1. Scope and data controller
This Privacy Policy explains how Zuri Labs (“Zuri Labs”, “we”, “our”, or “us”) collects, uses, discloses, and safeguards personal information when individuals and organisations engage with our websites, community platforms, application and intake forms, marketing channels, partner programmes, advisory services, and in-person events (collectively, the “Services”). For the purposes of applicable laws, including the Nigerian Data Protection Regulation (NDPR) and the EU/UK General Data Protection Regulation (GDPR), Zuri Labs acts as the data controller unless a separate agreement states otherwise.
2. Information we collect
We gather personal information from the following sources:
- Information you provide: contact details, job titles, biographies, project summaries, application answers, mentorship goals, partnership briefs, event registrations, survey feedback, and payment details submitted through our forms or during onboarding.
- Community and programme activity: forum posts, chat messages, meeting notes, attendance records, demo submissions, and other user-generated content shared within our community spaces.
- Automatically collected data: device identifiers, IP address, browser type, operating system, referring URLs, approximate location, and usage analytics collected through cookies, pixels, and similar technologies.
- Third-party sources: public profiles, referrals, and lead information from partners or service providers where permitted by law.
We treat any data that can directly or indirectly identify you as personal information.
3. How we use personal information
We process personal information to:
- Evaluate applications, curate cohorts, and manage membership in our community programmes.
- Provide mentoring, events, workshops, research collaborations, and partnership engagements.
- Facilitate introductions and communications between members, mentors, and partners.
- Deliver newsletters, marketing campaigns, surveys, and event invitations tailored to your interests.
- Generate aggregated insights and reports that measure community impact without identifying individuals.
- Maintain the security, integrity, and performance of the Services.
- Comply with legal obligations, enforce our Terms, and protect the rights of Zuri Labs, our members, and the broader ecosystem.
4. Legal bases for processing
Where required, we rely on the following lawful bases:
- Consent for optional marketing, testimonials, event recordings, or sensitive data you elect to share.
- Contractual necessity to deliver programmes, fulfil partner engagements, or process payments.
- Legitimate interests to run, secure, and improve the Services in a way that does not override your rights.
- Legal obligations to meet regulatory, tax, or reporting requirements.
- Vital interests in limited circumstances to safeguard individuals from serious harm.
5. Sharing of information
We do not sell personal information. We may share data with:
- Service providers supplying infrastructure, analytics, customer relationship management, community platforms, event tools, or payment processing under contractual safeguards.
- Programme collaborators, mentors, and evaluators assisting with selection, advisory sessions, or pilot projects bound by confidentiality obligations.
- Partners or sponsors where you have consented to introductions, joint programming, or co-branded opportunities.
- Professional advisers such as legal counsel, accountants, or auditors working under confidentiality agreements.
- Regulators or law enforcement where required by law or necessary to protect rights, property, or safety.
If we pursue an investment, merger, or strategic transaction, personal data may be transferred under continued confidentiality obligations and subject to this Policy.
6. Cookies and analytics
We use first- and third-party cookies, pixels, device identifiers, and similar tracking technologies to enable essential site functions, remember preferences, analyse traffic, and measure campaign performance. You can control cookies via your browser settings and, where required, through consent banners. Disabling cookies may limit certain features.
7. Marketing and communications
When you opt in through our forms, landing pages, or events, we send updates about community programming, partnership opportunities, research, and marketing campaigns. You can unsubscribe at any time by using the link in each email or contacting us. We may still send administrative notices related to your participation or policy changes.
8. Community contributions and media
Content you post within community forums, messaging channels, or recorded sessions may be visible to other members. Please avoid sharing confidential information unless necessary and permitted. We may document events through notes, recordings, or photography to showcase community impact; where required, we will seek explicit consent before public use.
9. International data transfers
Because our community and partners operate globally, personal information may be transferred to countries with different privacy laws than your home jurisdiction. We implement appropriate safeguards, such as standard contractual clauses or equivalent mechanisms, to protect data during cross-border transfers.
10. Data retention
We retain personal information for as long as needed to fulfil the purposes outlined in this Policy, including maintaining accurate programme records, meeting contractual obligations, complying with legal requirements, and resolving disputes. When data is no longer required, we anonymise or securely delete it in accordance with our retention schedule. Aggregated or de-identified data may be retained for research and reporting.
11. Security
We apply administrative, technical, and organisational safeguards, including access controls, encryption-in-transit, vendor due diligence, and incident response protocols, to protect personal information. Despite these measures, no system is completely secure. You are responsible for protecting your credentials and notifying us promptly of suspected unauthorised use.
12. Your rights
Depending on your jurisdiction, you may have rights to:
- Request access to the personal data we hold about you.
- Ask us to correct inaccurate or incomplete data.
- Request deletion, restriction, or portability of your data.
- Object to processing, including for direct marketing.
- Withdraw consent where processing relies on consent.
- Lodge a complaint with a relevant supervisory authority.
We honour these rights in accordance with GDPR, NDPR, POPIA, CCPA, and other applicable regulations.
13. Exercising your rights
To exercise your rights or update your preferences, email [email protected] with “Privacy Request” in the subject line and include sufficient information to verify your identity. We strive to respond within 30 days, subject to any lawful extensions. You may designate an authorised agent where your local law permits.
14. Children’s privacy
The Services are intended for adults and are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a minor has provided information, contact us so we can delete it.
15. Updates to this policy
We may revise this Privacy Policy to reflect new Services, legal requirements, or best practices. When changes are material, we will update the “Last updated” date and provide notice via email or our platforms. Continued use after the effective date signifies acceptance of the revised policy.
16. Contact
Questions or concerns about this Policy, our data practices, or privacy requests can be directed to [email protected]. You may also reach us through the postal address published on our website. Last updated October 2024.