address, the page asked for, the time and your browser type. No name, and nothing that follows you across sites | To deliver the site, and to stop the forms being flooded with spam | Our legitimate interest | We keep no copy. Our host keeps short-lived server logs, and the spam check forgets an address after 10 minutes |
| Anonymous visit counts: the page viewed, the site that sent you, your rough location (country, region and city, worked out from your connection), and your device type, operating system and browser. No cookie, no name, and your IP address is not stored | To see which pages people use and where visits come from, so we can improve the site | Our legitimate interest | Our analytics provider, Vercel, recognises a repeat visit for 24 hours using a scrambled code made from the request, then discards that code. We only ever see totals |
We do not ask for your BVN, NIN or bank details through this site. If anyone asks for them in our name, it is not us. See the Verify page.
In the law: section 25 (the lawful bases for using personal data) and section 26 (consent). Silence is not consent.
4. Does it leave Nigeria?
Some of our providers handle data outside Nigeria: Vercel, which hosts this site and counts visits, and Resend, which sends the form notifications, both process data in the United States, and Zoho holds our email in its own data centres. The law allows personal data to leave the country only where the receiving country or organisation gives it adequate protection, or another lawful route applies. We check this before we choose a provider.
In the law: sections 41 to 43 (cross-border transfers of personal data).
5. How long do we keep it?
The table in section 2 gives the period for each kind of information. When the period ends, we delete the information or make it anonymous, so that it can no longer be linked to you. If the law requires us to keep something longer, we tell you.
6. How do we protect it?
- Everything you send us travels over an encrypted connection.
- Stored data are encrypted and can be seen only by staff who need them for their job.
- Staff are trained, and sign a confidentiality agreement.
- We keep a record of every incident, including small ones.
- If a breach is likely to put your rights at risk, we tell the Commission within 72 hours of finding out. If it is likely to put you at high risk, we tell you straight away, and say what you can do to protect yourself.
Where your data is held: this site is hosted by Vercel. Its pages are served from Vercel's global network, and the forms are processed in the United States. A form you send reaches us by email through Resend and is kept in our Zoho mailbox. Section 4 explains what applies when data leave Nigeria.
Found a security problem? If you are a security researcher and believe you have found a vulnerability in this site, tell us before telling anyone else: privacy@probatioafrica.com. We will acknowledge a genuine report within five working days and will not pursue legal action against a report made in good faith, in line with responsible disclosure practice.
In the law: section 39 (security, integrity and confidentiality) and section 40 (personal data breaches).
7. What are your rights?
These are yours whether or not you have ever paid us anything. We do not charge to answer, except in the rare cases where the law allows it, and we tell you before we do.
| You want to | What we do | What we may ask | Our reply time |
|---|---|---|---|
| See what we hold about you | Send you a copy | To confirm who you are | 30 days |
| Correct a mistake | Fix it, and tell anyone we passed it to | What is wrong, and the right detail | 30 days |
| Delete your information | Delete it, unless the law says we must keep it | To confirm who you are | 30 days |
| Take back your consent | Stop using your information for that purpose. What we did before stays lawful. It is as easy to take back as it was to give | Nothing more than the request | Straight away |
| Object to, or limit, how we use it | Stop or limit, unless we have a strong reason, and we explain it | What you object to | 30 days |
| Move it to someone else | Give it to you in a common format, where this applies | To confirm who you are | 30 days |
You also have the right not to be subject to a decision made only by a machine. We make none.
To use a right, write to privacy@probatioafrica.com, or call or WhatsApp +234 905 178 1117. We may ask you to confirm who you are, so that we do not give your information to someone else.
In the law: sections 34 to 38 (rights of a data subject, withdrawal of consent, the right to object, automated decisions and data portability).
8. What about children?
This website is not for children, and we do not knowingly collect children’s details through it. Children may take part in some studies, but only with a parent or guardian’s consent and their own agreement. The consent form says how their information is protected.
In the law: section 31 (children and people who cannot consent for themselves).
10. What about people who take part in our studies?
Before any study starts, you are given a consent form. It says who is running the study, who asked for it, what we will ask, how long it takes, how your answers will be used and kept, and whether you will be recorded or paid. Four promises apply to every study:
- Taking part is your choice. You can skip any question and stop at any time.
- Your name is kept apart from your answers as soon as possible, and reports show groups of people, never you by name.
- We do not sell or share your details, and we never use a study to sell you anything.
- You can ask what we hold, ask us to correct or delete it, and take back your consent.
Some studies need extra protection, for example when health information or children are involved. The consent form says what applies. In studies run for a donor or a government, that organisation decides how the data are used, and we follow its instructions. The consent form names it. To check that a survey is genuine, see the Verify page.
11. How will we tell you about changes?
We date this page and number each version. Every change is listed in the version history at the foot of this page, with the date and what changed. If a change matters to you, for example a new use of your details, we tell you before it starts. We do not treat you as having agreed just because you keep using the site.
12. How do you reach us, or complain?
Write to privacy@probatioafrica.com, or call or WhatsApp +234 905 178 1117. We answer in writing.
If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission.
In the law: section 46 (complaints and investigations).
Version history
| Version | Date | What changed |
|---|---|---|
| 1.1 | 9 October 2026 | Privacy notice: we now count visits anonymously with Vercel Web Analytics, with no cookies (the short version and sections 2, 3, 4 and 9). The Terms of use did not change. |
| 1.0 | 7 October 2026 | First published version. |
Have a question about your information?
Ask. We answer in writing.
Data protection contact
If we get it wrong
You can complain to the Nigeria Data Protection Commission.