CADA sandbox
Privacy notice
Basmu is the controller for personal data collected through the CADA sandbox. We process it to provide sandbox access, understand product engagement, and follow up about CADA or a requested private evaluation. Our lawful basis under the Nigeria Data Protection Act 2023 is consent where requested and our legitimate interest in providing and improving this business evaluation service.
What we store
- Name, work email, company, role and evaluation interest in a restricted local log and Cloudflare D1 intake store.
- A pseudonymous visitor identifier and allowlisted sandbox-stage events in Cloudflare D1, when the hosted analytics service is available.
- An optional evaluation note in the restricted lead record. Do not include case content.
Nothing typed into analyst decision or report fields is transmitted. Those fields remain in your browser. We do not use third-party session replay, sell sandbox data, or accept case-file uploads through the public sandbox.
Retention and deletion
Central Cloudflare intake records are retained for up to 12 months and usage events for up to 90 days. HubSpot CRM records are held for follow-up until reviewed or deleted under our CRM retention process. The sandbox session cookie expires after eight hours. To request access, correction or deletion, email amukhtar@basmu.xyz. Local access logs must also be included in any verified deletion.
International services
Cloudflare, Zoho and HubSpot act as service providers. Registration and evaluation requests are stored first and queued for HubSpot CRM delivery. Optional HubSpot page-view tracking begins only if you allow analytics cookies. Access is restricted to authorized Basmu personnel and service identities. We apply appropriate contractual, access-control and security safeguards.