Privacy Policy
Veridion System Limited (RC 9594563), operating as Veridion Systems
RC Number: 9594563 · TIN: 2622441498655
1415 Ademola Adetokunbo Street, Victoria Island, Lagos State, Nigeria
Last updated: 27 September 2026
Privacy update — 27 September 2026: We have added Google Analytics 4 to help us understand how visitors use our website. Analytics only activates after a visitor accepts optional cookies. Our Google Ads measurement and existing cookie controls remain in place.
1. Who we are
Veridion System Limited (RC 9594563) ("Veridion", "we", "us") is a technology company registered in Nigeria. It operates the Veridion Systems website and services — "Veridion Systems" is our public brand and trading name, and Veridion System Limited is the legal entity behind it and the data controller for the personal data described in this policy. We design and build booking platforms, operational dashboards, AI workflows, and custom business applications.
This policy explains how we handle personal data collected through this website — veridionsystems.net.
Important distinction: where we build and operate systems on behalf of a client (for example, a hotel booking portal or an event registration platform), that client is the data controller for the personal data in those systems, and Veridion acts as a data processor under their instructions. Our handling of that data is governed by the data processing agreement with that client, not by this policy. If you are a guest, attendee, or customer of one of our clients and want to exercise your rights over data held in their system, please contact that organisation directly, or contact us and we will route your request to them.
2. Legal basis
We process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and the regulations issued by the Nigeria Data Protection Commission (NDPC).
We rely on the following lawful bases:
| Purpose | Lawful basis |
|---|---|
| Responding to consultation and contact form enquiries | Performance of a contract / steps taken at your request |
| Sending you information you asked for | Consent |
| Measuring how many enquiries our advertisements produce, and how visitors use this site | Consent |
| Maintaining business records, invoicing, and tax compliance | Legal obligation |
| Site security, fraud prevention, and service improvement | Legitimate interests |
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before withdrawal.
3. What we collect
Information you give us through the contact form or by emailing us:
- Full name
- Business email address
- Phone number (optional)
- Company name
- Industry
- Indicated budget range and timeline
- Project description and any other content of your message
Information collected automatically when you visit:
- IP address and approximate location (city or region level)
- Browser type, device type, and operating system
- Pages viewed, time on page, and referring source
- Cookie and similar identifier data (see section 8)
Some of the above reaches us only where you have accepted optional advertising and measurement cookies. Rejecting them does not stop you using any part of this website, including the enquiry form.
Information you give to our AI assistant. Our website chat assistant ("Veridion AI") processes the messages you type into it in order to answer your questions. Do not enter passwords, payment card details, government identification numbers, health information, or other sensitive personal data into the chat. Chat transcripts may be retained for quality and security review.
We do not knowingly collect personal data from anyone under 18 through this website.
4. What we do with it
We use personal data to:
- Respond to your enquiry and prepare a proposal or scope of work
- Schedule and conduct consultations
- Deliver services you have engaged us for, and support them afterwards
- Send operational communications about an active engagement
- Issue invoices and maintain accounting and tax records
- Secure our website and detect misuse
- Understand which services and pages are of interest, in aggregate
- Measure how many enquiries our advertisements produce, and how visitors use this site, where you have accepted optional cookies (see section 8)
We do not sell personal data. We do not share the contents of your enquiry with advertisers — nothing you type into the enquiry form is sent to any advertising platform. Where you accept optional cookies, technical browsing information is shared with Google for advertising measurement and site analytics only, as described in section 8. We do not use enquiry data to train third-party AI models.
5. Who we share it with
We share personal data only where necessary, and only with:
- Service providers who operate parts of our infrastructure — website hosting, email delivery, analytics, security and bot protection, cloud storage, payment processing, and AI service providers powering our chat assistant. These parties process data on our instructions and are bound to protect it.
- Google LLC — as our advertising and analytics provider, and only where you have accepted optional cookies. Google receives technical browsing information, never the contents of your enquiry. See section 8.
- Professional advisers — accountants, auditors, and lawyers, where required.
- Regulators, courts, or law enforcement — where we are legally required to disclose, or to establish or defend legal claims.
- A successor entity — in the event of a merger, acquisition, or business transfer, subject to the protections in this policy.
6. International transfers
Some of our service providers operate infrastructure outside Nigeria. Where personal data is transferred abroad, we take reasonable steps to ensure the recipient is subject to a legal regime, contractual terms, or binding rules that afford an adequate level of protection, consistent with the NDPA's requirements on cross-border transfers.
7. How long we keep it
| Data | Retention |
|---|---|
| Enquiries that do not become engagements | 24 months from last contact |
| Client records and project documentation | Duration of engagement + 6 years (tax and limitation periods) |
| Financial and invoicing records | 6 years, per Nigerian tax law |
| Google Analytics user- and event-level data | Up to 14 months, subject to Google's applicable retention and deletion processes |
| Anti-spam records (keyed hashes of your IP address, and of your email address and message) | Up to 24 hours |
| AI chat transcripts | 12 months |
We delete or anonymise personal data once the retention period ends and no legal obligation requires us to keep it.
8. Cookies and similar technologies
There are two kinds of storage on this website.
Strictly necessary. These make the site work and are used without consent. This includes the record of your own cookie choice — we have to store that in order to honour it on your next visit. It holds only the word "accepted" or "rejected", and no identifier of any kind.
Security checks on the enquiry form. To keep automated spam out of our inbox, the enquiry form uses Cloudflare Turnstile, a bot-protection service from Cloudflare, Inc. It loads when you start filling in the form, whatever you choose about optional cookies, because it is needed to protect the form, and it may occasionally ask you to tick a box. Cloudflare processes technical information such as your IP address and browser characteristics to tell people from automated programs; we use the result only to screen enquiries, never for advertising or analytics. When you send an enquiry we also use your IP address to limit how many enquiries can be sent in a short time, and a fingerprint of your email address and message so the same enquiry is not delivered twice. Both are stored only as one-way keyed hashes, with our data-storage provider Upstash, and are deleted automatically within 24 hours. An enquiry that looks automated is set aside for manual review, not discarded.
Optional advertising and measurement. We advertise our services through Google Ads, and we use Google Analytics to understand how visitors use this site — which pages are viewed and how people arrive. With your consent, we load a single Google tag that does both: it tells us how many enquiries our advertisements actually produce, and it records visits and page views for Google Analytics. This is the only optional technology on this site. We do not use Google Tag Manager.
Your choice. You are asked when you first arrive. Nothing optional runs beforehand, and no option is pre-selected. If you reject, no Google tag is loaded at all — this site makes no request to Google and no Google cookie is created. Rejecting does not restrict the website or the enquiry form. Every page, and the enquiry form itself, work identically either way.
You can change your decision at any time through the Cookie preferences link in the footer of every page. Switching from accepted to rejected stops further measurement and deletes the Google advertising and analytics cookies that are reachable from this domain.
What Google receives. Where you accept, Google LLC acts as a third-party advertising and analytics provider. Its tag may process technical information including your device and browser type, IP-derived approximate location, the address of each page you view on this site, the referring address, a pseudonymous browser identifier that lets Google Analytics recognise repeat visits, an advertising click identifier if you arrived from one of our advertisements, and the fact that a successful enquiry occurred.
What Google does not receive. Nothing you type into the enquiry form is included. The conversion event records only that a successful enquiry happened — never your name, email address, telephone number, company, industry, budget, timeline or message. We do not send Google enhanced-conversion or hashed contact data.
| Storage | Set by | Purpose | Set when | Lifetime |
|---|---|---|---|---|
veridion.cookie-consent.v1 — browser local storage, not a cookie | Veridion | Remembers your cookie choice so we can honour it | Always — strictly necessary | Until you clear your browser storage |
_gcl_au | Links an advertisement click to a later enquiry so conversions can be counted | Only after you accept | 90 days, per Google's published documentation | |
Other _gcl_* and _gac_* cookies | Set by Google's tag instead of, or alongside, _gcl_au depending on the campaign and the click identifier present | Only after you accept | Determined by Google | |
_ga | Distinguishes one visitor from another so Google Analytics can count visits and page views | Only after you accept | 2 years, per Google's published documentation | |
_ga_<container-id> | Keeps track of the current visit for Google Analytics | Only after you accept | 2 years, per Google's published documentation |
Cookie names and lifetimes for Google's tag are set by Google and may change; those above reflect Google's published documentation as at the date of this policy. How long Google retains the resulting conversion and analytics data is governed by Google's own retention policy and by our Google Ads and Google Analytics account settings, not by a period we set.
You can also block or clear cookies through your browser. Doing so will not prevent you using this site.
9. How we protect it
We apply technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS/TLS), access controls limiting who can reach personal data, credentials held in managed secret storage rather than in code, regular backups, and prompt patching of the platforms we operate.
No system is perfectly secure. If a breach occurs that is likely to result in risk to your rights and freedoms, we will notify the NDPC within 72 hours of becoming aware of it, and notify affected individuals where the law requires.
10. Your rights
Under the NDPA you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase data where there is no lawful reason for us to keep it
- Restrict or object to processing in certain circumstances
- Portability — receive your data in a structured, commonly used, machine-readable format
- Withdraw consent at any time, where consent is the basis for processing
- Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects
- Lodge a complaint with the Nigeria Data Protection Commission
To exercise any of these, email info@veridionsystems.net. We respond within one month. There is no charge unless a request is manifestly unfounded or excessive. We may ask you to verify your identity first.
11. Changes to this policy
We may update this policy as our services or the law change. The "Last updated" date at the top reflects the current version. Material changes will be notified by a prominent notice on this page.
12. Contact
Data protection enquiries
Veridion System Limited (RC 9594563)
1415 Ademola Adetokunbo Street, Victoria Island, Lagos State, Nigeria
Email: info@veridionsystems.net
If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission (NDPC).