Privacy Policy

Sentral Labs Technologies Limited(“Sentral Labs”, “we”, “us”, or “our”) is a private limited company registered under the laws of Nigeria (Corporate Affairs Commission). Our registered address is Lagos, Nigeria.

We are the data controller for personal information collected through this website (www.sentrallabs.com) and our audit request form.

Questions about this policy: hello@sentrallabs.com

We collect only the data necessary to respond to your enquiry:

• —Full name: To address you correctly in correspondence.
• —Company / organisation name: To understand your business context.
• —Email address: To respond to your audit request.
• —Service interest: To route your enquiry to the right team.
• —Brief description: To understand your requirements before the audit session.

We do not collect payment details, government ID numbers, or sensitive personal data as defined by the NDPR.

Your data is used solely to:

• —Respond to your audit request within one business day.
• —Schedule and conduct the complimentary audit session.
• —Send you follow-up correspondence directly related to your enquiry.

We do not use your data for unsolicited marketing, sell it to third parties, or profile you for advertising purposes.

We process your data on the basis of legitimate interest (responding to a business enquiry you initiated) and, where applicable, contractual necessity (scheduling and conducting the requested session).

For visitors from the European Economic Area (EEA), this processing is lawful under Article 6(1)(b) and 6(1)(f) of the General Data Protection Regulation (GDPR).

For all visitors, this processing is lawful under the Nigeria Data Protection Regulation (NDPR) 2019, which requires a lawful basis for processing personal data.

We retain enquiry data for 24 months from the date of your last interaction with us — long enough to follow up on engagements that progress slowly, and no longer than necessary.

Data is deleted securely at the end of the retention period unless a contractual relationship has been established, in which case our data retention schedule for client records applies (minimum 6 years, per Nigerian tax and commercial law).

Your form submission is processed by the following third party:

• —Formspree (formspree.io) — our form submission processor. Formspree receives the data you submit and forwards it to our email inbox. Their privacy policy is available at formspree.io/legal/privacy-policy.

This website does not currently use third-party analytics, tracking pixels, advertising cookies, or any other data-collection tools beyond the form submission above.

This website does not use tracking or advertising cookies. We may set strictly necessary session cookies to support website functionality. No consent is required for strictly necessary cookies under NDPR or the EU ePrivacy Directive.

If we introduce analytics or marketing cookies in the future, we will update this policy and display a consent notice before any such cookies are set.

Under the NDPR and GDPR you have the right to:

• —Access the personal data we hold about you.
• —Correct inaccurate or incomplete data.
• —Request deletion of your data (subject to legal retention obligations).
• —Object to processing based on legitimate interest.
• —Request restriction of processing while a dispute is resolved.
• —Lodge a complaint with the Nigeria Data Protection Commission (NDPC) or your local supervisory authority.

To exercise any of these rights, email us at hello@sentrallabs.com with the subject line “Data Rights Request”. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure — including encrypted transit (HTTPS), access controls, and restricted internal data sharing.

We may update this policy periodically. Material changes will be noted by updating the effective date above. Continued use of this website after changes constitutes acceptance of the revised policy.