Privacy policy
Last updated 28 September 2026
This policy explains how Cadre ("we", "us") handles personal data when you visit cadrepeople.com or contact us. It is written for the Nigeria Data Protection Act 2023 (the NDPA) and the General Application and Implementation Directive issued under it.
It does not cover the data employers and agencies put into the Cadre product about their own people. For that data the employer is the data controller and we process it on their instructions; see our data processing page.
Who we are
The data controller for this website is Noddit Technology Limited, RC 7761794, [TO CONFIRM: registered address]. You can reach us about privacy at privacy@cadrepeople.com.
What we collect
- When you ask us to get in touch (the Talk to us form, email or phone): your name, organisation, work email, phone number, whether you are an employer, agency or employee, roughly how many people you pay and how many clients you have, and anything you choose to tell us.
- When you visit the website: our hosting provider keeps technical records of each request, such as your IP address, browser and the page asked for, to run and protect the site.
We do not use advertising or analytics cookies, and we do not track you across other websites. See our cookie notice.
Why we use it, and the lawful basis
- To reply to you and arrange a walkthrough, on the basis of your consent, which you give when you send the form. You can withdraw it at any time.
- To follow up a sales conversation you started, on the basis of our legitimate interest in answering businesses that asked about Cadre.
- To keep the website running and secure, on the basis of our legitimate interest in protecting it.
We do not sell your data, and we do not use it for automated decisions about you.
Who we share it with
- HubSpot, our customer relationship system, which stores enquiries sent through the form.
- Our website hosting provider, which serves the site and keeps its technical records.
- Our email provider, when you write to us.
Each acts on our instructions under a written agreement. Some of them store data outside Nigeria, including in the United States. Where data leaves Nigeria we rely on the safeguards the NDPA allows, such as contractual protections, and we transfer only what the service needs.
How long we keep it
- Enquiries that do not become customers: 24 months after our last contact, then deleted.
- Enquiries that become customers: for as long as we have a business relationship, and then as the law requires.
- Hosting records: as long as the provider keeps them for security, usually no more than 30 days.
Your rights
Under the NDPA you may ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct it if it is wrong;
- delete it;
- restrict or object to how we use it;
- give it to you, or to someone else, in a common machine-readable format;
- stop contacting you, at any time, by withdrawing your consent.
Write to privacy@cadrepeople.com. We will reply within 30 days. If you are not satisfied with our answer, you may complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
Security
We protect personal data with access controls, encryption in transit and limits on who can see enquiries. No system is perfectly secure; if a breach puts your rights at risk, we will tell you and the Commission as the NDPA requires.
Children
This website is for businesses. We do not knowingly collect data from anyone under 18.
Changes
We will update this page when our practices change and show the date of the latest version at the top.