Privacy policy
How The Onecluster Labs Limited collects, uses and protects personal data, in line with the Nigeria Data Protection Act 2023 and the GDPR where it applies.
Last updated 10 August 2026 · The Onecluster Labs Limited, registered in Nigeria
Who we are
The Onecluster Labs Limited is a company registered in Nigeria with its office in Lagos. We are the data controller for personal data collected through this website and through our client and recruitment relationships. Contact us at privacy@onecluster.co.
What we collect
- Enquiry data. Name, work email, organisation, sector and the content of your message when you use our contact form.
- Recruitment data. Name, email, location, experience, links you provide, your CV and your application answers.
- Newsletter data. Name and email address when you subscribe to our newsletter, together with the date you subscribed and which page you subscribed from.
- Usage data. Pages visited, the site that referred you, any campaign parameters in the link you followed, your country, and a coarse device and browser type. This is collected first-party, without cookies, and no IP address is stored. Visitors are counted using a value that is derived fresh each day and cannot be linked back to you or followed from one day to the next.
- Technical data. IP address, browser type, device type, pages visited and referring source, collected through cookies and server logs.
- Correspondence. Emails and call notes arising from a business or recruitment conversation.
We do not collect special category data, and we ask that you do not include it in free-text fields.
Why we process it, and on what basis
- To respond to enquiries - on the basis of steps taken at your request prior to entering a contract.
- To assess applications - on the basis of our legitimate interest in recruiting, and your consent where required.
- To deliver client engagements - on the basis of contract performance.
- To secure and improve the site - on the basis of our legitimate interest in a functioning, secure service.
- To send our newsletter - on the basis of your consent, given when you submit the signup form. You may withdraw that consent at any time, and every newsletter email carries an unsubscribe link.
- To understand how the site is used - on the basis of our legitimate interest in knowing which pages and channels bring enquiries, balanced against the fact that this measurement is first-party, stores nothing on your device, keeps no IP address, and does not profile individuals or follow anyone across other websites.
- To meet legal obligations - where retention or disclosure is required by law.
How long we keep it
Enquiry data is kept for twenty-four months from last contact. Recruitment data is kept for twelve months from the close of the process unless you ask us to delete it sooner or consent to a longer period. Client engagement records are kept for the duration of the contract plus seven years where required for tax and audit purposes. Newsletter data is kept until you unsubscribe, after which the record is deleted. Usage data is kept for twelve months in aggregate form. Server logs are kept for ninety days.
Who we share it with
We share personal data with service providers who process it on our behalf under written agreement: our email and productivity provider, our website host, and our applicant tracking tooling. We do not sell personal data and we do not share it for third-party advertising. We may disclose data where required by law, regulation or a valid order of a competent court.
International transfers
Some of our processors operate outside Nigeria. Where personal data is transferred abroad we rely on an adequacy determination by the Nigeria Data Protection Commission, standard contractual clauses, or your explicit consent, and we assess the protections in place before transferring.
Your rights
Subject to the conditions in applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, portability, and you may object to processing based on legitimate interest. Where processing relies on consent you may withdraw it at any time without affecting prior processing.
To unsubscribe from the newsletter, use the unsubscribe link in any newsletter email - no request to us is needed. To exercise any other right, email privacy@onecluster.co. We respond within thirty days. If you are not satisfied you may complain to the Nigeria Data Protection Commission, or to your local supervisory authority if you are in the EEA or UK.
Security
We apply access controls, encryption in transit, least-privilege administration and vendor due diligence appropriate to the sensitivity of the data. No system is perfectly secure, and we will notify you and the relevant regulator of a qualifying breach within the periods required by law.
Children
This website is not directed at children and we do not knowingly collect data from anyone under eighteen.
Changes
We may update this policy. Material changes will be signalled by the date at the top of this page, and where the change is significant we will notify affected individuals directly.