Privacy Statement
Last updated: 28 October 2026
Who we are
This website (MadamQA) is run by Matachi Ononuju, based in Nigeria. I am the “data controller” for any personal information you share here, which means I decide how it is used and I’m responsible for keeping it safe. Questions about your data? Email the.madam.qa@gmail.com.
The short version
I only collect what you choose to give me, I only use it for the reason you gave it, and I never sell it. Analytics only runs if you say yes.
What I collect, and why
| When you… | I collect | Why | Where it’s stored |
|---|---|---|---|
| Join the MadamQA Newsletter — on Substack, or by ticking the box on the mentorship form | Your email address (and anything you add to your Substack profile) | To send you the newsletter | Substack (newsletter platform) |
| Request my CV or speaker kit | Your name, email address, and any note you add | To send you my CV or speaker kit and reply to your note | Formspree (form service), then my email inbox |
| Apply for MadamQA's 1:1 Mentorship | Your name, email address, employment status, country, QA experience level, and your consent | To review your application, contact you about the mentorship programme and other MadamQA programs, and send you the newsletter | Brevo (email and contact platform); your email address is also copied to Substack for the newsletter |
| Email me directly | Your email address and whatever you write | To reply to you | My email inbox (Gmail) |
| Say yes to analytics cookies | How you use the site — clicks, scrolling, mouse movement, pages visited — plus device type, browser, and approximate location (from your IP address) | To see what's working on the site and fix what isn't | Microsoft Clarity |
Signing up for the newsletter
The newsletter pop-up and buttons on this site take you to my newsletter’s page on Substack, in a new tab. Signing up happens on Substack’s website, under Substack’s own Privacy Policy and cookies.
If you tick the consent box on the mentorship form, I add your email address to the newsletter on Substack myself, so you don’t need to sign up twice. You can unsubscribe with the link in any newsletter email.
Analytics (Microsoft Clarity)
If you click “Sure, test away”on the cookie banner, the site uses Microsoft Clarity to understand how visitors use it. Clarity creates session recordings (a replay of clicks, scrolling and mouse movement) and heatmaps (which parts of a page get the most attention). It hides anything you type into forms, so it doesn’t see what you enter. If you click “No thanks”, Clarity never loads.
Legal basis
I rely on your consent(newsletter, where you subscribe or tick the box on the mentorship form; mentorship and analytics cookies, where you tick a box or click “Sure, test away”) and on your request(CV and speaker-kit requests and emails, where you ask me to do something). You can withdraw consent at any time — see “Your rights” below.
Cookies and browser storage
Saved in your browser’s local storage (not cookies — this never leaves your device):
- your light/dark theme choice
- whether the newsletter pop-up has been shown recently (so it doesn’t appear more than once every 14 days)
- your cookie choice and when you made it (so the banner doesn’t ask again for 6 months).
Cookies — only if you click “Sure, test away”:
_clck— Microsoft Clarity, recognises you across visits (up to 1 year)_clsk— Microsoft Clarity, links page views into one visit (up to 1 day)MUID— set by Microsoft on its own domain, used by Clarity (up to 1 year)
Changing your mind: use the “Change cookie choice” button below. If you switch analytics off, the site stops Clarity and deletes the _clck and _clsk cookies. MUIDbelongs to Microsoft’s domain, so the site can’t delete it — you can clear it in your browser’s settings.
Who else sees your data
Only the services listed above, which process it on my behalf: Substack, Brevo, Formspree, Google, and Microsoft (Clarity, only if you accept analytics). Some of these companies store data outside Nigeria and the UK (for example in the EU or the US). Brevo is based in France (EU). Substack, Formspree, Google and Microsoft are based in the US, so your data may be processed there. These transfers are protected by Standard Contractual Clauses and/or the EU–US Data Privacy Framework, as set out in each provider’s data processing terms. I never sell, rent, or share your data for anyone else’s marketing.
How long I keep it
I only keep your information for as long as I need it:
- Newsletter: until you unsubscribe, then you’re removed from the list straight away. This includes sign-ups through the mentorship form.
- CV and speaker-kit requests and emails: deleted after 12 months.
- Mentorship applications: deleted 6 months after the cohort you applied for ends, unless you join the programme.
- Analytics: kept by Microsoft Clarity under Microsoft’s own retention rules (session recordings are typically kept for around 30 days).
You can ask me to delete your data sooner at any time.
Your rights
Under Nigeria’s Data Protection Act 2023 (NDPA), the NDPA General Application and Implementation Directive (GAID) 2025, and the UK and EU GDPR, you can:
- ask for a copy of the data I hold about you
- ask me to correct it
- ask me to delete it
- ask me to limit how I use it while a concern is being sorted out
- ask for your data in a format you can move to another service
- withdraw your consent at any time (e.g. unsubscribe from the newsletter with the link in any email, or switch off analytics with the "Change cookie choice" button on this page)
- object to how it's used
Email the.madam.qa@gmail.com and I’ll respond within 30 days.
If you’re unhappy with how your data has been handled, you can complain to the Nigeria Data Protection Commission (NDPC) or, in the UK, the Information Commissioner’s Office (ICO), or your local data protection authority if you’re in the EU.
If something goes wrong
If a data breach affects your information, I’ll let you know and notify the Nigeria Data Protection Commission (NDPC) and any other relevant regulator as required by law.
Children
This site isn’t aimed at children. Please don’t submit any forms if you’re under 18.
Changes to this statement
If anything here changes, I’ll update this page and the “Last updated” date at the top.