In short
- We only ask for what we need to answer you and to do the work.
- We never sell, rent or trade your data.
- No advertising, no tracking cookies.
- Ask, and we delete it, unless the law makes us keep it.
Who we are
Centric Scale Systems ("we", "us") is a software company in Lagos. Under the Nigeria Data Protection Act 2023 (NDPA) we are the data controller for what this website collects, and a data processor for personal data inside platforms we build or run for clients.
Centric Scale Systems is a business name registered with the Corporate Affairs Commission (BN 9698693), at Road 5, Close 64, Victoria Garden City, Ikota, Lagos State, Nigeria. Privacy questions: info@centricscalesystems.com.
What we collect
When you book a call or ask about a service, the form asks for your name, email, and the way you'd like us to reach you; optionally your phone or WhatsApp number and company; your answers about the service (for example the tier you chose, your website or your timeline); and your message. We also note which page you sent it from.
While you fill in the form, your answers are saved in your own browser, so closing it by accident loses nothing. They stay on your device until you press Send, and are cleared once it's sent.
When you visit, our hosting and security provider records standard technical data (IP address, browser, pages viewed, time) to keep the site secure and online. Our visitor statistics don't use cookies or build a profile of you. The homepage remembers in your browser that you've seen its opening animation that day; that's a date and a number, nothing personal.
If you become a client, we also keep your billing contact and invoices, and whatever you share with us to do the work. Payments go through Paystack; we never see your card details.
If your business takes part in our research, we measure your website (where visitors come from, how fast it is, what attacks it) as agreed with you. Results are published only as group figures, and your business is named only with your permission.
Please don't send us card numbers, passwords, ID numbers or health information through the form.
How we use it
To reply to you (within 24 working hours), prepare proposals and maps, deliver and support what you've engaged us for, send messages about your work (confirmations, invoices, incident notices, renewals), keep our systems secure, and meet our legal and tax obligations. We don't add you to a marketing list. A research newsletter, when it starts, is something you sign up to separately.
The legal bases we rely on: your consent when you contact us; our contract with you when we do the work; our legitimate interest in keeping the site secure; and legal obligation for tax and accounting records. You can withdraw consent at any time.
Platforms we run for clients
To run a client's platform we hold its files, databases, backups, domain and email settings, and the credentials for the services it uses. Where that includes personal data about the client's own customers or staff, the client is the controller and we act only on their instructions. We access it only to deliver, support, secure or restore the service, never use it for anything else, and tell the client without delay if we learn of a breach. Everything belongs to the client; we hold the keys as custodian and hand them over on request. We'll sign a data processing agreement if you need one.
Who we share it with
Only the providers we need to run the business: our hosting and security provider (Cloudflare), our email provider, Paystack for payments, and the servers that host client platforms. Each handles it only for us. We don't sell or share it for advertising. Some of these providers store data outside Nigeria; where they do, we rely on the safeguards the NDPA allows and apply the same protection.
How long we keep it
Enquiries that don't lead to work are deleted after 12 months. Client records are kept for as long as the engagement runs, and invoices and accounting records for as long as Nigerian tax law requires.
How we protect it
Encrypted connections everywhere, isolated hosting, firewall and malware scanning, off-site backups, and access limited to the engineer who needs it. No system is perfectly secure; if a breach puts your rights at risk, we'll tell you and the Nigeria Data Protection Commission within the time the law requires.
Your rights
You can ask to see the data we hold about you, correct it, delete it, limit or object to how we use it, receive it in a portable format, or withdraw your consent. Email info@centricscalesystems.com with "Data request" in the subject; we reply within 30 days and may first check it's really you. If you're unhappy with how we've handled your data, you can complain to the Nigeria Data Protection Commission.
Changes
When this policy changes, the date at the top changes. For important changes, we'll email active clients before they take effect.