Privacy Notice
This Notice explains what personal data CAB collects when you use cryptoassetbuyer.com, why we collect it, how we protect it, who we share it with, and the rights you have under Nigerian data protection law.
1. Who we are
CAB is a regulatory and business intelligence publication covering Africa’s digital asset economy, published at cryptoassetbuyer.com (the “Site“). The Site is owned and operated by 123 Ideas Ltd (“CAB“, “we“, “us“, “our“), a company registered in Nigeria, which is the data controller responsible for your personal data under the Nigeria Data Protection Act 2023 (the “NDPA“).
For any question about this Notice or your data, contact us at privacy@cryptoassetbuyer.com.
2. Scope of this Notice
This Notice applies to personal data we process about readers, subscribers, contributors, commercial partners, event participants and other users of the Site. It should be read with our Terms and Conditions and Ethical Policy.
It does not apply to third-party websites we link to, which have their own privacy practices (section 7), nor to information you choose to make public, such as a comment you post.
3. What we collect
We collect only what we need. Depending on how you use the Site, that may include:
| Category | Examples |
|---|---|
| Contact data | Name, email address, and organisation where you provide them — for newsletters, enquiries, contributions or partnerships. |
| Account data | Where accounts are offered: username, password (stored hashed), and preferences. |
| Correspondence | The content of emails, tips, submissions and enquiries you send us, and our replies. |
| Contributor data | For published contributors: byline, biography, author image, and disclosed interests. |
| Partner data | For commercial partners: business contact details, billing information, and the details needed to deliver an agreement. |
| Usage data | Pages viewed, links clicked, referring page, approximate location, device and browser type — generally in aggregated or pseudonymised form. |
| Technical data | IP address, and identifiers set by cookies and similar technologies (section 6). |
| Comment data | Where comments are enabled: the name, email and content you submit, and associated metadata. |
We do not deliberately collect sensitive personal data (such as data revealing health, religion, or political opinions) and ask that you do not send it to us unless necessary, for example when it is intrinsic to a story you are reporting to us as a source.
4. How we collect it
- Directly from you — when you subscribe, register, comment, contribute, enquire, enter a partnership, or otherwise correspond with us.
- Automatically — when you use the Site, through cookies, analytics and server logs (sections 6 and 7).
- From third parties — for example our email, analytics and advertising providers, and publicly available professional sources where we verify a contributor or partner.
5. Why we use it, and our lawful basis
Under the NDPA we must have a lawful basis for each use of your data. Ours are:
| Purpose | Lawful basis |
|---|---|
| Publishing journalism and operating the Site | Legitimate interest, and the NDPA’s provisions for processing for journalism and freedom of expression. |
| Sending newsletters and communications you request | Your consent, which you may withdraw at any time. |
| Responding to enquiries, tips and correspondence | Legitimate interest in answering you, and, for sources, journalism. |
| Managing contributor and partner relationships | Performance of a contract, or steps taken at your request before a contract. |
| Billing, records and legal compliance | Legal obligation, and our legitimate interest in keeping proper records. |
| Understanding and improving readership in aggregate | Legitimate interest; analytics cookies are set on the basis of your consent. |
| Advertising, where shown | Consent for advertising cookies; legitimate interest for the sale of non-targeted placements. |
| Protecting the Site and preventing abuse | Legitimate interest in security and integrity. |
Where we rely on legitimate interest, we have balanced it against your rights and only rely on it where yours are not overridden. You may object — see section 12.
7. Third parties and processors
We use reputable service providers to run the Site. Each processes data only on our instructions or under its own notice, as indicated. They include, at present:
| Provider | Purpose |
|---|---|
| Web hosting and CDN | Serving the Site and storing its data securely. |
| Google (Analytics / Site Kit) | Aggregate audience measurement. Governed by Google’s privacy policy. |
| Google (AdSense), where ads are shown | Serving and measuring advertising. Governed by Google’s advertising and privacy policies. |
| Email / newsletter platform | Sending communications you have requested and measuring their delivery. |
| Payment processor, for paid products | Processing payments. We do not store full card details. |
| Social platforms | Where you follow, share or interact via Facebook, X, Telegram or LinkedIn, under their own policies. |
This list may change as our providers do. We will keep it current here rather than notify each change individually.
9. International transfers
Some of our providers are located outside Nigeria, so your data may be transferred to and processed in other countries. Where we transfer personal data outside Nigeria, we do so in accordance with the NDPA — to a jurisdiction with adequate protection, or under appropriate safeguards such as contractual protections, or on another lawful basis. You may ask us for details of the safeguards that apply.
10. How long we keep data
We keep personal data only as long as necessary for the purpose it was collected, then delete or anonymise it. In practice:
- newsletter data — until you unsubscribe, then a short suppression record so we do not contact you again;
- enquiry and correspondence data — for as long as needed to deal with the matter and a reasonable period after;
- contributor and partner records — for the relationship and the period required for tax, accounting and legal purposes;
- analytics data — in aggregated or pseudonymised form, per our providers’ retention settings;
- published contributions and bylines — retained as part of the permanent record, as journalism.
11. How we protect data
We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, hashed passwords, and limiting access to those who need it. No system is perfectly secure, and we cannot guarantee absolute security, but we take our obligations seriously and keep our measures under review.
12. Your rights
Under the NDPA you have the right to:
- be informed about how we use your data — this Notice;
- access the personal data we hold about you;
- rectify data that is inaccurate or incomplete;
- erase your data where there is no overriding reason to keep it;
- restrict or object to certain processing, including direct marketing and processing based on legitimate interest;
- withdraw consent at any time, without affecting prior processing;
- data portability — to receive certain data in a portable format;
- lodge a complaint with the Nigeria Data Protection Commission.
These rights have limits. In particular, they are qualified where your data is processed for journalism and freedom of expression, where an unqualified right would undermine reporting or the protection of sources. To exercise any right, write to privacy@cryptoassetbuyer.com. We will respond within the timeframe the NDPA requires and may need to verify your identity first.
13. Your choices and controls
- Newsletters — unsubscribe using the link in any email.
- Cookies — change your consent via the Site’s cookie settings, or your browser.
- Advertising — where ads are shown, you can manage ad personalisation through your Google Ad Settings and industry opt-out tools.
- Comments — you choose what to post; you may ask us to remove a comment you made.
14. Children’s data
The Site is intended for professional and adult readers and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.
15. Sources and confidential information
Protecting sources is fundamental to journalism. Where you contact us as a confidential source, we will handle your information in accordance with our editorial standards and take care to protect your identity. We will resist disclosure of source-identifying data to the fullest extent the law permits. Please note that no method of transmission is perfectly secure; if a matter is highly sensitive, ask us about a secure channel before sending.
16. Data breaches
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission, and affected individuals where required, within the timeframes and in the manner the NDPA requires.
17. Changes to this Notice
We may update this Notice as our practices, providers or the law change. The version in force is the one published here, with its effective date. Material changes will be reflected in an updated effective date and, where appropriate, flagged on the Site. Please check back periodically.
18. How to contact us and complain
Data controller: 123 Ideas Ltd, Lagos, Nigeria.
Privacy enquiries and rights requests: privacy@cryptoassetbuyer.com
General: hello@cryptoassetbuyer.com
If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC), the supervisory authority for data protection in Nigeria. We would, however, appreciate the chance to address your concern before you approach the Commission.