Skip to content

Privacy notice

This page explains what happens to the information you give us when you contact Nest Analytics or book a call: why we hold it, who else handles it, and what you can ask us to do with it. It is written to the Nigeria Data Protection Act, 2023.

Who we are and how to reach us

Nest Analytics is an IT consultancy based in Nigeria. When you send us an enquiry, we decide why the information is held and what is done with it, which makes us the data controller under the Nigeria Data Protection Act, 2023. Use the details below to ask about this notice or to make a request about your own data.

  • General enquiries: info@nestanalytics.org. This is the inbox your message lands in when you use the contact form.
  • Registered details: Nest Analytics, registered with the Corporate Affairs Commission as RC 8158990.
  • Where to send data requests: info@nestanalytics.org, the same inbox as general enquiries.

Contact us

What we collect

Only what you type in. There is no sign-up, no account, and nothing built about you in the background.

  • Your name: The full name you enter on the contact form, so we know who we are replying to.
  • Your email address: Required. It is how your reply reaches you, so there is no way to leave it out.
  • Your phone number: Optional. Leave it blank if you would rather we did not call you.
  • Your message: Whatever you write in the message box, in your own words. Nothing is added to it at our end.Please keep health details, financial details, passwords and other sensitive information out of it. The message passes through our website host and lands in an ordinary email inbox.
  • Booking details: If you book a call through Microsoft Bookings, what you enter there goes to Microsoft and into our calendar.Booking happens on Microsoft's own page, not on this site.
  • What we do not collect: The site has no database behind it and keeps no copy of what you send, and no analytics or tracking scripts are installed on it.We do not buy contact lists, and sending an enquiry does not add you to a mailing list.

Why we hold it, and our lawful basis

We hold your details to answer you and to keep a record of the conversation. Section 25(1) of the Act sets out the lawful bases a controller may rely on. The ones below are the bases we rely on.

  • Contractual obligation: Section 25(1)(b) covers steps taken at your request before a contract is entered into. Sending an enquiry or booking a call is such a step, so that is our basis for handling what you send.
  • If we go on to work together: Your details are then used to run the work itself: scoping, quoting, delivery and invoicing. That is still contractual obligation, this time for performance of the contract.
  • Legal obligation: Where a law requires us to keep records of a transaction, section 25(1)(c) is our basis for holding that part. We keep it for as long as the law says, and no longer.
  • Consent: Where we ask you to agree to something separately, that is consent under section 25(1)(a). You can withdraw it at any time, and withdrawing is as easy as giving it.
  • What we do not do with it: We do not profile you, and we do not make decisions about you by automated means. We do not pass your details to anyone for advertising.

Who else handles it

Getting a message from your screen to our inbox involves other companies. Each one acts as a data processor on our instructions, and each is named below.

  • Vercel: Vercel hosts this website. When you send the form, what you typed passes through Vercel's servers on its way to our inbox. Nothing is stored there, though like any web host Vercel keeps short-lived logs of requests to the site.
  • Microsoft: Our company email runs on Microsoft 365. The form hands your message to Microsoft, which delivers it to our inbox, where it stays. Booking a call happens on Microsoft Bookings, so what you enter there is handled by Microsoft as well as by us.
  • Nobody else, unless we are required to: We do not sell your data and we do not share it for advertising. We would disclose it further only where the law requires it, or to take legal or accounting advice about a dispute.

Transfers outside Nigeria

Some of the companies above sit outside Nigeria, so your details leave the country. Vercel and Microsoft run their services on servers abroad. The Act treats this as something you should know before you send anything.

  • What the Act requires: Personal data may be sent outside Nigeria only where the receiving country, organisation or arrangement gives an adequate level of protection, or another ground in the Act applies.
  • If you would rather not: You do not have to use the form or the booking page. Email or phone us directly instead, and your message reaches the same inbox without passing through our website host.

How long we keep it

An enquiry that does not lead to work is deleted once we no longer need it. If we do work together, we keep what the engagement needs and what the law requires us to hold afterwards, then delete the rest.

  • When we must delete sooner: Section 34(2) requires erasure without undue delay once the data is no longer needed for the purpose it was collected for, or once there is no other lawful basis to hold it.

Your rights under the Act

Part VI of the Nigeria Data Protection Act, 2023 gives you the rights below over the information we hold about you. You do not have to give a reason for asking.

  • Confirmation and information: Ask whether we hold data about you and, if we do, what it is for, who receives it, how long we keep it and where it came from. Section 34(1)(a).
  • A copy of your data: Ask for a copy in a commonly used electronic format. Section 34(1)(b) allows a controller to ask you to cover some of the cost where producing it would be unreasonably costly, and we would tell you first.
  • Correction: Ask us to correct data that is inaccurate, out of date, incomplete or misleading, or to delete it where correcting it is not workable. Section 34(1)(c).
  • Erasure: Ask us to erase what we hold about you. Where the grounds in the Act are met, section 34(1)(d) requires us to act without undue delay.
  • Restriction: Ask us to pause what we do with your data while a request, an objection or a legal claim is being resolved. Section 34(1)(e).
  • Withdrawing consent: Where we rely on consent, withdraw it at any time. Section 35 requires withdrawal to be as easy as giving consent was.
  • Objection: Object to our processing under section 36. Your right to object to direct marketing, including profiling connected to it, is absolute and we must stop.
  • Automated decisions: Section 37 gives you the right not to be subject to a decision made solely by automated means that significantly affects you. We do not make decisions that way.
  • Portability: Ask for the data you gave us in a form you can take elsewhere. Article 37 of the General Application and Implementation Directive 2025 sets out how this is exercised.
  • Complaining to the Commission: Section 46(1) lets you complain to the Nigeria Data Protection Commission about our decision, action or inaction. You can go straight there.
  • How to ask: Email info@nestanalytics.org and say which right you are using. We may need to check you are who you say you are before we act.

Cookies

The site sets no cookies of its own, sets no tracking cookies and runs no analytics.

  • Booking a call: The Book a time button opens Microsoft Bookings on Microsoft's own site. Microsoft may set its own cookies there, which its privacy statement covers. Nothing from it loads on this site.

How to complain

If you are unhappy with how we have handled your information, tell us and we will look into it. You do not have to come to us first. Under section 46(1) of the Act you can complain to the Nigeria Data Protection Commission at any point, and complaints to the Commission are free.

  • Nigeria Data Protection Commission: The regulator for data protection in Nigeria, headed by the National Commissioner. Website: ndpc.gov.ng.
  • Email and phone: info@ndpc.gov.ng, or +234 (0) 916 061 5551. The Commission also accepts complaints by other reasonable means, including in hard copy at its offices.
  • Address: 1919 Cadastral Zone C06, Mbora District, Opposite Efab City Estate, Life Camp, FCT, Abuja.
  • What happens next: Article 39 of the General Application and Implementation Directive 2025 requires the Commission to acknowledge a complaint within seven days.

Go to the NDPC website

Changes to this notice

If what we do with your information changes, we will update this page. The version in front of you is the current one.

  • Last updated: 24 September 2026.