LEGAL

Privacy Policy

Last updated: 13 September 2026 · Applies worldwide to visitors of systemsgritlabs.com and to Systemsgrit Ltd client engagements

1. Who we are

Systemsgrit Ltd (“Systemsgrit,” “we,” “us,” or “our”) is a senior AI and security advisory firm. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit systemsgritlabs.com (the “Site”), submit an inquiry, book a discovery call, or otherwise interact with us, wherever in the world you are located.

We are the data controller (or, under some frameworks, the “business”) responsible for the personal information described in this policy. You can reach our privacy contact at hello@systemsgritlabs.com.

2. Information we collect

We collect the following categories of information:

  • Information you provide directly — your name, work email, company/institution, buyer segment, service interest, and any message content you submit through our Contact form or scheduling tool.
  • Scheduling information — if you book a discovery call, our scheduling provider (Calendly) collects your name, email, and selected time slot, and may collect additional details you choose to provide.
  • Engagement and business information — if you become a client, information relevant to delivering advisory, audit, or transformation-program services, as agreed in a separate signed engagement agreement.
  • Technical and usage information — IP address, browser type and version, device information, referring/exit pages, and pages visited, collected automatically through standard web server logs and analytics tools.
  • Cookies and similar technologies — see Section 5 below.

3. How and why we use your information (legal bases)

We use personal information for the following purposes, and rely on the following legal bases where the GDPR, UK GDPR, or comparable frameworks apply:

  • To respond to your inquiry and schedule discovery calls — legal basis: steps taken at your request prior to entering a contract, or our legitimate interest in responding to business inquiries.
  • To deliver and administer client engagements — legal basis: performance of a contract with you or your organization.
  • To send you information you have requested (e.g., subscribing to updates via our mailing list) — legal basis: your consent, which you may withdraw at any time.
  • To maintain, secure, and improve this Site (including fraud and abuse prevention) — legal basis: our legitimate interest in operating a secure, functioning website.
  • To comply with legal obligations, such as tax, accounting, or regulatory recordkeeping requirements.

We do not use automated decision-making or profiling that produces legal or similarly significant effects concerning you.

4. How we share your information

We do not sell or rent personal information. We share information only in the following circumstances:

  • Service providers who process data on our behalf under contract, including our website hosting provider, form-processing software (WPForms), email delivery service (WP Mail SMTP and its connected provider), mailing-list platform (Mailchimp), scheduling tool (Calendly), security and firewall service (Wordfence), and analytics tools (Google Site Kit / Google Analytics, Search Console).
  • Professional advisors (e.g., accountants, auditors, legal counsel) bound by confidentiality obligations.
  • Legal and safety purposes — where required to comply with a legal obligation, enforce our Terms of Service, or protect the rights, property, or safety of Systemsgrit, our clients, or others.
  • Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

5. Cookies and similar technologies

This Site uses cookies and similar technologies for essential site functionality, performance caching, and (where enabled) analytics. Specifically:

  • Essential cookies required for core site functionality and security (e.g., form submission, spam protection).
  • Performance/caching cookies that help pages load faster for repeat visitors.
  • Analytics cookies (e.g., Google Analytics, via Site Kit) that help us understand aggregate site usage. Where required by your local law, we will request your consent before setting non-essential cookies, and you can manage cookie preferences through your browser settings at any time.
  • Third-party embeds (e.g., the Calendly scheduling widget) may set their own cookies when loaded on our Contact and Schedule pages, governed by that provider’s own privacy policy.

6. International data transfers

Systemsgrit is based in Nigeria and works with clients globally. This means personal information may be processed in Nigeria, the country where a given service provider operates (which may include the United States, the European Union, or the United Kingdom), or elsewhere. Where we transfer personal information across borders, we take steps to ensure an adequate level of protection, which may include relying on Standard Contractual Clauses, provider-level certifications (such as adequacy frameworks or the EU-U.S. Data Privacy Framework where applicable to a given service provider), or your explicit consent where required.

7. Data retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy: inquiry and scheduling data is generally retained for up to 24 months after your last contact with us unless you become a client or ask us to delete it sooner; client engagement records are retained per the terms of the applicable engagement agreement and any statutory recordkeeping requirements (e.g., tax and accounting law); mailing-list data is retained until you unsubscribe.

8. Data security

We apply reasonable technical and organizational measures to protect personal information, including access controls, a web application firewall, malware scanning, and regular backups. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your privacy rights

If you are in the European Economic Area, United Kingdom, or a comparable jurisdiction (GDPR / UK GDPR)

You have the right to: access the personal information we hold about you; request correction of inaccurate data; request erasure (“right to be forgotten”); restrict or object to certain processing; receive your data in a portable format; withdraw consent at any time where processing is based on consent; and lodge a complaint with your local data protection supervisory authority.

If you are a California resident (CCPA / CPRA)

You have the right to: know what personal information we collect, use, and disclose; request deletion of your personal information; request correction of inaccurate information; opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising); limit the use of sensitive personal information; and not be discriminated against for exercising these rights. We honor Global Privacy Control (GPC) and other recognized opt-out preference signals where applicable.

If you are in Nigeria (NDPA/NDPR) or another jurisdiction

You generally have comparable rights to access, correct, and request deletion of your personal information, and to lodge a complaint with your local data protection authority (in Nigeria, the Nigeria Data Protection Commission).

To exercise any of these rights, contact us at hello@systemsgritlabs.com. We will respond within the timeframe required by applicable law (typically 30 days).

10. Children’s privacy

This Site and our services are directed at businesses and professionals. We do not knowingly collect personal information from individuals under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Third-party links

This Site may link to third-party websites or embed third-party tools (such as Calendly). We are not responsible for the privacy practices of third parties; we encourage you to review their privacy policies.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page indicates when it was last revised. Material changes will be reflected on this page.

13. Contact us

Questions, requests, or complaints about this Privacy Policy or our data practices: hello@systemsgritlabs.com. Systemsgrit Ltd (RC 6939323). Registered office: Ibadan, Nigeria. Operating base: Lagos, Nigeria.