Privacy Policy

This Privacy Policy applies to Square Digitals (squaredigitals.com.ng). We are committed to protecting your personal data in accordance with the Nigeria Data Protection Regulation (NDPR) 2019, the Nigeria Data Protection Act (NDPA) 2023, and the General Data Protection Regulation (GDPR) where applicable.

1. Who We Are

Square Digitals is a digital marketing agency based in Lagos, Nigeria. We provide web design, web development, SEO, and digital marketing services to businesses across Nigeria and internationally.

Data Controller: Square Digitals Email: [email protected] Address: Lagos, Nigeria

For all data protection enquiries, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following circumstances:

2.1 Information you provide directly: • Full name and contact details (email address, phone number) when you submit a contact or enquiry form • Business name and details when you engage our services • Payment information processed through secure third-party payment providers • Communications you send us via email or our website

2.2 Information collected automatically: • IP address and browser type • Pages visited on our website, time spent, and referral sources • Cookie data (see Section 6) • Device and operating system information

2.3 Information from third parties: • Business contact information sourced from publicly available platforms for marketing purposes (processed in compliance with NDPR/GDPR legitimate interests provisions)

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and provide the services you have requested • To send you service proposals, quotes, and project communications • To process payments for services rendered • To send you marketing communications where you have given consent or where we have a legitimate interest to do so • To improve our website, services, and user experience through analytics • To comply with legal obligations under Nigerian law and applicable international regulations • To detect and prevent fraud or abuse of our services

Legal Basis for Processing (NDPR/GDPR): • Contract performance — when processing is necessary to fulfil a service agreement • Legitimate interests — for business communications and website analytics • Consent — for marketing communications (you can withdraw at any time) • Legal obligation — where required by Nigerian law or regulation

4. How We Share Your Data

Square Digitals does not sell your personal data. We may share your data in the following circumstances:

• Service providers: We share data with trusted third-party service providers who assist us in delivering our services (e.g., web hosting providers, email platforms, analytics tools). These providers are contractually obligated to protect your data. • Payment processors: Payment information is processed by PCI-DSS compliant third-party payment processors. We do not store card details. • Legal compliance: We may disclose your data where required by Nigerian law, court order, or regulatory authority. • Business transfers: In the event of a merger or acquisition, your data may be transferred to a successor entity, and you will be notified.

We require all third parties to handle your data securely and in accordance with applicable data protection laws.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

• Enquiry and contact data: 24 months from last contact • Client project data: 5 years from project completion (for legal and financial compliance) • Marketing consent records: Until withdrawal of consent plus 12 months • Website analytics data: 26 months (Google Analytics standard)

When data is no longer required, we securely delete or anonymise it.

6. Cookies

Our website uses cookies to improve your experience and analyse site usage. Types of cookies we use:

• Essential cookies: Required for the website to function (session management, security). Cannot be disabled. • Analytics cookies: We use Google Analytics to understand how visitors use our site. This data is aggregated and anonymised. • Marketing cookies: Used to deliver relevant content and track campaign effectiveness. Only set with your consent.

You can control cookies through your browser settings. Disabling non-essential cookies will not affect your ability to use our website. By continuing to use our website, you consent to our use of cookies as described above.

7. Your Rights

Under the NDPR 2019, NDPA 2023, and GDPR (where applicable), you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you • Right to rectification: Request correction of inaccurate or incomplete data • Right to erasure: Request deletion of your personal data (the 'right to be forgotten') • Right to restrict processing: Request that we limit how we use your data • Right to data portability: Receive your data in a portable format • Right to object: Object to processing based on legitimate interests or for direct marketing • Right to withdraw consent: Withdraw marketing consent at any time without penalty

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• SSL/TLS encryption for all data transmitted through our website • Secure, access-controlled hosting infrastructure • Regular security audits and vulnerability assessments • Staff training on data protection best practices • Incident response procedures in case of a data breach

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant regulatory authority within the legally required timeframe.

9. International Data Transfers

Some of our service providers (such as Google Analytics, email platforms, and cloud hosting services) may process data outside of Nigeria. Where data is transferred internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions where applicable.

We will not transfer your data to countries that do not provide an adequate level of data protection without your explicit consent.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at [email protected] and we will take steps to delete it.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of any third-party site you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the 'Last updated' date at the top of this page and, where appropriate, notify you by email.

We encourage you to review this policy periodically.

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or our data handling practices:

Square Digitals Email: [email protected] Address: Lagos, Nigeria

We take all data protection enquiries seriously and will respond within 30 days.