Privacy Policy — Keko Labs

1. Introduction

Keko Labs is a trading name of Atelier Keko Nigeria Ltd ("we", "us", "our"), an AI-powered digital transformation company registered in Nigeria. We are committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. It applies to all interactions with our website, contact forms, and services.

For any questions about this policy, contact us at support@keko-labs.com.

2. Information We Collect

2.1 Information you provide

When you contact us or engage our services, we may collect:

Your name and email address
Company name and job title
Project details and requirements you share with us
Any other information you include in correspondence

2.2 Information collected automatically

When you visit our website, we may collect:

Device type, browser type, and operating system
Pages visited and time spent on our site
Referring website or source
IP address (anonymised where possible)

3. How We Use Your Information

We use the information we collect to:

Respond to your enquiries and provide the information you request
Discuss and scope potential projects
Deliver and manage our services during an engagement
Improve our website and the quality of our services
Send project-related communications (updates, deliverables, invoices)
Comply with legal obligations

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

Under applicable data protection laws, including the Nigeria Data Protection Act 2023, we process your data on the following bases:

Consent — when you submit a contact form or voluntarily provide your details
Contractual necessity — when processing is required to deliver services you have engaged us for
Legitimate interest — when we have a genuine business reason to process your data (such as improving our services or responding to enquiries), provided this does not override your rights
Legal obligation — when we are required by law to retain or disclose certain information

5. Data Sharing

We do not sell, rent, or trade your personal data to third parties.

We may share your data with trusted service providers who assist us in operating our business, such as:

Email delivery services
Website hosting providers
Analytics platforms
Cloud infrastructure providers

These providers are contractually obligated to handle your data securely and only for the purposes we specify. We ensure all third-party processors comply with applicable data protection laws.

6. Data Retention

We retain your data only for as long as necessary:

Enquiry data (contact form submissions, initial correspondence) — retained for 24 months from the date of your last communication, then securely deleted
Project data (engagement-related information, deliverables, communications) — retained for the duration of the engagement plus 12 months, unless a longer period is required by law
Analytics data — retained in anonymised or aggregated form and does not identify you personally

You may request earlier deletion at any time (see Section 8).

7. Cookies

Our website currently uses only essential cookies required for the site to function properly (such as session management). These do not track you across other websites.

If we introduce analytics or non-essential cookies in the future, we will update this policy and provide a clear consent mechanism before any such cookies are placed on your device.

8. Your Rights

Under the applicable data protection laws, you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — request correction of inaccurate or incomplete data
Erasure — request deletion of your data where there is no compelling reason for us to continue processing it
Restriction — request that we limit how we use your data
Portability — request a machine-readable copy of your data to transfer to another provider
Objection — object to processing based on legitimate interest
Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at support@keko-labs.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or the relevant data protection authority in your jurisdiction.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encrypted communications, secure hosting, and access controls.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to make a data request, please contact us:

Atelier Keko Nigeria Ltd (trading as Keko Labs)
Lagos, Nigeria
Email: support@keko-labs.com