Privacy Policy

ASR Lab treats data governance as a scientific and ethical responsibility, not merely a legal one. This policy describes how we handle personal data across our website and platform in a manner aligned with the UK/EU General Data Protection Regulation (GDPR) and the Nigeria Data Protection Regulation (NDPR).

Clients retain ownership of the scientific data they provide. We process such data only to deliver the services agreed with each client.

We collect information you provide directly — such as your name, email address, organisation, and the contents of enquiries. We collect limited technical information necessary to operate and secure our website.

For platform clients, we process transcriptomic and molecular datasets strictly under the terms of the relevant service agreement.

When the site is served in production, we measure aggregated visitor statistics through Vercel Analytics, which is cookieless: it does not set cookies, does not collect personal identifiers, and does not track you across other websites. It reports aggregate information such as page views, referrers, and approximate geographic region.

We rely on the legitimate interest of understanding how the institution’s website is used in order to improve it. Vercel Analytics does not require your consent to operate and cannot be disabled on our behalf by a cookie banner because it uses no cookies. You can limit or block this measurement using browser-level controls, and you may contact us at any time to ask about the processing described here.

When you submit an enquiry form, we may count an aggregated conversion event that contains only the enquiry category, its reference, and the year — never the contents of your message, your contact details, or any research information. Where you have given consent on the form, this event is added to the same aggregated statistics described above.

We use personal data to respond to enquiries, to provide and improve our services, and to meet our legal and regulatory obligations. We do not sell personal data.

We apply encryption, access controls, and jurisdiction-aware infrastructure to protect data in transit and at rest. Access to scientific data is limited to personnel who require it to deliver services.

Subject to applicable law, you may request access to, correction of, or deletion of your personal data. To exercise these rights, contact us using the details on our contact page.

We may update this policy to reflect changes in our practices or legal obligations. Material changes will be indicated by updating the effective date below.