1. About this policy
Enterscale Services Limited (“Enterscale”, “we”, “us”, or “our”) is a growth and innovation studio registered in Nigeria. We partner with tech founders and startups to sharpen their marketing, product strategy, operations, and performance measurement. In doing so, we collect and use personal data — this policy explains how.
This policy applies to:
- Personal data collected through our website at www.enterscale.com
- Personal data we collect when you engage us as a client, prospect, or partner
- Data we process while delivering services to our clients
- Data from suppliers, consultants, and other parties we work with
By using our website or engaging our services, you confirm that you have read and understood this policy. If you do not agree with its terms, please do not use our website or services.
2. Who we are
Enterscale Services Limited is the data controller for personal data collected through this website and in connection with our commercial activities.
- Company
- Enterscale Services Limited
- Jurisdiction
- Federal Republic of Nigeria
- Governing Law
- Nigeria Data Protection Act 2023 (NDPA)
- Contact
- support@enterscale.com
3. What data we collect
We collect only data that is relevant to the work we do. The categories below describe what we may hold and why.
3.1 Data you give us directly
- Name, job title, company name, and professional contact details
- Email address, phone number, and postal address
- Business context and project information shared during onboarding or discovery
- Messages sent via our website contact form or email
- Financial and billing information required to process engagements
3.2 Data we collect automatically
- IP address, browser type, and device information when you visit our website
- Pages visited, time spent, and navigation patterns (via cookies and analytics tools)
- Referral source (how you found us)
3.3 Data we receive from third parties
- Contact and professional details from referral partners or mutual connections
- Business verification data from publicly available sources
- Analytics and attribution data from advertising platforms (if applicable)
3.4 Data we collect as part of service delivery
When we work with your startup, we may also process data about your customers, users, or survey respondents as part of research, growth, or analytics mandates. In those cases, you are the data controller, and we act as your data processor. We will agree on a separate data processing agreement with you before any such work begins.
4. Why we process your data (legal basis)
Under the Nigeria Data Protection Act 2023 (NDPA), we must have a lawful basis for every type of processing we carry out. The table below sets out our basis for each activity.
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Responding to enquiries | To answer questions from prospects or clients | Legitimate interest |
| Delivering services | To fulfil our contractual obligations to clients | Contract performance |
| Invoicing and payments | To process fees and maintain financial records | Contract / Legal obligation |
| Marketing communications | To share insights, updates, or service information | Consent (opt-in only) |
| Website analytics | To understand how our site is used and improve it | Legitimate interest |
| Legal compliance | To meet regulatory and statutory requirements | Legal obligation |
| Client onboarding | To verify identity and establish a working context | Contract performance |
5. Marketing communications
We will only send you marketing emails, newsletters, or updates if you have explicitly opted in. Every communication we send will include a clear and easy way to unsubscribe. We will act on unsubscribe requests promptly and without requiring justification.
We do not purchase email lists or add people to marketing lists without their knowledge. If you are a client or have recently enquired about our services, we may occasionally contact you about relevant work — this falls under our legitimate interest, and you may opt out at any time.
6. Cookies
Our website uses cookies — small text files stored on your device — to help us understand how visitors use the site and to improve your experience. We use the following types:
| Cookie Type | Purpose | Compulsory? |
|---|---|---|
| Essential | Required for the website to function (e.g. form submissions) | No |
| Analytics | Help us understand page visits and user behaviour (e.g. Meta Pixels) | Yes |
| Preference | Remember your settings across visits | Yes |
| Marketing | Track ad performance if we run campaigns | Yes |
You can manage or disable non-essential cookies through your browser settings at any time. Disabling cookies may affect some functionality of the site.
8. International data transfers
Some of the tools and platforms we use are hosted outside Nigeria (for example, cloud infrastructure in the EU or the United States). Where we transfer data internationally, we take steps to ensure adequate protection is in place, including:
- Using platforms that comply with GDPR or equivalent international standards
- Applying contractual safeguards (standard data processing clauses)
- Restricting transfers to jurisdictions with adequate data protection frameworks
If you would like details about specific transfer safeguards we apply, please contact us.
9. How long we keep your data
We keep your data only for as long as it is needed. The table below sets out our standard retention periods.
| Data Category | Retention Period | Basis |
|---|---|---|
| Client contact information | 5 years post-engagement | Business continuity |
| Financial / billing records | 7 years | Tax and legal compliance |
| Proposal and pitch correspondence | 3 years | Legitimate interest |
| Website enquiries (not converted) | 12 months | Legitimate interest |
| Marketing consent records | Until withdrawal + 2 years | Audit trail |
| Signed contracts | 7 years after expiry | Legal obligation |
| Research/survey data | As specified in the agreement | Contractual |
10. How we protect your data
We take data security seriously. The measures we have in place include:
- Restricted access controls — only team members who need your data to do their jobs can access it
- Encrypted communication channels for sensitive correspondence
- Password-protected platforms and two-factor authentication on accounts that hold client data
- Regular reviews of our data processing tools and third-party platforms
- Confidentiality obligations in all staff and contractor agreements
If we become aware of a data breach that is likely to affect your rights, we will notify you and the relevant regulatory authority within the timeframes required by law.
11. Your rights
Under the Nigeria Data Protection Act 2023, you have the following rights. We will respond to all valid requests within 30 days.
| Your Right | What It Means |
|---|---|
| Right of Access | You can ask us what personal data we hold about you and receive a copy of it |
| Right to Rectification | You can ask us to correct inaccurate or incomplete data |
| Right to Erasure | You can ask us to delete your data where there is no lawful reason to keep it |
| Right to Restriction | You can ask us to limit how we use your data in certain circumstances |
| Right to Portability | You can request your data in a common electronic format or ask us to send it to another provider |
| Right to Object | You can object to processing based on legitimate interest, including for direct marketing |
| Right to Withdraw Consent | Where we rely on consent, you can withdraw it at any time — this will not affect past processing |
To exercise any of these rights, contact us at support@enterscale.com with your name and a description of your request. We will verify your identity before processing the request. There is no fee for standard requests.
12. Third-party websites
Our website may contain links to other websites — including tools, partners, and resources we reference in our work. Once you leave our site, this policy no longer applies. We are not responsible for the privacy practices of third-party sites and encourage you to read their policies before submitting any personal data.
13. Children’s data
Our services are directed at business professionals and tech founders. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data to us, please contact us, and we will promptly delete it.
14. Changes to this policy
We review this policy at least annually and whenever our practices change materially. Where changes are significant, we will notify active clients by email before the changes take effect. The effective date at the top of this document will always reflect the current version. Continued use of our website or services after the effective date constitutes acceptance of the updated policy.
15. Complaints
If you are unhappy with how we have handled your data, please contact us first at support@enterscale.com — we want the opportunity to resolve it directly.
If you remain dissatisfied, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC), the regulatory authority under the NDPA 2023:
16. Contact us
For any questions about this policy or how we handle your data:
Data Protection Contact: support@enterscale.com
Website: www.enterscale.com
Lagos, Nigeria