Privacy Policy
VIBET BIO — WEBSITE PRIVACY POLICY
Last Updated: 8th December, 2025
Effective Date: 8th December, 2025
VIBET BIO, Lagos, Nigeria
Email: privacy@vibetbio.com | Website: https://vibetbio.com
1. Introduction and Scope
1.1 Our Commitment to Privacy
VIBET BIO ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard information from visitors to our public website (the “Website”).
1.2 Compliance and Data Controller
Compliance: We comply with all applicable data protection laws, including the Nigeria Data Protection Act 2023 (NDPA) and the General Data Protection Regulation (GDPR) (where applicable to EU/EEA visitors).
Data Controller: VIBET BIO is the Data Controller for personal information collected through the Website.
Address: Lagos, Nigeria
Email: privacy@vibetbio.com
1.3 What This Policy Does NOT Cover
This Policy applies only to visitors of our public Website. It does NOT cover:
VIBET OS Platform Users: Governed by a separate Platform Privacy Policy and Data Processing Agreement.
Patient Data: Processed strictly as a Data Processor on behalf of healthcare providers, governed by separate contractual agreements.
Third-Party Websites: We are not responsible for sites linked from our Website.
Employment Data: Governed by internal HR privacy notices.
2. Information We Collect
We collect information through three primary methods:
2.1 Information You Provide Directly
This is data you voluntarily submit via forms, inquiries, or subscriptions:
Contact Details: Full name, email address, phone number, and location.
Professional Details: Organization/Company name, job title or role.
Application Details: Resume/CV, cover letter, and application materials for job submissions.
Inquiry Details: Content of your message, feedback, or survey responses.
2.2 Information Collected Automatically
When you visit our Website, we automatically collect technical and usage information:
Device Data: IP address, approximate geographic location (city/region), browser type, operating system, and unique device identifiers.
Usage Data: Pages visited and links clicked.
Tracking Data: Information collected via cookies and similar technologies (see Section 6).
2.3 Information from Third-Party Sources
We may receive information from:
Social Media: Profile information and interactions if you engage with us on platforms like LinkedIn.
Marketing Partners: Aggregated data from web analytics (like Google Analytics) and B2B contact details from professional databases.
2.4 Sensitive Personal Data
We do NOT intentionally collect Sensitive Personal Data (e.g., health, biometric, religious) through this Website. Please refrain from submitting such information voluntarily.
3. How We Use Your Information (Purposes)
We use the collected information for the following specific purposes:
Purpose Category | Examples of Use |
Website & Service Delivery | Responding to your inquiries, maintaining website function, and providing requested information (demos, whitepapers). |
Communication | Sending transactional emails (confirmations) and support responses. |
Marketing (with consent where required) | Sending newsletters, blog updates, event invitations, and displaying personalized ads (retargeting). |
Business Operations | Processing and evaluating job applications; performing accounting and auditing; managing partner relationships. |
Legal & Security | Complying with legal obligations, court orders, enforcing our Terms of Use, and detecting/preventing fraud and security incidents. |
Analytics | Analyzing trends and user behavior to improve website design and performance. |
We do NOT sell or rent your personal information to third parties for their marketing purposes.
4. Legal Bases for Processing (NDPA/GDPR Compliance)
We process personal data based on a lawful justification, primarily:
Legal Basis | When We Use It | NDPA Reference | GDPR Reference |
Consent | For marketing emails, newsletters, and non-essential cookies. (You may withdraw consent anytime.) | Section 25(1)(a) | Article 6(1)(a) |
Contract / Pre-Contract | Responding to demo requests, processing job applications, and providing information you requested. | Section 25(1)(b) | Article 6(1)(b) |
Legitimate Interests | Website analytics, improving services, preventing fraud, and protecting our systems. (We have conducted a balancing test.) | Section 25(1)(f) | Article 6(1)(f) |
Legal Obligation | Compliance with tax laws, regulatory reporting, and government requests. | Section 25(1)(c) | Article 6(1)(c) |
5. Cookies and Tracking Technologies
5.1 Types of Cookies Used
We use cookies (small text files) to recognize your device. We use four main types:
Strictly Necessary (Essential): Required for basic website function (e.g., security, consent preferences). No consent needed.
Performance / Analytics: Measure visitor usage and detect errors (e.g., Google Analytics). Requires consent.
Functionality: Remember your choices (e.g., region).
Marketing / Advertising: Used for personalized advertising and retargeting (e.g., LinkedIn, Google Ads). Requires consent.
5.2 How to Manage Cookies
You can manage or disable cookies via our Cookie Consent Banner or through your Browser Settings. You may withdraw consent for non-essential cookies at any time.
We do not currently respond to “Do Not Track” (DNT) signals.
6. How We Share Your Information
We share your information only in limited, controlled circumstances:
Service Providers: We share data with third parties (e.g., cloud hosting, email platforms, CRM) who perform tasks on our behalf. They are contractually required to maintain confidentiality and security.
Legal Compliance: To comply with court orders, laws, or lawful requests from regulators and law enforcement.
Business Transfers: In the event of a merger, acquisition, or asset sale, data may be transferred to the successor entity.
With Your Consent: For purposes such as testimonials or co-marketing campaigns, where you have provided explicit permission.
Aggregate Data: We share anonymized or de-identified data that cannot be used to identify you for research and statistical analysis.
7. International Data Transfers
7.1 Transfer Outside Nigeria (NDPA)
When transferring data outside of Nigeria, we ensure that the recipient provides an adequate level of data protection by relying on:
Standard Contractual Clauses (SCCs): Approved by the NDPC to impose data protection obligations on the recipient.
Explicit Consent: When transfers are specific and you have been informed of the risks.
Other Lawful Mechanisms: Including transfers necessary for performing a contract with you.
7.2 Transfers to the EU/EEA (GDPR)
For EU/EEA data subjects, transfers are governed by:
EU Standard Contractual Clauses (EU SCCs): For transfers outside the EU/EEA.
Supplementary Measures: Including strong encryption and access controls, implemented to meet requirements like the Schrems II decision.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.
Data Category | Retention Period | Rationale |
Contact Form Inquiries | 3 years from last interaction | Business purposes, customer service |
Marketing Subscribers | Until you unsubscribe + 30 days | Compliance with withdrawal of consent |
Unsuccessful Job Apps | 12 months from application date | Future opportunities, legal compliance |
Website Analytics Data | 26 months (Google Analytics default) | Website improvement, trend analysis |
Legal/Compliance Records | 7–10 years | Legal and regulatory requirements |
At the end of the retention period, data is securely deleted or anonymized.
9. Your Privacy Rights
Under the NDPA and GDPR, you have the right to exercise the following rights regarding your personal data:
Your Right | What It Means |
Access | Obtain confirmation that your data is being processed and receive a copy of that data. |
Rectification | Correct inaccurate or incomplete personal data. |
Erasure ("Right to be Forgotten") | Request deletion of your data (e.g., if you withdraw consent or the data is no longer necessary). |
Restrict Processing | Limit how we use your data (e.g., while verifying accuracy). |
Data Portability | Receive your data in a structured, machine-readable format and transmit it to another organization. |
Object | Object to processing based on legitimate interests (including for direct marketing, which we must stop immediately). |
Withdraw Consent | Withdraw any consent you previously gave (e.g., for marketing). |
How to Exercise Your Rights:
Email: Contact us at privacy@vibetbio.com with the subject line stating your request (e.g., "Data Deletion Request").
Response Time: We will respond to valid requests within 30 days (NDPA) or 1 month (GDPR).
Complaints
You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or your local supervisory authority if you believe your rights have been violated.
10. YOUR PRIVACY RIGHTS
Depending on your jurisdiction, you may have the right to:
• Access your data
• Correct inaccurate information
• Request deletion
• Withdraw consent
• Object to processing (including marketing)
• Request restriction
• Request data portability
To exercise your rights, contact: privacy@vibetbio.com
Identity verification may be required.
You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC) or your local supervisory authority.
11. DATA SECURITY
We implement technical and organizational safeguards, including:
• Encryption in transit and at rest
• Access controls and authentication
• Monitoring and security logging
• Regular security reviews
No system is 100% secure, but we take reasonable steps to protect your information.
12. CHILDREN’S PRIVACY
Our Website is not intended for children under 16.
We do not knowingly collect children’s data.
13. THIRD-PARTY LINKS
Our Website may contain links to external sites.
We are not responsible for their privacy practices.
14. CHANGES TO THIS POLICY
We may update this Privacy Policy periodically.
We will post updates on this page with a new “Last Updated” date.
15. CONTACT US
VIBET BIO
Lagos, Nigeria
Email: privacy@vibetbio.com