This Privacy Policy explains how Odetorasy collects, uses, stores, and protects information about visitors to our website and users of our contact and waitlist forms. It is written in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and its subsequent amendments.
By using our website, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of our platforms.
When you complete our contact or waitlist forms, we collect:
When you visit our website, we automatically collect certain technical information via Google Analytics, including:
This data is collected only if you have accepted cookies. We do not use this data to personally identify you.
Under the NDPR, we rely on the following lawful bases to process your personal data:
| Data Type | Legal Basis |
|---|---|
| Contact form data (name, email, message) | Consent — you provide this data voluntarily and tick a consent checkbox |
| Waitlist sign-up data | Consent — you actively choose to join a waitlist |
| Analytics data (via Google Analytics) | Consent — collected only after you accept cookies |
| Communications we send you | Legitimate Interest — responding to your enquiry or notifying you of updates you requested |
You may withdraw your consent at any time by contacting us at hello@odetorasy.com.
We do not use your data for automated decision-making or profiling. We will not send you unsolicited marketing communications.
Cookies are small text files placed on your device by a web server when you visit a website. They help websites remember information about your visit. Cookies may be "session cookies" (deleted when you close your browser) or "persistent cookies" (stored until they expire or you delete them).
| Cookie | Provider | Type | Purpose |
|---|---|---|---|
| cookieConsent | Odetorasy | Essential | Stores your cookie preference (accepted/declined) so we do not prompt you on every visit. |
| _ga, _ga_* | Google Analytics | Analytics | Distinguishes unique users and tracks site usage (pages visited, session duration, traffic source). Data is anonymised and aggregated. Set only if you accept cookies. |
| _gid | Google Analytics | Analytics | Stores and updates a unique value for each page visited. Expires after 24 hours. Set only if you accept cookies. |
Analytics cookies are only placed after you click "Accept" on our cookie banner. If you click "Decline," no analytics cookies are set and no usage data is collected. You may change your preference at any time by clearing your browser cookies and revisiting the site.
You can instruct your browser to refuse or delete cookies. Guidance for common browsers:
Please note that disabling cookies may affect the functionality of some websites.
We use the following third-party services that may process your data:
We use Google Analytics to understand how visitors use our website. Google may process your data on servers outside Nigeria, including in the United States. Google operates under the EU-US Data Privacy Framework and implements Standard Contractual Clauses for international transfers. You can learn more at policies.google.com/privacy. You can also opt out of Google Analytics tracking across all websites using the Google Analytics Opt-out Browser Add-on.
Form submissions are processed through our backend hosted on AWS infrastructure. Submitted data is transmitted securely via HTTPS and is not stored in a persistent database beyond what is necessary to forward your enquiry to our team.
| Data Type | Retention Period |
|---|---|
| Contact and enquiry form submissions | 12 months from the date of submission, or until you request deletion |
| Waitlist sign-up data | Until the relevant product launches or you request removal, whichever is earlier |
| Analytics data (Google Analytics) | 26 months (Google's default retention period) |
| Cookie consent record | 12 months from the date of consent |
As a data subject under the Nigeria Data Protection Regulation, you have the following rights:
To exercise any of these rights, email us at hello@odetorasy.com. We will respond within 30 days. We may need to verify your identity before processing your request.
We implement appropriate technical and organisational safeguards to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All data transmissions between your browser and our systems are encrypted via HTTPS. Access to submitted form data is restricted to authorised personnel only.
However, no transmission of data over the internet can be guaranteed as completely secure. You submit data at your own risk, and we cannot ensure or warrant the security of any information you send to us.
Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For significant changes, we will notify users who have provided their email address. We encourage you to review this page periodically.
If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us: