This Privacy Policy explains how Insightful3D Studio Limited (“Insightful3d”, “we”, “us” or “our”) collects, uses, shares, retains and protects personal data when you visit www.insightful3d.com (the “website”), contact us, request or receive our services, work with us or apply to work with us. It also explains your rights and how to exercise them.
We process personal data in accordance with the Nigeria Data Protection Act 2023 (the “NDPA”) and other applicable data protection laws. By using the website or providing personal data to us, you acknowledge that we will process your personal data as described in this policy.
1. Who we are
Insightful3D Studio Limited is a creative and immersive-technology studio based in Lagos, Nigeria. We are the data controller responsible for the personal data described in this policy. You can contact us about this policy or your personal data at:
- Insightful3D Studio Limited, 8a Oje Imianvan Street, Oregun, Ikeja, Lagos, Nigeria
- Email: [email protected]
- Phone: +234 906 000 6378
Our virtual reality applications and the Human Anatomy Explorer app have their own privacy policies: see the VR applications privacy policy and the Human Anatomy Explorer privacy policy. Where we process personal data on behalf of a client, that processing is also governed by our agreement with the client.
2. Personal data we collect
The personal data we collect depends on how you interact with us. It may include:
- Identity and contact details, such as your name, job title, organisation, email address, phone number and location.
- Enquiry and project information, such as the services you are interested in, your brief, timeline and budget, and any files, links or other materials you share with us.
- Communications, including the content of emails, calls, messages (for example through WhatsApp) and form submissions, and your marketing and communication preferences.
- Recruitment information, such as your CV, portfolio, online profiles, work history, skills, qualifications, cover note and any other information you provide when you apply for a role or contact us about working with us.
- Client, supplier and partner information, such as the details needed to prepare proposals, deliver projects, manage contracts, invoice and make or receive payments.
- Technical and usage data, such as your IP address, browser and device information, the pages you view and links you click, referring websites, the dates and times of your visits, and information collected through cookies and similar technologies.
We collect personal data directly from you, automatically when you use the website, and from other sources, such as your organisation, our clients and business partners, referees, recruitment platforms, and publicly available sources such as company websites and professional networking sites.
Please do not send us sensitive personal data, such as health information, unless we ask for it.
3. How we use personal data
We may use personal data to:
- respond to enquiries, quote requests and other requests, and communicate with you;
- prepare proposals, provide our services, deliver projects, and manage our relationships with clients, suppliers and partners;
- send you information about our services, projects, events, publications and insights that may interest you;
- assess applications, recruit, and contact you about current or future opportunities;
- operate, maintain, analyse and improve the website, our services and our communications;
- protect the security of the website, our systems and our business, and prevent and detect spam, fraud and misuse;
- manage and plan our business, including administration, accounting, audits, insurance and reporting, and in connection with any financing, reorganisation, merger, acquisition or sale;
- comply with legal and regulatory obligations, respond to lawful requests, and establish, exercise or defend legal claims; and
- any other purpose we tell you about when we collect your personal data, or that is compatible with the purposes above.
We may combine, aggregate or anonymise personal data. Information that has been anonymised or aggregated so that it no longer identifies you is not personal data, and we may use it for any purpose.
Our lawful bases
Depending on the purpose, we rely on one or more of the lawful bases available under the NDPA and other applicable law, including your consent; the performance of a contract with you, or steps you ask us to take before entering into one; compliance with a legal obligation; and our legitimate interests, or those of a third party, such as running, promoting, protecting and improving our business, where those interests are not overridden by your rights.
Where we rely on your consent, you may withdraw it at any time. Withdrawing consent does not affect processing that took place before you withdrew it, or processing we carry out on another lawful basis.
Marketing
We may send you marketing communications where you have requested them, where you have consented, or where the law otherwise allows, for example where you have engaged with us about similar services. You can opt out at any time by using the unsubscribe link in our emails or by contacting us. We may still send you messages about your requests, projects or our relationship with you.
4. How long we keep personal data
We keep personal data for as long as necessary for the purposes for which it was collected and as described in this policy. This includes maintaining our relationship with you, keeping records of our communications and work, considering you for future opportunities, meeting legal, tax, accounting and regulatory requirements, and establishing, exercising or defending legal claims.
To decide how long to keep personal data, we consider its amount, nature and sensitivity, the purposes for which we process it and whether we can achieve them by other means, the potential risk of harm from unauthorised use or disclosure, and applicable legal requirements and limitation periods. When we no longer need personal data, we delete or anonymise it, or, where that is not practicable, store it securely and limit further use.
5. Who we share personal data with
We may share personal data with:
- Service providers that support our business, such as providers of website hosting, cloud infrastructure, content delivery and security, email and communications, IT, customer relationship management, marketing, analytics, recruitment and professional services. For example, the website uses Amazon Web Services, Amazon Simple Email Service and Cloudflare.
- Our affiliates and companies under common ownership or control with us.
- Clients, partners, subcontractors and collaborators, where needed to respond to your request, deliver a project or provide a service.
- Professional advisers, such as lawyers, accountants, auditors and insurers.
- Regulators, law enforcement agencies, courts and other public authorities, where we believe disclosure is required or permitted by law, or necessary to protect our rights, property or safety, or those of others.
- Prospective or actual buyers, investors or successors in connection with any financing, merger, acquisition, reorganisation or sale of all or part of our business or assets.
- Other third parties with your consent or at your direction.
Third-party services that are embedded in or linked from the website, such as Google Maps, YouTube, Matterport and WhatsApp, collect and use data under their own privacy policies.
6. International transfers
We and our service providers may store and process personal data in Nigeria and in other countries, including countries in the European Union, the United Kingdom and the United States, whose data protection laws may differ from those of your country. Where we transfer personal data outside Nigeria, we do so in accordance with the NDPA and other applicable law, relying on an appropriate basis for the transfer, such as adequacy, contractual safeguards, your consent or the performance of a contract with you.
7. How we protect personal data
We use technical and organisational measures that we consider appropriate to protect personal data against loss, misuse and unauthorised access, disclosure, alteration or destruction. However, no website, transmission or storage system is completely secure, so we cannot guarantee the security of personal data, and any transmission is at your own risk. Where the law requires, we will notify the Nigeria Data Protection Commission and affected individuals of a personal data breach.
8. Your rights
Subject to the conditions, limitations and exemptions in applicable law, you may have the right to:
- be informed about how we use your personal data;
- access your personal data and receive a copy of it;
- have inaccurate or incomplete personal data corrected;
- have your personal data deleted;
- restrict or object to our use of your personal data, including for direct marketing;
- receive your personal data in a portable format;
- withdraw your consent;
- not be subject to a decision based solely on automated processing that produces legal or similarly significant effects for you; and
- lodge a complaint with a data protection authority.
To exercise your rights, contact us at [email protected]. We may need to verify your identity and ask for further information before we respond, and we will respond within the period required by applicable law. Where the law allows, we may decline a request or charge a reasonable fee, for example where a request is manifestly unfounded or excessive or where an exemption applies.
If you have a concern about how we handle your personal data, please contact us first so that we can try to resolve it. You may also lodge a complaint with the Nigeria Data Protection Commission or another competent data protection authority.
9. Cookies and similar technologies
We and our service providers may use cookies, pixels, local storage and similar technologies to operate and secure the website, remember your preferences, understand how the website is used, improve our services and, where permitted, support our marketing. These may be set by us or by third parties, such as our content delivery and security provider and the providers of embedded content.
Where the law requires, we will ask for your consent before using cookies that are not strictly necessary. You can block or delete cookies in your browser settings, but parts of the website may not work properly if you do.
10. Children
The website and our services are intended for businesses and adults. They are not directed at children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.
11. Changes to this policy
We may update this policy at any time. The updated policy takes effect when we post it on this page with a new “Last updated” date, unless we state otherwise. Where the law requires, we will notify you of material changes or ask for your consent. Please review this policy regularly.
12. Contact us
If you have any questions about this policy or how we handle personal data, please contact us:
- Insightful3D Studio Limited, 8a Oje Imianvan Street, Oregun, Ikeja, Lagos, Nigeria
- Email: [email protected]
- Phone: +234 906 000 6378