Legal Information

1. Introduction

STAAP-Ci Ltd. is committed to maintaining the privacy, confidentiality, and security of the personal information entrusted to us by our clients, visitors, business partners, trainees, employees, service providers, and all individuals who access or interact with our official website at www.staap-ci.com. This Privacy Policy explains the manner in which STAAP-Ci collects, processes, stores, uses, discloses, protects, and where necessary, shares personal information obtained through our website. It also outlines your rights as a data subject and our responsibilities as a data controller in accordance with applicable data protection laws.

STAAP-Ci recognizes that personal information is valuable and deserves to be handled with transparency, integrity, and accountability. We are therefore committed to ensuring that all personal data collected through our website is processed lawfully, fairly, securely, and only for legitimate business purposes. This Privacy Policy has been developed in compliance with applicable laws and regulations, including but not limited to:

• The Nigeria Data Protection Act, 2023 (NDPA);
• Section 37 of the Constitution of the Federal Republic of Nigeria, 1999 (as amended), which guarantees the right to privacy;
• The Cybercrimes (Prohibition, Prevention, etc.) Act, 2015 (as amended); and
• Any other applicable legislation or regulatory requirements relating to the protection and processing of personal data in Nigeria.

This Privacy Policy applies solely to personal information collected through the official STAAP-Ci website (www.staap-ci.com) and any online forms, enquiries, registrations, bookings, or other digital interactions conducted through the website. It does not apply to information collected through offline interactions, third-party websites, or any external platforms that are not owned or controlled by STAAP-Ci. By accessing or using www.staap-ci.com, you acknowledge that you have read, understood, and accepted the terms of this Privacy Policy and consent to the collection, use, and processing of your personal information as described herein, where such consent is required by law.

If you have any questions regarding this Privacy Policy, the manner in which your personal information is processed, or your rights under applicable data protection laws, you may contact STAAP-Ci through the contact details provided in this Policy or by visiting www.staap-ci.com.

2. Scope and Application

This Policy applies to all STAAP-Ci services including workstation memberships, office rentals, meeting and training room bookings, consultancy, research, events, recruitment, website use and visitor management.

3. Information We Collect

To provide our services efficiently and maintain a safe, secure, and professional environment, STAAP-Ci may collect, receive, generate, or otherwise process different categories of personal and business information from individuals who visit our website, make enquiries, register for our services, reserve our facilities, participate in our programmes, or otherwise interact with us.

3.1 Personal Information

Depending on the nature of your interaction with STAAP-Ci, we may collect personal information that enables us to identify or communicate with you. Such information may include your full name, residential or business address, email address, telephone number, occupation or professional designation, the organisation or institution you represent, and any other contact information you voluntarily provide. Where necessary for verification, security, regulatory compliance, or access to certain services, we may also request a valid means of identification and, where applicable, a passport photograph or other identification documents.

3.2 Business and Corporate Information

Where you engage STAAP-Ci on behalf of a business, institution, or organisation, we may collect business-related information including the name of your organisation, business registration details, Tax Identification Number (TIN) where applicable, billing and invoicing information, payment records, authorised contact persons, and any other information reasonably required to establish or manage our business relationship with you.

3.3 Booking and Service Information

When you reserve or make use of any of our facilities or services, we may collect information necessary to administer your booking and deliver our services effectively. This may include details relating to workstation reservations, private office subscriptions, conference room bookings, training room reservations, event registrations, membership information, attendance records, visitor logs, check-in and check-out times, service preferences, and records of previous or current bookings.

3.4 Payment and Transaction Information

Where payments are made for our services, we may collect transaction-related information including payment confirmations, invoices, receipts, billing records, subscription plans, payment references, and other financial information necessary to process payments, maintain accurate accounting records, and comply with applicable legal and regulatory requirements. STAAP-Ci does not intentionally store complete debit or credit card information unless such storage is required and managed securely through authorized payment service providers.

3.5 Website Usage and Technical Information

When you access or browse the STAAP-Ci website, certain technical information may be collected automatically to improve website functionality, performance, and security. This information may include your Internet Protocol (IP) address, browser type and version, operating system, device type, referring website, pages visited, date and time of access, duration of your visit, clickstream data, language preferences, and other analytical information relating to how you use our website. We may also collect information through cookies, web analytics tools, and similar technologies to better understand user behaviour, enhance website performance, improve user experience, and support the efficient operation of our online services.

3.6 Communications and Enquiries

If you contact STAAP-Ci through our website, email, telephone, social media channels, online forms, or any other authorised communication channel, we may retain records of your enquiries, requests, feedback, complaints, correspondence, and any supporting information you voluntarily provide in order to respond to your request, improve our services, and maintain appropriate business records.

3.7 Marketing and Preference Information

Where permitted by law or where you have provided your consent, we may collect information relating to your communication preferences, areas of professional interest, event registrations, newsletter subscriptions, training interests, and other preferences that enable us to provide relevant updates, invitations, promotional materials, or information about STAAP-Ci's products and services. You may withdraw your consent to receive marketing communications at any time.

3.8 Security and Visitor Information

To promote the safety, security, and proper management of our facilities, STAAP-Ci may collect visitor information including visitor registration details, identification presented for verification, access records, CCTV footage where applicable, and other security-related information generated during visits to our premises.

3.9 Information You Choose to Provide

From time to time, you may voluntarily provide additional information when completing forms, participating in surveys, registering for events or training programmes, requesting business support services, or communicating with us. Any such information will be processed only for the specific purpose for which it was provided or as otherwise permitted by applicable law. STAAP-Ci collects only the personal information that is reasonably necessary to deliver its services, meet its legal and contractual obligations, protect its legitimate business interests, enhance user experience, and maintain the security and integrity of its operations. We are committed to ensuring that all information collected is processed lawfully, fairly, transparently, and in accordance with the provisions of the Nigeria Data Protection Act, 2023, and other applicable data protection laws.

4. Purpose for Processing Personal Data

STAAP-Ci processes personal data only where there is a lawful basis for doing so and solely for specified, explicit, and legitimate purposes in accordance with applicable data protection laws. Depending on the nature of your interaction with us, we may process your personal information for one or more of the following purposes:

• Service Delivery and Account Management: To create, verify, manage, and maintain customer accounts, process bookings and reservations, administer memberships, provide our coworking, office, conference, training, consultancy, and business support services, and fulfil your requests efficiently.
• Communication and Customer Support: To respond to enquiries, provide customer assistance, issue booking confirmations, invoices, receipts, service updates, operational notices, and communicate information relating to our services, events, programmes, and other business activities.
• Business Improvement and Website Administration: To operate, maintain, monitor, evaluate, and improve our website, facilities, products, and services through analytics, customer feedback, research, testing, and service development in order to enhance user experience and operational efficiency.
• Security and Risk Management: To safeguard our premises, website, users, and business operations by managing visitor access, operating CCTV systems where applicable, detecting and preventing fraud, investigating security incidents, and protecting against cyber threats and other unlawful activities.
• Legal and Regulatory Compliance: To comply with applicable laws, regulatory requirements, court orders, accounting and tax obligations, resolve disputes, enforce our contractual rights, and protect the legitimate interests of STAAP-Ci where permitted by law.
• Marketing and Business Engagement: Where you have provided your consent or where otherwise permitted by law, to send newsletters, promotional materials, invitations, event notifications, business opportunities, and other communications relating to STAAP-Ci's products, services, and programmes. You may opt out of such communication at any time.
• Other Legitimate Business Purposes: To process your personal information for any other purpose that is compatible with the reason for which it was originally collected or as otherwise authorised or required by applicable law.

STAAP-Ci will process your personal information only for the purposes outlined in this Privacy Policy or as otherwise permitted by law. We do not sell or commercially exploit your personal information, and access to such information is restricted to authorised personnel and approved service providers who require it solely for legitimate business purposes and are bound by appropriate confidentiality obligations.

5. Cookies and Similar Technologies

STAAP-Ci uses cookies and similar technologies on www.staap-ci.com to enhance the functionality, security, and performance of our website and to improve your browsing experience. These technologies help us remember your preferences, analyse website traffic, understand how visitors interact with our website, monitor website performance, and support the continuous improvement of our online services. Some cookies may be provided by trusted third-party service providers that assist us with website analytics and technical support, all of whom are required to handle your information in accordance with applicable data protection laws. Most web browsers automatically accept cookies; however, you may choose to manage, restrict, or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of some features of our website. By continuing to use www.staap-ci.com, you consent to our use of cookies and similar technologies as described in this Privacy Policy, unless you have adjusted your browser settings to decline them.

6. Website Analytics and Tracking Technologies

STAAP-Ci uses website analytics and tracking technologies, including cookies, pixels, tags, and similar tools, to understand how visitors use our website, monitor performance, improve functionality, enhance user experience, and measure the effectiveness of our services and content. These technologies may collect information such as your browser and device information, operating system, cookie number, pages visited, referral sources, and general usage patterns. This information is primarily analyzed in an aggregated or de-identified form and is not used to personally identify users unless required for security, legal compliance, or where you have voluntarily provided your personal information. Where required by applicable data protection laws, STAAP-Ci will obtain your consent before using non-essential analytics and tracking technologies. You may manage your preferences through our cookie banner or your browser settings. We also implement appropriate security measures and work only with trusted third-party service providers that are contractually obligated to protect analytics data and comply with applicable privacy and data protection laws.

7. Disclosure and Sharing of Personal Information

STAAP-Ci treats your personal information with the highest level of confidentiality and does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may disclose or share your personal information only where it is necessary to provide our services, operate our business, fulfill contractual obligations, comply with applicable laws, or protect our legitimate interests. Your personal information may be shared with trusted service providers, technology partners, payment processors, cloud hosting providers, professional advisers, regulatory authorities, law enforcement agencies, or other third parties where required by law or where disclosure is necessary to establish, exercise, or defend legal rights. We may also share relevant information with clients, government agencies and development partners where necessary to support the delivery of projects or services.

If we intend to disclose your personal information for any purpose other than those described in this Privacy Policy, we will notify you of the proposed disclosure where required by applicable law. STAAP-Ci requires all third parties that process personal information on our behalf to handle such information only in accordance with our documented instructions, this Privacy Policy, and applicable data protection laws. We also require them to implement appropriate confidentiality, technical, and organizational security measures to safeguard your personal information throughout the processing lifecycle.

8. Third-Party Service Providers

STAAP-Ci may engage trusted third-party service providers to support the delivery of our services and the operation of our business. These providers may perform functions such as website hosting, cloud storage, payment processing, information technology support, data analytics, email communications, customer relationship management, security monitoring, and other administrative or professional services. Where these providers require access to personal information, they are authorized to process such information only for the specific purposes for which they have been engaged. STAAP-Ci carefully selects third-party service providers and requires them to maintain appropriate technical, organizational, and security measures to protect personal information. They are contractually obligated to process personal data only in accordance with our instructions, this Privacy Policy, and applicable data protection laws, and are prohibited from using or disclosing your personal information for any unauthorized purpose.

9. Third-Party Websites and External Links

Our website and digital platforms may contain links to third-party websites, applications, or online services for your convenience or to provide additional information. These external websites operate independently of STAAP-Ci and have their own privacy policies, terms of use, and data processing practices, which we do not control. STAAP-Ci is not responsible for the privacy, security, content, or practices of any third-party websites or services that are linked from our platforms. We encourage you to review the privacy policies and terms of use of any third-party website you visit before providing your personal information or using their services.

10. International Transfer of Personal Data

STAAP-Ci may transfer, store, or process your personal information outside your country of residence where necessary to provide our services, support business operations, collaborate with international partners, or engage trusted third-party service providers, including cloud-based technology platforms. Such transfers may occur where our clients, partners, service providers, or data processing infrastructure are located in other jurisdictions.

Whenever personal information is transferred internationally, STAAP-Ci will implement appropriate safeguards to ensure your information receives a level of protection consistent with applicable data protection laws. These safeguards may include transferring data only where adequate legal protections exist, implementing contractual and organizational measures, conducting transfer risk assessments where required, and ensuring recipients process personal information solely for authorized purposes and maintain appropriate security measures. By using our services or providing your personal information, you acknowledge that such transfers may occur where permitted by law, and STAAP-Ci will continue to protect your information in accordance with this Privacy Policy and applicable data protection legislation.

11. Data Security Measures

STAAP-Ci is committed to safeguarding the confidentiality, integrity, and availability of your personal information. We implement appropriate technical, organizational, and administrative security measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction. These measures may include access controls, encryption where appropriate, secure data storage, network and system security, regular monitoring, and staff awareness and training. Access to personal information is restricted to authorized employees, contractors, and trusted service providers who require such access to perform their responsibilities and who are bound by confidentiality and data protection obligations. While we continuously review and enhance our security practices, no method of transmitting or storing information over the internet is completely secure. You also play an important role in protecting your personal information by maintaining the confidentiality of your account credentials and promptly notifying us of any suspected unauthorized access or security incident. Where a personal data breach is likely to affect your rights and freedoms, STAAP-Ci will take appropriate remedial measures and, where required by applicable law, notify affected individuals and the relevant regulatory authorities. We may communicate with you electronically regarding security, privacy, or administrative matters relating to your use of our website and services.

12. Data Retention and Disposal

STAAP-Ci retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, including providing our services, maintaining our business relationship with you, complying with applicable legal, regulatory, tax, accounting, and contractual obligations, and resolving disputes where necessary. The length of time we retain personal data depends on the nature of the information, the purpose for which it was collected, and any applicable legal or operational requirements. Where personal data is no longer required for these purposes, we will securely delete, anonymise, or dispose of it using appropriate technical and organisational measures designed to prevent unauthorised access, disclosure, or recovery. In certain circumstances, we may retain specific information for longer periods where required or permitted by law, where necessary to establish, exercise, or defend legal claims, or where there is a legitimate business need to do so. During any extended retention period, your personal data will continue to be protected in accordance with this Privacy Policy and applicable data protection laws. STAAP-Ci periodically reviews the personal data we hold to ensure that it remains accurate, relevant, and limited to what is necessary. We are committed to implementing secure data disposal practices that safeguard your privacy throughout the entire information lifecycle.

13. Your Rights as a Data Subject

At STAAP-Ci, we respect your privacy and are committed to ensuring that you can exercise your rights over your personal data in accordance with applicable data protection laws. Depending on the laws that apply to you and the nature of the processing, you may have the following rights:

• Right to Be Informed – You have the right to receive clear and transparent information about how we collect, use, store, share, and protect your personal data.
• Right of Access – You have the right to request confirmation of whether we process your personal data and to obtain a copy of the personal data we hold about you, together with information about how it is being processed.
• Right to Rectification – You have the right to request that we correct or update any inaccurate, incomplete, or outdated personal data that we hold about you.
• Right to Erasure (Right to be Forgotten) – You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw your consent (where processing is based on consent), or where we are no longer legally permitted to process the data. Please note that this right may be subject to certain legal or regulatory obligations requiring us to retain specific information.
• Right to Restrict Processing – You have the right to request that we temporarily limit the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability – Where technically feasible and legally applicable, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request that it be transferred to another service provider.
• Right to Object to Processing – You have the right to object to the processing of your personal data where the processing is based on our legitimate interests or is carried out for direct marketing purposes. We will honour your request unless we have compelling legitimate grounds or a legal obligation to continue processing your data.
• Right to Withdraw Consent – Where we rely on your consent to process your personal data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.
• Right Not to Be Subject to Automated Decision-Making – You have the right not to be subject to decisions based solely on automated processing, including profiling, where such decisions produce legal or similarly significant effects on you, unless otherwise permitted by applicable law.
• Right to Lodge a Complaint – If you believe that your privacy rights have been violated or that we have not handled your personal data in accordance with applicable data protection laws, you have the right to lodge a complaint with the relevant data protection authority. We encourage you to contact STAAP-Ci first so that we can make every reasonable effort to resolve your concerns promptly and fairly.

14. How to Exercise Your Rights

If you wish to exercise any of the rights described above or have any questions about how STAAP-Ci processes your personal data, please contact us using the details provided in the Contact Us section of this Privacy Policy. We may request sufficient information to verify your identity before processing your request in order to protect your personal data from unauthorised access or disclosure. We will respond to your request within the timeframe required by applicable data protection laws and will inform you if additional information is required to process your request. Where a request cannot be fulfilled due to legal, regulatory, or operational requirements, we will explain the reasons for our decision where permitted by law.

15. Children's Privacy

STAAP-Ci is committed to protecting the privacy and personal data of children. Our website, services, and business operations are intended for individuals who are 18 years of age or older, and we do not knowingly collect, use, or process personal data from children under the age of 18. If we become aware that we have inadvertently collected personal data relating to a child without the necessary parental or legal guardian consent where required by applicable law, we will take prompt and appropriate steps to investigate and securely delete the information from our systems, unless we are legally required or otherwise permitted to retain it. Parents or legal guardians who believe that a child has provided personal information to STAAP-Ci are encouraged to contact us using the details provided in this Privacy Policy so that we can promptly review the matter and take appropriate action. STAAP-Ci does not knowingly use children's personal information for marketing, profiling, or any other commercial purpose and remains committed to implementing appropriate technical and organisational measures to prevent the unintended collection of children's data and to ensure that all personal data is processed lawfully, fairly, and securely.

16. Data Breach Management

STAAP-Ci is committed to preventing, identifying, and responding promptly to any actual or suspected personal data breach. We maintain appropriate technical, organisational, and administrative measures to detect security incidents, contain their impact, investigate their cause, and protect the confidentiality, integrity, and availability of the personal data entrusted to us. Where a data breach occurs, we will promptly assess its nature and scope, determine the potential risks to affected individuals, take appropriate remedial actions to minimise any harm, and implement corrective measures to prevent similar incidents from occurring in the future. Where required by applicable data protection laws, STAAP-Ci will notify the relevant supervisory or regulatory authority within the prescribed timeframe and, where the breach is likely to pose a significant risk to the rights and freedoms of affected individuals, we will notify those individuals without undue delay. Following every confirmed breach, we conduct a thorough review of the incident to identify its root cause, strengthen our security controls, improve our response procedures, and reinforce our ongoing commitment to safeguarding personal data and maintaining the trust of our clients, employees, visitors, business partners, and other stakeholders.

17. Changes to this Privacy Policy

STAAP-Ci may update or revise this Privacy Policy from time to time to reflect changes in applicable laws and regulations, technological developments, our business operations, or the manner in which we collect, use, disclose, or protect personal data. We encourage you to review this Privacy Policy periodically to stay informed about how we safeguard your personal information. Where we make material changes that significantly affect your rights or the way your personal data is processed, we will take appropriate steps to notify you through our website, email, or any other suitable communication channel, where required. Unless otherwise stated, any amendments to this Privacy Policy will become effective from the date they are published on our website, and your continued use of our website, services, or facilities after such changes take effect constitutes your acknowledgement of the updated Privacy Policy.

18. Dispute Resolution

Any dispute, claim, or controversy arising out of or relating to these Terms and Conditions or the use of this website or any of the services provided shall first be addressed through good-faith discussions with a view to reaching an amicable resolution. Where the parties are unable to resolve the matter amicably, the dispute shall be referred to arbitration in accordance with the Arbitration and Mediation Act, 2023 of the Federal Republic of Nigeria. The decision of the arbitrator shall be final and binding on the parties, subject to any rights or remedies available under applicable law.

19. Acceptance of this Privacy Policy

By accessing or using the STAAP-Ci website (www.staap-ci.com), submitting your personal information, making enquiries, registering for our services, or otherwise interacting with our website, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

Where your consent is required under applicable law, you expressly consent to the collection, use, storage, and processing of your personal information as described in this Privacy Policy. If you do not agree with any provision of this Policy, you should discontinue the use of our website and refrain from providing your personal information through it. Your continued use of the STAAP-Ci website following the publication of any updates to this Privacy Policy constitutes your acceptance of those changes, unless otherwise required by applicable law.

20. Contact Information

If you have any questions, comments, or concerns about this Privacy Policy or the way STAAP-Ci collects, uses, stores, or protects your personal data, or if you wish to exercise any of your rights as a data subject, please contact us. We will make every reasonable effort to respond to your enquiry promptly and in accordance with applicable data protection laws.

You may reach us at:

• Address: STAAP-Ci, 1 Gbom Street, Off Sani Abacha Road, GRA, Port Harcourt, Rivers State, Nigeria
• Email: info@staap-ci.com
• Phone: +234 (0) 803 347 9896
• Website: www.staap-ci.com

We strive to provide flexible booking options for our customers. Please review our refund and cancellation policy below.

Cancellation Periods

• Hourly bookings: Free cancellation up to 2 hours before the start time.
• Daily bookings: Free cancellation up to 24 hours before the start time.
• Weekly bookings: Free cancellation up to 48 hours before the start time.
• Monthly bookings: Free cancellation up to 7 days before the start date.

Late Cancellations

Cancellations made after the free cancellation period will incur a charge of 50% of the booking total. No-shows will be charged the full booking amount.

Refund Processing

Approved refunds are returned through the original payment gateway. Processing time depends on the gateway and issuing bank.

Exceptions

In case of facility closures, technical issues, or force majeure events, customers will receive a full refund regardless of the cancellation period.

By using STAAP-Ci's platform and services, you agree to the following terms and conditions.

Account Registration

You must provide accurate and complete information when creating an account. You are responsible for maintaining the confidentiality of your account credentials.

Use of Facilities

You agree to use our facilities in a professional manner, respecting other users and following all posted rules and guidelines. Any damage to facilities caused by you or your guests will be your responsibility.

Prohibited Activities

• Using facilities for illegal activities
• Harassing or disturbing other users
• Damaging or removing equipment
• Subletting or reselling workspace without authorization
• Violating any applicable laws or regulations

Limitation of Liability

STAAP-Ci shall not be liable for any indirect, incidental, or consequential damages arising from your use of our services, to the maximum extent permitted by law.

This Cookie Policy explains how STAAP-Ci uses cookies and similar tracking technologies on our platform.

What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help us improve your experience by remembering preferences and analyzing usage patterns.

Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly
• Analytical Cookies: Help us understand how users interact with our platform
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements

Managing Cookies

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our platform.

This Data Processing Agreement governs the processing of personal data by STAAP-Ci on behalf of its customers.

Data Processor

STAAP-Ci acts as a data processor for personal data submitted through our platform. We process data in accordance with your instructions and applicable data protection laws.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with services. You can request deletion of your data at any time.

Sub-processors

We engage trusted third-party sub-processors to assist in providing our services, including cloud hosting providers, payment processors, and analytics services.

Contact

For questions about this Data Processing Agreement, please contact our Data Protection Officer at privacy@staap-ci.com.