Data privacy policy.

This Privacy Policy explains how STATART Insights and Analytics (“STATART”, “we”, “us”), a market research and data intelligence firm based in Lagos, Nigeria, processes the personal data of survey participants and panel members, clients and prospective clients, job applicants, and visitors to this website. We are the data controller for this data.

We process personal data in line with the Nigeria Data Protection Act (NDP Act), 2023, the General Application and Implementation Directive (GAID) 2025 issued by the Nigeria Data Protection Commission (NDPC), and other applicable laws. This policy sets out how we collect, use, store, share, protect and delete your personal data, and the rights you have over it.

We follow the principles of the NDP Act whenever we handle personal data. We process it:

• lawfully, fairly and in a way that is transparent to you;
• only for specified, clear and legitimate purposes;
• only to the extent it is adequate, relevant and limited to what the purpose needs;
• accurately, correcting it when we learn it is out of date;
• for no longer than the purpose requires; and
• securely, with appropriate safeguards against loss, misuse or unauthorised access.

We are accountable for meeting these principles and keep records that show how we do so.

Taking part in any STATART survey is voluntary. Where we rely on consent, we ask for it in a clear and specific way before we collect your data, and you can withdraw it at any time. Withdrawing consent does not affect processing that took place before.

Under section 25 of the NDP Act, we process personal data only where a lawful basis applies: your consent; the performance of a contract with you, or steps you ask us to take before entering one; compliance with a legal obligation; protecting the vital interests of you or another person; a task carried out in the public interest; or our legitimate interests, where those are not overridden by your rights and freedoms.

We process sensitive personal data, such as health information, only with your explicit consent or where the law otherwise allows. We collect personal data about children under 18 only with the consent of a parent or legal guardian.

• Survey participants and panel members: your survey answers, basic profile details such as age range, gender and state of residence, and, if you sign in with Google to join our panel, your name and email address.
• Reward payments: the payment details you choose to give us, such as a bank account or mobile money number, so we can pay the rewards you earn.
• Clients and enquiries: your name, organisation, email address, phone number and the details of the report, data or business plan you request.
• Job applicants: the CV and contact details you send us.
• Website visitors: basic technical data such as pages viewed, browser and device type, collected by our hosting provider to keep the site working and secure.

We collect only what each purpose needs.

• to run surveys and research, and to report findings in aggregated, anonymised form;
• to manage your panel account and pay the rewards you earn;
• to answer enquiries and deliver the reports, data and business plans you request;
• to assess job applications;
• to email panel members when new paid surveys open and when we publish news, blog posts and research, with a one-click unsubscribe link in every email;
• to keep this website secure and working well; and
• to meet our legal, tax and accounting obligations.

We do not sell personal data, and we do not use survey answers to target or market to individuals.

Under sections 34 to 38 of the NDP Act, you have the right:

• to be informed about how we use your personal data;
• to access a copy of your personal data;
• to have inaccurate or incomplete data corrected (rectification);
• to object to the processing of your data;
• to restrict how we process your data;
• to receive your data in a portable format (data portability);
• to have your data deleted (the right to be forgotten);
• not to be subject to a decision based solely on automated processing that significantly affects you;
• to withdraw your consent at any time; and
• to report to the supervisory authority, the Nigeria Data Protection Commission.

To use any of these rights, email support@statartinsightsandanalytics.com with the subject “Data protection request”. We may ask you to confirm your identity before we act, and we will respond within the time the law allows.

You can choose not to give us some personal data. If you do, we may not be able to provide the related service: for example, we cannot pay survey rewards without payment details, or deliver a report without a way to contact you. Survey questions marked optional can always be skipped.

Clients who commission research receive aggregated, anonymised findings, never data that identifies you. We share identifiable personal data only with service providers that help us run our website and services, such as website hosting, Google sign-in and email delivery, under written terms that require them to protect it and use it only on our instructions. We may also disclose personal data where the law requires it, or to protect our legal rights.

This website stores a small number of settings in your browser, such as your light or dark theme choice and, if you sign in, a session token that keeps you signed in. Our hosting provider records basic technical logs to keep the site secure. We do not use advertising or tracking cookies. If you sign in with Google, Google may set its own cookies under its privacy policy.

We protect personal data with technical and organisational measures, including encrypted connections, access limited to staff who need it, and secure storage with trusted providers. If a personal data breach occurs, we will notify the NDPC within 72 hours where section 40 of the NDP Act requires it, and inform affected people without undue delay where the breach is likely to put their rights and freedoms at high risk.

We use personal data only for the purposes described in this policy, or for a compatible purpose we tell you about. We keep it only as long as that purpose requires. Survey responses are anonymised once a study is complete, panel account data is deleted when you close your account unless we must keep part of it by law, and payment and accounting records are kept for the period tax law requires. After that, data is deleted securely or fully anonymised.

This website may link to websites run by others, such as news sources or partners. We are not responsible for their content or privacy practices, so please read their privacy policies before you share personal data with them.

Some of our service providers store or process data outside Nigeria. When personal data is transferred outside Nigeria, we rely on the grounds set out in Part VIII of the NDP Act, such as an adequate level of protection in the receiving country, appropriate safeguards in our contracts, or your consent.

For questions about this policy, requests about your personal data, or concerns about how we handle it, contact our data protection team at support@statartinsightsandanalytics.com, with the subject “Data protection request”. You can also write to STATART Insights and Analytics, Lagos, Nigeria.

If you believe we have handled your personal data wrongly, please contact us first so we can put it right. If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission:

• Website: ndpc.gov.ng
• Email: info@ndpc.gov.ng
• Phone: +234 916 061 5551
• Address: 1919 Cadastral Zone C06, Mbora District, opposite Efab City Estate, Life Camp, FCT Abuja

We may update this policy when our services or the law change. The date at the top shows when it was last updated, and we will highlight material changes on this page.