Privacy Notice
Effective June 9, 2026 · Last updated June 5, 2026
How TSG handles your personal data when you use our website and the products built under TSG Labs.
1. Introduction
The Stack Group Limited ("TSG", "we", "our") is the parent company of Paystack, functioning as a family of ventures building the technology to power African ambition. TSG operates a number of products under the TSG Labs incubator. This notice explains what personal data we collect when you use our website, why we collect it, how we protect it, and the rights you have.
2. Terms of use
Using TSG products requires acceptance of the various Terms of Use. The Terms describe each service, whereas this Notice describes how we process the personal data collected through the website.
3. The data we process
Personal data is any information about an individual that can be used to identify that person, either directly or indirectly. For example, when using our products or websites, we may request personal information to contact or identify you, and some information may be collected automatically to allow our Platform to function properly. We also collect personal data from third-party sources or through your use of our services. Please refer to individual privacy notices for more information on personal data processed through our products and services.
We collect the following information directly from you through our website:
- Name, email address, skill (competency and soft skills), curriculum vitae, and associated personal data.
We do not currently use any cookies or tracking technologies. Should this change, the Privacy Notice will be updated accordingly as per Section 13.
4. Lawful bases and purposes of processing
We process your personal data on the following lawful bases:
| Purpose of processing | Lawful bases |
|---|---|
| To help us develop, improve, customise or restructure our services, including through survey outreach. To enforce our Terms of Service and any terms and conditions of any other agreements for our services. | Legitimate interest, contract |
| To assess your eligibility for recruitment and hiring purposes. | Contract |
| To send you marketing or promotional messages. To send you waitlist updates as per your request. | Consent |
| To collect aggregated statistical data and analytics for internal use. To send you mandatory service-related messages. To analyse Application or Platform usage and provide, maintain and improve the content and functionality of our Application/Platform. | Legitimate interest |
| To secure our Application or Platform and prevent fraud. | Legitimate interest, legal obligation |
| To manage your accounts related to TSG Labs products. To provide services to you. To send you important updates and information about the service, and to provide customer support when you need help. To send you important updates and information when you opt-in for any of our programs (e.g. a referral program). | Contract |
| To interact with regulatory authorities or other public authorities concerning your use of our Platform. To fulfil relevant Know Your Customer (KYC) obligations, where relevant. To inform you of any changes to our terms of business, services, or our Privacy Notice. | Legal obligation |
5. Your rights as a data subject
The law vests you with certain rights as a data subject. They include the right to:
- Access personal data we hold about you by requesting a copy.
- Rectify such information where you believe it to be inaccurate.
- Restrict the processing of your data in certain circumstances.
- Object to the processing of your data where we intend to process such data for marketing purposes.
- Where feasible, receive a copy of the personal data you have provided to us — in a structured, commonly used, and machine-readable format — and transmit the information to another data controller.
- Request the erasure of your data.
- Withdraw your consent to processing your data — in some instances, this can be done by opting out of certain communications.
- Lodge a complaint with the data protection authority where you have reason to believe we have violated this Privacy Notice (you may complain or seek redress from us within 30 days from when you first detected the alleged violation).
You may seek to exercise any of the above rights at any time by emailing us at privacy@tsglabs.com. We respond within 30 days.
6. Who we share your data with
We share data only with the parties needed to deliver the service:
| Service providers | Purpose of processing |
|---|---|
| Paystack Payments Limited | We use various Paystack products to provide streamlined service offerings, such as leveraging Zap customers when processing payments. |
| Legal and regulatory authorities | We may disclose personal data to these bodies if necessary to comply with a law, regulation, order, subpoena, or audit, or to protect any person's safety or to address fraud, security, or technical issues. |
All data processors and third-party service providers are bound by data processing agreements. We do not sell your data to anyone.
7. Retention
The data and any other information we collect from you will be stored for as long as necessary to fulfil the purposes described in this Notice. However, we will also retain data in line with applicable laws, as well as to resolve disputes, prevent fraud and abuse, and enforce our legal agreements and policies.
We will delete your data related to marketing purposes once you unsubscribe from our marketing communications by following the steps in Section 10 of this Notice.
For more information on our retention practices, email privacy@tsglabs.com.
8. How we protect your data
We use strong technical and organisational measures to safeguard your data from unauthorised access or accidental loss. We adhere to data protection laws and best practices, implementing security protocols such as encryption, firewalls, and physical access controls. Our employees only access your data when necessary and are contractually bound to maintain its confidentiality.
If there is a data breach that could harm your rights and freedoms, we will notify you promptly and take all necessary steps to resolve the issue.
We monitor for incidents continuously. If a breach occurs that's likely to affect your rights, we notify the relevant data protection authority and you within 72 hours, per applicable law.
9. International transfer of data
Our services involve using third-party servers in other countries, such as Index's use of Supabase servers in the European Union. This means your data is transferred abroad. We ensure your data is processed and protected in accordance with this Notice and relevant laws, regardless of location.
When transferring data outside your country of residence, we take extra steps to protect it and choose reliable third parties. Please contact us for more information about data transfers to third countries, including our transfer methods. Furthermore, we transfer data when we have a legal obligation to do so, need to establish or defend a legal claim, or have a public interest obligation.
10. Marketing and communications
We only send marketing communications to you with your consent. You may opt out of our marketing or object to further processing by clicking on the 'unsubscribe' button at the bottom of any communication. You can also unsubscribe from any newsletters we share with you at any time by clicking the 'unsubscribe' button.
11. Children
TSG products and services are not directed at children under 18. We do not knowingly collect data from children. If we learn we have, we delete it.
12. Complaints
If you are concerned about an alleged breach of data protection law or any other regulation by us, you can contact the Data Protection Officer (DPO) at privacy@tsglabs.com. The DPO will investigate your complaint and provide information about how it is handled.
If you are still unsatisfied with the resolution of your complaint, you may escalate this to your local Data Protection Authority.
13. Changes to this Notice
We occasionally update our privacy notice. We will notify our users when we make a change, and they will know this by checking the last update date on this page whenever they visit.
14. Contact us
If you have any questions relating to this Notice or your rights under this Notice or are not satisfied with how we manage your data, kindly reach out to our privacy team at privacy@tsglabs.com.