Naijalegacy

Privacy Policy

Effective Date: 07 January 2026
Last Updated: 07 January 2026

Introduction

Naijalegacy (“we”, “us”, “our”) operates the website https://naijalegacy.com.ng/ (the “Website”). We are committed to protecting your privacy and personal data in full compliance with the General Data Protection Regulation (GDPR), the Nigeria Data Protection Regulation (NDPR) 2019, and all applicable data protection laws.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit and interact with our Website. Please read this policy carefully to understand our practices.

1. Data Controller and Contact Information

Data Controller: Naijalegacy
Email: info@naijalegacy.com.ng
Website: https://naijalegacy.com.ng/

For all privacy-related enquiries, requests, or concerns, please contact us using the details above.

2. Commitment to E-E-A-T and Data Protection

As part of our commitment to Google’s Experience, Expertise, Authoritativeness, and Trustworthiness (E-E-A-T) principles, we:

  • Operate with complete transparency regarding data practices
  • Implement robust security measures to protect your information
  • Respect your privacy rights under all applicable laws
  • Maintain the highest standards of data protection

3. Information We Collect

3.1 Information You Provide Directly

Contact Forms and Email Communication:

  • Full name
  • Email address
  • Message content
  • Any additional information you voluntarily provide

Newsletter Subscriptions (if applicable):

  • Email address
  • Name (if provided)
  • Subscription date and preferences

Comments (if enabled):

  • Name (or username)
  • Email address
  • Website URL (optional)
  • Comment content
  • IP address (collected automatically by WordPress)

Biography Suggestions:

  • Information about suggested subjects
  • Supporting sources or documentation you provide

3.2 Information Automatically Collected

When you visit our Website, we automatically collect:

Technical Information:

  • IP address
  • Browser type and version
  • Operating system
  • Device type (desktop, mobile, tablet)
  • Screen resolution
  • Internet Service Provider (ISP)
  • Time zone settings

Usage Data:

  • Pages visited and content viewed
  • Date, time, and duration of visits
  • Clickstream data and navigation paths
  • Referring website/source
  • Search queries on our site
  • Links clicked
  • Exit pages

Location Information:

  • Approximate geographic location (country, region, city) based on IP address

3.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies. See Section 7 for detailed information.

4. How We Use Your Information

We process your personal data for the following purposes:

4.1 Website Operation and Communication

  • To operate and maintain Website functionality
  • To respond to enquiries and communications
  • To provide requested services
  • To manage and moderate comments
  • To send administrative updates

4.2 Analytics and Improvement

  • To analyse visitor behaviour and Website usage
  • To monitor and improve Website performance
  • To understand user preferences
  • To identify technical issues
  • To optimise content and user experience

4.3 Marketing (with consent)

  • To send newsletters (only if you opt-in)
  • To inform you about new content
  • To share updates about featured biographies

4.4 Security and Legal Compliance

  • To protect against security threats and fraud
  • To detect and prevent spam and abuse
  • To comply with legal obligations
  • To enforce our terms and policies
  • To respond to legal requests

5. Legal Basis for Processing (GDPR)

Under GDPR Article 6, we process your personal data based on:

5.1 Consent (Article 6(1)(a) GDPR)

  • Newsletter subscriptions
  • Non-essential cookies
  • Marketing communications
  • Optional information sharing

You can withdraw consent at any time.

5.2 Legitimate Interests (Article 6(1)(f) GDPR)

  • Website analytics and improvement
  • Security and fraud prevention
  • Responding to enquiries
  • Operating and maintaining our Website

We balance our interests against your rights and freedoms.

5.3 Legal Obligation (Article 6(1)(c) GDPR)

  • Complying with Nigerian and EU laws
  • Responding to court orders
  • Meeting regulatory requirements

5.4 Contractual Necessity (Article 6(1)(b) GDPR)

  • Providing services you request

6. WordPress-Specific Data Processing

Our Website is built on WordPress, which processes data as follows:

6.1 Comments

When you post a comment:

  • Your name, email, website URL, and comment content are stored in our database
  • Your IP address and browser user agent are collected for spam detection
  • An anonymised hash of your email may be sent to Gravatar to display your profile picture
  • Comments are retained indefinitely unless you request deletion

6.2 Contact Forms

  • Data submitted is sent to our email address
  • May be temporarily stored depending on form plugins used
  • Not shared with third parties except to respond to your enquiry

6.3 WordPress Cookies

WordPress sets essential cookies:

  • wordpress_test_cookie – Checks if cookies are enabled
  • wordpress_logged_in_ – For authenticated users
  • wp-settings- – User interface customisation
  • wordpress_sec_ – Security cookie

These are necessary for functionality.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our Website. They help us provide better user experience and analyse site usage.

7.2 Types of Cookies We Use

Strictly Necessary Cookies:

  • Essential for Website functionality
  • Cannot be disabled without affecting performance
  • Include WordPress session and security cookies

Analytics Cookies:

  • Google Analytics cookies (see Section 8)
  • Help us understand visitor behaviour

Functionality Cookies:

  • Remember your preferences and settings

Advertising Cookies (if applicable):

  • May be used for Google AdSense or similar services
  • Track browsing for relevant ads

7.3 Cookie Duration

  • Session Cookies: Deleted when you close your browser
  • Persistent Cookies: Remain for specified periods (days to years)

7.4 Managing Cookies

Control cookies through your browser settings:

Browser Cookie Settings:

  • Chrome: Settings > Privacy and Security > Cookies
  • Firefox: Options > Privacy & Security > Cookies
  • Safari: Preferences > Privacy > Cookies
  • Edge: Settings > Cookies and Site Permissions

Cookie Consent Banner: When you first visit, you can:

  • Accept all cookies
  • Reject non-essential cookies
  • Customise preferences

Note: Disabling cookies may affect Website functionality.

8. Google Analytics

We use Google Analytics, provided by Google LLC, to analyse Website traffic and user behaviour.

8.1 Data Collected by Google Analytics

Google Analytics collects:

  • How you use our Website (pages viewed, time spent, interactions)
  • Device and browser information
  • Approximate location (country/city)
  • Referring websites and search terms

8.2 IP Anonymisation

We have enabled IP anonymisation (anonymizeIP). Your IP address is truncated/anonymised before processing, ensuring personal identification is impossible.

8.3 Google Analytics Cookies

  • _ga – Distinguishes unique users (expires after 2 years)
  • _gid – Distinguishes unique users (expires after 24 hours)
  • _gat – Throttles request rate (expires after 1 minute)

8.4 Data Retention

Google Analytics data is retained for 26 months, then automatically deleted.

8.5 Opting Out of Google Analytics

You can opt-out by:

8.6 Google’s Privacy Policy

For more information: https://policies.google.com/privacy

9. Other Google Services

We may use additional Google services:

9.1 Google Fonts

9.2 Google AdSense (if applicable)

9.3 Google reCAPTCHA (if applicable)

  • May use reCAPTCHA to protect forms from spam
  • Collects hardware/software information and browser data
  • Subject to Google’s Privacy Policy and Terms

9.4 YouTube Embedded Videos (if applicable)

10. Third-Party Services

Our Website may use third-party services:

Potential Services:

  • Email marketing platforms (e.g., Mailchimp)
  • Comment management systems (e.g., Akismet for spam filtering)
  • Social media sharing buttons
  • Content delivery networks (CDNs)
  • Security plugins

Each service has its own privacy policy. We encourage you to review them.

11. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information.

11.1 Service Providers

We may share data with trusted providers who assist with:

  • Website hosting
  • Email delivery
  • Analytics and monitoring
  • Security and spam prevention

These providers are contractually obligated to protect your data.

11.2 Legal Requirements

We may disclose information if required to:

  • Comply with legal obligations or court orders
  • Enforce our terms and conditions
  • Protect our rights, property, or safety
  • Prevent fraud or illegal activity

11.3 Business Transfers

If Naijalegacy is involved in a merger or acquisition, your data may be transferred. We will notify you of such changes.

12. International Data Transfers

Your information may be transferred to countries outside Nigeria, including:

  • European Union – For Google services (GDPR-compliant)
  • United States – For various service providers

When transferring data internationally, we ensure appropriate safeguards such as:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Privacy frameworks

13. Data Security

We implement comprehensive security measures:

Technical Measures:

  • SSL/TLS encryption for data transmission
  • Secure hosting infrastructure
  • Firewall protection
  • Regular security updates
  • Malware scanning
  • Intrusion detection
  • Encrypted databases
  • Secure backup systems

Organisational Measures:

  • Access controls (need-to-know basis)
  • Staff training
  • Confidentiality agreements
  • Incident response procedures
  • Vendor security assessments
  • Regular security audits

Limitations: No transmission or storage method is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Breach Notification: If a data breach occurs, we will:

  • Notify supervisory authorities within 72 hours (GDPR Article 33)
  • Inform affected individuals without undue delay (GDPR Article 34)
  • Detail the breach nature, consequences, and remedial measures

14. Data Retention

We retain personal data only as long as necessary:

Website Comments:

  • Retained indefinitely unless you request deletion

Contact Forms and Email:

  • Retained for up to 3 years or until resolved
  • Deleted earlier if no longer needed

Newsletter Subscriptions:

  • Retained until you unsubscribe
  • Deleted within 30 days of unsubscription

Analytics Data (Google Analytics):

  • Automatically deleted after 26 months

Technical Logs:

  • Retained for 90 days for security purposes

Cookie Data:

  • Duration varies by type (see Section 7.3)

Legal Records:

  • Retained as required by law (typically 6-7 years)

15. Your Rights Under GDPR and NDPR

You have comprehensive rights regarding your personal data:

15.1 Right to Access (GDPR Article 15, NDPR Section 8)

  • Request confirmation of data processing
  • Obtain a copy of your personal data
  • Receive information about processing

15.2 Right to Rectification (GDPR Article 16, NDPR Section 9)

  • Request correction of inaccurate data
  • Supplement incomplete information

15.3 Right to Erasure / “Right to be Forgotten” (GDPR Article 17, NDPR Section 10)

Request deletion when:

  • Data no longer necessary
  • You withdraw consent
  • You object and there are no overriding grounds
  • Data processed unlawfully
  • Legal obligations require deletion

Exceptions: Retention may be necessary for legal compliance or defending claims.

15.4 Right to Restriction of Processing (GDPR Article 18)

Request limitation when:

  • You contest data accuracy
  • Processing is unlawful
  • We no longer need data, but you need it for claims
  • You’ve objected (pending verification)

15.5 Right to Data Portability (GDPR Article 20)

  • Receive data in structured, machine-readable format
  • Transmit data to another controller
  • Applies to automated processing based on consent or contract

15.6 Right to Object (GDPR Article 21)

Object to processing based on:

  • Legitimate interests (we must show compelling grounds)
  • Direct marketing (absolute right)
  • Profiling

15.7 Right to Withdraw Consent (GDPR Article 7(3))

  • Withdraw consent anytime
  • Doesn’t affect lawfulness before withdrawal
  • Easy mechanisms provided (unsubscribe links)

15.8 Right to Lodge a Complaint (GDPR Article 77)

File complaints with supervisory authorities:

Nigeria:

European Union:

15.9 How to Exercise Your Rights

Contact Us: Email: info@naijalegacy.com.ng

Include:

  • Your full name and contact information
  • Specific right(s) you wish to exercise
  • Details to help locate your data
  • Proof of identity

Response Time:

  • We respond within 30 days
  • Complex requests may require up to 60 days
  • We inform you of any delay

No Fee:

  • Exercising rights is free
  • Reasonable fee for manifestly unfounded or excessive requests

16. Children’s Privacy

16.1 Age Restrictions

Our Website is not directed at children under 16 years of age.

16.2 No Knowing Collection

We do not knowingly:

  • Collect data from children under 16
  • Target content to children
  • Encourage children to provide information

16.3 Parental Notice

If you believe your child has provided personal data:

  • Contact us immediately at info@naijalegacy.com.ng
  • We will investigate and delete promptly
  • Provide details to help identify the data

17. External Links and Third-Party Websites

17.1 Links to Other Sites

Our Website may link to external websites including:

  • Source citations
  • Related content
  • Social media platforms
  • Partner websites

17.2 No Responsibility

We:

  • Do not control third-party sites
  • Are not responsible for their privacy practices
  • Do not endorse external websites
  • Cannot guarantee accuracy or safety

17.3 Review External Policies

Before providing information to external sites:

  • Review their privacy policies
  • Understand their data practices
  • Make informed decisions

18. Automated Decision-Making and Profiling

18.1 Limited Automated Processing

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you.

18.2 Analytics Only

Automated tools used for:

  • Website analytics (visitor behaviour)
  • Content recommendations (related biographies)
  • Spam filtering (comment protection)

These don’t constitute profiling under GDPR Article 22.

18.3 Future Changes

If we implement automated decision-making:

  • We will provide clear notice
  • You’ll have the right to human intervention
  • You can express views and contest decisions

19. Changes to This Privacy Policy

19.1 Right to Modify

We may update this Privacy Policy to reflect:

  • Changes in data practices
  • New legal requirements
  • New features or services
  • Industry best practices

19.2 Notification of Changes

For material changes:

  • Update “Last Updated” date
  • Provide prominent Website notice
  • Send email notification (where applicable)
  • Request renewed consent if legally required

For minor changes:

  • Update “Last Updated” date
  • Changes effective upon posting

19.3 Continued Use

Continued Website use after changes constitutes acceptance of updated policy.

19.4 Review Periodically

We encourage you to:

  • Review this policy regularly
  • Check “Last Updated” date
  • Contact us with questions

20. Transparency and Accountability

20.1 Our Commitment

We are committed to:

  • Transparency: Clear communication about practices
  • Accountability: Taking responsibility for data protection
  • Compliance: Adhering to all applicable laws
  • Continuous Improvement: Regularly enhancing practices

20.2 Data Protection Impact Assessments

We conduct DPIAs for:

  • New processing activities
  • High-risk operations
  • Significant processing changes

20.3 Records of Processing

We maintain detailed records of processing activities as required by GDPR Article 30.

20.4 Data Protection by Design

We implement data protection principles:

  • Minimising data collection
  • Pseudonymisation and encryption
  • Ensuring confidentiality and integrity
  • Regular security testing

21. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy:

Email: info@naijalegacy.com.ng
Website: https://naijalegacy.com.ng/
Subject Line: Privacy Enquiry / Data Protection Request

What to Include:

  • Your full name and contact information
  • Nature of enquiry or request
  • Specific details (dates, pages, etc.)
  • Supporting documentation

Our Commitment:

  • Acknowledge receipt within 2 business days
  • Substantive response within 30 days
  • Complex matters may require additional time
  • All enquiries treated confidentially

22. Consent and Acknowledgement

By using Naijalegacy, you acknowledge that:

✓ You have read and understood this Privacy Policy
✓ You understand how we collect, use, and protect your data
✓ You consent to processing as described herein
✓ You are at least 16 years of age
✓ You understand your rights under data protection laws
✓ You can withdraw consent or exercise rights at any time

Thank you for trusting Naijalegacy with your personal information. We are committed to protecting your privacy, respecting your rights, and maintaining the highest standards of data protection.

For any concerns, please contact us at info@naijalegacy.com.ng