Available Lagos --:-- WAT Start a project
Approach Services Process Prices Samples Rebuilds About Contact

hello@zigna.com.ng

Legal

Privacy policy

What personal data we collect, why, how long we keep it and what your rights are. This policy follows the EU General Data Protection Regulation (GDPR) and Nigeria's Data Protection Act 2023 (NDPA).

1. Who is responsible

The controller for your personal data is Olutobi Ogunsola, trading as Zigna HQ, 13 Akinyemi Street, Alapere, Lagos, Nigeria. Email: hello@zigna.com.ng. Write to this address for any question about your data or to use any of your rights.

2. The short version

  • No advertising and no ad tracking. We count visits anonymously, without cookies, so we know whether the site is useful.
  • We set no cookies ourselves.
  • We only collect what you send us and what our hosting needs to deliver the site.
  • We never sell personal data.

3. Visiting this website

This site is hosted by Netlify, Inc. (USA). To deliver pages and keep the service secure, Netlify processes technical data about each request: your IP address, the date and time, the page requested, your browser and operating system, and the referring page. Netlify keeps these server logs for a short period set by its own policies.

Legal basis: our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR, and the corresponding legitimate-interest basis in the NDPA).

4. Visit statistics (PostHog)

To see how many people visit, which pages they read and whether they reach the contact form, we use PostHog, provided by PostHog Inc. (USA), with data stored on its EU servers in Frankfurt, Germany. When you open a page, PostHog receives the page address, the referring page, the campaign name in links from our emails (for example /r/therapy), your browser, device type and screen size, approximate location derived from your IP address, and which sections you scrolled to, links you clicked and whether you started or sent a form. It never receives what you type into a form.

PostHog runs in cookieless mode: nothing is stored on your device, and visits are counted with a server-side hash of your IP address and browser that changes every day, so we can't recognise you on a later day and don't build a profile of you. There are no session recordings.

Legal basis: our legitimate interest in understanding whether this website works for its visitors (Art. 6(1)(f) GDPR, and the corresponding legitimate-interest basis in the NDPA). You can object at any time by writing to us; blocking scripts in your browser also stops it.

How long: event data is deleted after 12 months.

5. Settings stored in your browser

We use your browser's storage, not cookies, for three small settings: whether you switched the background music off (kept until you clear your browser data), and, for the current visit only, whether you have already seen the intro and where the music was playing. This data never leaves your device. Storing it is necessary to give you the features you use, so no consent is needed for it.

6. Contact forms

When you use a form on this site, we receive your name, email address, website address (if you give one) and your message. Netlify stores the submission and forwards it to our mailbox.

Purpose: to reply to you and, if you ask, to prepare a proposal.

Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR, and the corresponding contract basis in the NDPA), and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

How long: we delete enquiries 24 months after our last contact with you, unless they lead to a contract. Then we keep the records the law requires us to keep for as long as it requires.

7. Spam protection (Google reCAPTCHA)

The forms are protected by Google reCAPTCHA, provided through Netlify. It loads only on pages that contain a form. reCAPTCHA checks whether a form is being filled in by a person, and to do so Google Ireland Limited and Google LLC (USA) process data such as your IP address, browser details and how you interact with the page, and may set cookies. Google's privacy policy and terms apply.

Legal basis: our legitimate interest in keeping spam and abuse out of our forms (Art. 6(1)(f) GDPR). You can always write to us by email instead.

8. Email

If you email us, we process your email address, the content of your message and any details you include, to reply to you. Legal basis and retention are the same as for the contact forms.

9. Who receives your data

  • Netlify, Inc. (USA): hosting and form handling, as our processor.
  • Google Ireland Limited / Google LLC (Ireland / USA): reCAPTCHA spam protection.
  • PostHog Inc. (USA, data stored in the EU): anonymous visit statistics, as our processor.
  • Google Ireland Limited / Google LLC (Ireland / USA): Google Workspace, which hosts the hello@zigna.com.ng mailbox, as our processor.
  • The designers and engineers working on your project, only where they need it, bound to confidentiality.

We do not sell or rent personal data, and we share it with no one else unless the law requires us to.

10. International transfers

We are based in Nigeria, so personal data we receive is processed in Nigeria. Our providers also process data in the United States. Where data protection law requires it, these transfers rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework for certified providers, and on the NDPA's rules for cross-border transfers. You can ask us for details of the safeguards that apply.

11. Your rights

Under the GDPR and the NDPA you have the right to:

  • access the personal data we hold about you and get a copy of it;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict how we use it;
  • receive data you gave us in a portable format;
  • object at any time to processing based on our legitimate interests;
  • withdraw consent where we rely on it, without affecting earlier processing;
  • not be subject to decisions based solely on automated processing. We make none.

Write to hello@zigna.com.ng. We reply within one month.

12. Complaints

You can complain to a data protection authority, in particular the one in the EU country where you live or work, or to the Nigeria Data Protection Commission (NDPC). We would appreciate the chance to put things right first, so please write to us.

13. Security

The site is served over an encrypted connection (HTTPS). We limit access to personal data to the people who need it and use reputable providers with their own security measures.

14. Children

This site and our services are meant for businesses, not children. We do not knowingly collect data from anyone under 16.

15. Changes

If we change how we handle personal data, we will update this page and the date below.

Last updated: 12 November 2026.