Privacy Policy

Introduction

Brandsassist Nigeria Ltd ("Brandsassist", "we", "us" or "our") is a communications, PR/marketing and digital experiences agency based in Lagos, Nigeria. We respect your privacy and are committed to protecting the personal data you share with us.

This policy explains what personal data we collect when you visit brandsassist.com.ng or contact us, why we collect it, how we keep it safe and the rights you have. It applies to visitors, prospective clients, clients and anyone who communicates with us through this website.

NDPR compliance

This website is NDPR compliant. We process personal data in accordance with the Nigeria Data Protection Regulation 2019 (NDPR), the Nigeria Data Protection Act 2023 (NDPA) and the guidance of the Nigeria Data Protection Commission (NDPC). Brandsassist Nigeria Ltd is the data controller for personal data collected through this website.

Information we collect

We only collect what we need. Depending on how you use the site, this may include:

• Contact details you give us, such as your name and email address, when you use our contact form or email us.
• The content of your message and any information you choose to include about your organisation or project.
• Your email address when you sign up to stay connected through the newsletter form.
• Technical data such as browser type, device type, pages visited and approximate location derived from your IP address — collected only if you accept analytics cookies.

How we use your information

• To respond to your enquiries and provide the services you request (lawful basis: steps prior to entering a contract).
• To send you updates and insights you have asked to receive (lawful basis: consent, which you can withdraw at any time).
• To understand how our website is used and improve it (lawful basis: consent, through our cookie banner).
• To keep our website secure and prevent misuse (lawful basis: legitimate interest).
• To comply with our legal and regulatory obligations (lawful basis: legal obligation).

Sharing your information

We do not sell, trade or rent your personal data. We share it only with trusted service providers that help us run this website and respond to you, under written agreements that require them to protect your data:

• Vercel Inc. — website hosting and privacy-friendly, cookieless analytics.
• Resend — secure delivery of contact form and newsletter emails to our team.
• Professional advisers or authorities where required by law.

International transfers

Some of our service providers process data outside Nigeria. Where this happens, we rely on the adequacy and safeguard mechanisms recognised under the NDPA, such as standard contractual clauses, to ensure your data remains protected to Nigerian standards.

How long we keep your data

We keep enquiry correspondence for up to 24 months after our last interaction, client records for as long as required by law (typically six years for financial records), and newsletter details until you unsubscribe. When data is no longer needed it is securely deleted or anonymised.

How we protect your information

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. These include encrypted connections (HTTPS), restricted access to staff who need it, and vetted service providers. No method of transmission over the internet is completely secure, but we work hard to protect your data.

Your rights

Under the NDPR and NDPA you have the right to:

• Be informed about how your personal data is used.
• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data, or restrict how we use it.
• Object to processing and withdraw consent at any time.
• Receive your data in a portable format.
• Lodge a complaint with the Nigeria Data Protection Commission (ndpc.gov.ng).

Cookies

We use a small number of cookies and similar technologies. Full details, and how to change your choice, are in our cookie policy at brandsassist.com.ng/cookie-policy.

Children's privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children under 18. If you believe a child has shared data with us, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with the date it was last updated. Significant changes will be highlighted on our website.