Gigcreatives — Privacy Policy

Last Updated: [Jauary 1st, 2026]

Effective Date: [March 6th, 2025]

---

Introduction

At Gigcreatives, your privacy is not just a legal requirement—it’s a fundamental part of how we operate. We are committed to protecting your personal data and being transparent about how we collect, use, store, and share your information.

This Privacy Policy explains our data practices when you:

• Visit our website at www.gigcreatives.com (the “Site”)
• Use our services or engage us for projects
• Communicate with us via email, phone, or other channels
• Subscribe to our newsletters or marketing communications
• Interact with us on social media platforms
• Book consultations or discovery calls
• Make payments or transactions
• Access our client portal

This Privacy Policy applies to all personal data we collect, regardless of the medium or method of collection.

Please read this Privacy Policy carefully. By accessing our Site, using our services, or providing us with your personal data, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use our Site or services.

This Privacy Policy forms part of our Terms & Conditions and should be read in conjunction with our Cookie Policy, Refund Policy, and any service agreements.

---

1. Data Controller Information

1.1 Who We Are

Gigcreatives is the data controller responsible for your personal data.

1.2 Data Protection Contact

For all privacy-related inquiries, requests, or complaints, please contact:

Privacy Contact

• Email: moc.sevitaercgigobfsctd-19969c@olleh
• Subject Line: “Privacy Inquiry — [Your Name]”
• Response Time: Within 7 business days

1.3 Representative (For EU/UK Users)

While we are based in Nigeria, we serve clients globally. For users in the European Economic Area (EEA) or United Kingdom (UK), you may contact us directly at the email above for any GDPR-related matters.

---

2. Definitions

For clarity throughout this Privacy Policy:

---

3. Information We Collect

3.1 Information You Provide Directly

We collect personal data that you voluntarily provide when interacting with us:

Contact & Inquiry Forms

Booking & Scheduling

Quote Requests & Proposals

Newsletter & Marketing Signups

Client Portal & Account Registration

Payments & Transactions

Note: We do NOT store complete credit card numbers, CVV codes, or full bank account details. Payment processing is handled by secure third-party processors (see Section 7).

Direct Communications

Service Delivery

3.2 Information Collected Automatically

When you visit our Site, we automatically collect certain information through cookies, pixels, and similar technologies:

Device & Technical Information

Usage & Behavioral Information

Location Information

Note: We do NOT collect precise GPS location data.

Cookie & Tracking Data

For comprehensive details on cookies and tracking, see our Cookie Policy.

3.3 Information from Third Parties

We may receive personal data about you from external sources:

Referral Partners

Social Media Platforms

Public Sources

Analytics & Advertising Platforms

Service Providers

3.4 Special Category Data

We do NOT intentionally collect special category (sensitive) personal data, including:

• Racial or ethnic origin
• Political opinions
• Religious or philosophical beliefs
• Trade union membership
• Genetic or biometric data
• Health information
• Sexual orientation
• Criminal convictions

If you voluntarily provide such information (e.g., in project communications), we will treat it with extra care and only use it as necessary for the purpose provided.

3.5 Children’s Data

Our Site and services are intended for individuals aged 18 and older. We do NOT knowingly collect personal data from children under 18.

If we discover we have inadvertently collected data from a child under 18:

• We will delete such data promptly
• We will notify the parent/guardian if feasible
• We will take steps to prevent future collection

If you believe a child has provided us with personal data, please contact us immediately at moc.sevitaercgigobfsctd-5c1d1d@olleh.

---

4. How We Collect Information

4.1 Collection Methods

4.2 Lawful Basis for Collection

We only collect personal data when we have a lawful basis to do so. The specific basis depends on the type of data and purpose (see Section 6).

4.3 What Happens If You Don’t Provide Data

Some data is required to provide our services. If you choose not to provide certain information:

Optional data (like newsletter signup) has no negative consequences if not provided.

---

5. How We Use Your Information

5.1 Purposes of Processing

We use your personal data for the following purposes:

Service Delivery

Communications

Business Operations

Marketing & Advertising

Legal & Security

5.2 Purpose Limitation

We only use your personal data for the purposes described in this Privacy Policy or as otherwise communicated to you. If we intend to use your data for a new, unrelated purpose, we will:

• Notify you in advance
• Obtain your consent if required
• Update this Privacy Policy

5.3 Data Minimization

We collect only the personal data that is necessary for the specified purposes. We do not collect excessive data “just in case” it might be useful later.

---

6. Legal Basis for Processing

6.1 Overview

Under data protection laws, we must have a valid legal basis for processing your personal data. The table below summarizes the legal bases we rely upon:

6.2 Legitimate Interests Assessment

When we rely on legitimate interests, we conduct a balancing test to ensure our interests do not override your fundamental rights. Our legitimate interests include:

6.3 Consent Management

Where we rely on consent:

• We obtain it through clear, affirmative action (opt-in)
• We do not use pre-ticked boxes or implied consent
• We record when and how consent was given
• We make it easy to withdraw consent
• Withdrawal does not affect prior processing

To withdraw consent: Email moc.sevitaercgigobfsctd-2d381d@olleh with subject “Withdraw Consent — [Your Name]” or use unsubscribe links in emails.

6.4 Legal Basis by Activity

---

7. How We Share Your Information

7.1 We Do Not Sell Your Data

Gigcreatives does NOT sell your personal data to third parties.

We do not rent, trade, or exchange your personal information for monetary consideration.

7.2 Categories of Recipients

We may share your personal data with the following categories of recipients:

Service Providers (Data Processors)

These companies process data on our behalf, under our instructions:

Our commitments regarding service providers:

• We carefully select providers with strong privacy practices
• We have Data Processing Agreements (DPAs) or equivalent contracts
• We share only the data necessary for their specific function
• We require them to protect data appropriately
• We regularly review their practices

Business Partners

Professional Advisors

Professional advisors are bound by professional confidentiality obligations.

Legal & Regulatory

We only share data with legal/regulatory authorities when legally required or when we have a good faith belief that disclosure is necessary.

7.3 Business Transfers

If Gigcreatives is involved in:

• Merger or acquisition
• Sale of business or assets
• Reorganization or restructuring
• Bankruptcy or insolvency proceedings

Your personal data may be transferred as part of that transaction. In such cases:

• We will notify you before your data is transferred
• The new controller will be bound by this Privacy Policy until updated
• You may have rights to object (depending on jurisdiction)

7.4 With Your Consent

We may share your personal data for purposes not covered above if we have your explicit consent.

7.5 Aggregated & Anonymized Data

We may share aggregated or anonymized data that cannot identify you personally. This is not considered personal data under privacy laws.

---

8. Third-Party Services & Links

8.1 Third-Party Platforms We Use

Our Site and services integrate with various third-party platforms. These platforms have their own privacy policies:

8.2 Third-Party Links

Our Site may contain links to third-party websites, services, or content. We are not responsible for:

• The privacy practices of third-party websites
• Content on third-party websites
• Data collected by third parties through their sites

We encourage you to read the privacy policies of any third-party sites you visit.

8.3 Social Media

If you interact with us on social media platforms (Facebook, Instagram, LinkedIn, Twitter, TikTok, etc.):

• Those interactions are subject to the platform’s privacy policy
• Information you share publicly may be visible to others
• We may receive data about your interactions from the platform

8.4 Embedded Content

Our Site may include embedded content (videos, images, articles) from third parties. Embedded content behaves as if you visited the third-party site and may collect data, use cookies, and track your interaction.

---

9. Cookies & Tracking Technologies

9.1 Overview

We use cookies and similar tracking technologies to collect and store information about your interactions with our Site.

For comprehensive information about:

• Types of cookies we use
• Specific cookies and their purposes
• Cookie durations
• How to manage cookies
• Opt-out instructions

Please see our dedicated Cookie Policy.

9.2 Quick Summary

9.3 Managing Cookies

You can manage your cookie preferences:

• Through our cookie consent banner (on first visit)
• Via “Cookie Settings” link in Site footer
• Through your browser settings
• Using opt-out links for specific platforms

---

10. International Data Transfers

10.1 Our Location

Gigcreatives is based in Edo State, Nigeria and serves clients worldwide.

10.2 Where Your Data May Be Processed

Your personal data may be transferred to and processed in countries other than your own, including:

• Nigeria (where we are based)
• United States (where many service providers are located)
• European Union (some service providers)
• Other countries where our service providers operate

10.3 Safeguards for International Transfers

When we transfer personal data internationally, we ensure appropriate safeguards are in place:

10.4 Transfer Impact Assessments

For transfers to countries without adequacy decisions, we assess:

• The legal framework of the destination country
• Additional safeguards that can be implemented
• Risks to your data and rights
• Measures to mitigate identified risks

10.5 Your Consent to Transfer

By using our Site and services, you consent to the transfer of your personal data to Nigeria and other countries as described above. If you do not consent to such transfers, please do not use our Site or services.

---

11. Data Retention

11.1 Retention Principles

We retain personal data only for as long as necessary to:

• Fulfill the purposes for which it was collected
• Comply with legal and regulatory requirements
• Support legitimate business operations
• Resolve disputes and enforce agreements
• Protect against legal claims

11.2 Retention Schedule

11.3 Retention After Relationship Ends

When our business relationship ends:

• Active project data is archived
• Files are stored for 60 days, then deleted
• Financial records are retained as required by law
• You may request deletion of non-essential data
• Some data may be retained for legal compliance

11.4 Deletion & Anonymization

When retention periods expire:

• Data is securely deleted, OR
• Data is anonymized (so it no longer identifies you)

Anonymized data may be retained indefinitely for analytics and research.

11.5 Exceptions to Retention Periods

We may retain data longer than stated if:

• Required by law or regulation
• Necessary for ongoing legal proceedings
• Needed to protect our legal rights
• You request extended retention
• Technical limitations prevent immediate deletion

---

12. Data Security

12.1 Our Commitment

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it.

12.2 Technical Measures

12.3 Organizational Measures

12.4 What We Cannot Guarantee

While we implement robust security measures:

• No method of transmission or storage is 100% secure
• We cannot guarantee absolute security of your data
• Internet-based systems carry inherent risks
• You are responsible for securing your own access credentials

12.5 Your Security Responsibilities

To help protect your data:

• Keep your account credentials confidential
• Use strong, unique passwords
• Log out of accounts when finished
• Keep your devices and software updated
• Be cautious of phishing attempts
• Notify us immediately of suspected unauthorized access

12.6 Data Breach Procedures

In the event of a personal data breach:

1. Detection & Containment: We will identify and contain the breach immediately
2. Assessment: We will assess the scope, nature, and risk of the breach
3. Notification (Regulatory): If required, we will notify relevant authorities within required timeframes
4. Notification (Individuals): If the breach poses high risk to you, we will notify you without undue delay
5. Documentation: We will document the breach and our response
6. Remediation: We will take steps to prevent future breaches

Notification will include:

• Nature of the breach
• Types of data affected
• Likely consequences
• Measures taken to address the breach
• Recommendations for protecting yourself
• Contact information for questions

---

13. Your Privacy Rights

13.1 Universal Rights

Regardless of your location, you have certain fundamental privacy rights:

13.2 Rights for European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under GDPR/UK GDPR:

Exercising GDPR Rights:

• Email: moc.sevitaercgigobfsctd-88fcc2@olleh
• Subject: “GDPR Rights Request — [Your Name]”
• Include: Your full name, email address, specific right(s) requested, details of your request
• Response time: Within 30 days (extendable by 60 days for complex requests)
• Fee: Generally free; reasonable fee may apply for manifestly unfounded/excessive requests

Right to Lodge a Complaint:

You may lodge a complaint with your local Data Protection Authority:

• UK: Information Commissioner’s Office (ICO) — https://ico.org.uk
• Ireland: Data Protection Commission — https://dataprotection.ie
• EU Members: Your national DPA

13.3 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Do We Sell or Share Personal Information?

• Sell: We do NOT sell personal information for monetary consideration.
• Share: We may “share” personal information (as defined by CCPA) with advertising partners for targeted advertising purposes. This may constitute “sharing” under CCPA.

Opt-Out of Sharing:

• Use our Cookie Settings to disable advertising cookies
• Email: moc.sevitaercgigobfsctd-56498c@olleh with subject “CCPA Opt-Out”
• Click “Do Not Sell or Share My Personal Information” link (if available on Site)

Exercising CCPA Rights:

• Email: moc.sevitaercgigobfsctd-9844ef@olleh
• Phone: +234 906 429 3571
• Subject: “CCPA Rights Request — [Your Name]”
• Response time: Within 45 days (extendable by 45 days)

Authorized Agents:

You may designate an authorized agent to submit requests on your behalf. We may require:

• Signed authorization from you
• Verification of your identity
• Verification of agent’s authority

Verification:

We may need to verify your identity before processing requests. This may include:

• Confirming your email address
• Matching information you provide with our records
• Additional verification for sensitive requests

California Shine the Light:

California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing. We do not disclose personal information to third parties for their direct marketing purposes.

13.4 Rights for Nigerian Residents (NDPR)

If you are located in Nigeria, you have rights under the Nigeria Data Protection Regulation (NDPR) and Nigeria Data Protection Act (NDPA):

Exercising NDPR Rights:

• Email: moc.sevitaercgigobfsctd-4cb0d8@olleh
• Subject: “NDPR Rights Request — [Your Name]”
• Response time: Within 30 days

Complaints:

You may lodge a complaint with the National Information Technology Development Agency (NITDA):

• Website: https://nitda.gov.ng
• Email: gn.vog.adtinobfsctd-7cc329@ofni

13.5 Rights for Other Jurisdictions

If you are located in another jurisdiction with data protection laws (e.g., Canada, Australia, Brazil, South Africa), you may have similar rights under your local laws. Please contact us to discuss your specific rights.

13.6 How to Exercise Your Rights

By Email:

• Address: moc.sevitaercgigobfsctd-37c090@olleh
• Subject Line: “[Right Name] Request — [Your Name]”
• Include:
  • Your full name
  • Email address associated with your data
  • Specific right(s) you’re exercising
  • Details of your request
  • Any supporting information

By Phone:

• Number: +234 906 429 3571
• Hours: Monday–Friday, 9:00 AM – 5:00 PM (WAT)

Response Timeline:

13.7 Verification

To protect your privacy, we may need to verify your identity before processing requests. This may include:

• Confirming your email address via confirmation link
• Matching information against our records
• Requesting additional identifying information
• Requiring signed authorization for high-risk requests

13.8 Limitations on Rights

Your rights may be limited in certain circumstances:

• When disclosure would adversely affect the rights of others
• When data is subject to legal privilege
• When data is needed for ongoing legal proceedings
• When an exemption applies under applicable law
• When requests are manifestly unfounded or excessive

We will inform you if we cannot fulfill your request and explain why.

---

14. Automated Decision-Making

14.1 Our Use of Automated Processing

We may use automated systems for:

14.2 Decisions With Significant Effects

We do NOT make decisions based solely on automated processing that have significant legal or similar effects on you without human involvement.

Examples of what we do NOT do automatically:

• Refuse services based solely on automated scoring
• Set prices based solely on automated profiling
• Make credit decisions
• Make employment-related decisions

14.3 Your Rights Regarding Automation

If automated processing affects you:

• You may request human review
• You may express your point of view
• You may contest the decision
• You may receive an explanation of the logic involved

Contact us at moc.sevitaercgigobfsctd-917ec2@olleh if you have concerns about automated processing.

---

15. Marketing Communications

15.1 Types of Marketing

We may send you marketing communications including:

• Newsletters with tips and insights
• Promotional offers and discounts
• New service announcements
• Case studies and portfolio updates
• Event invitations
• Industry news and updates

15.2 Consent for Marketing

Email Marketing:

• Requires your explicit opt-in consent
• You can subscribe via website forms
• Consent is recorded with timestamp
• You can unsubscribe at any time

SMS/Phone Marketing:

• Only with explicit consent
• Rare — we primarily use email

15.3 How to Opt In

You can opt in to marketing by:

• Checking the marketing consent box on forms
• Subscribing to our newsletter
• Explicitly requesting to be added

15.4 How to Opt Out

You can opt out of marketing at any time by:

• Unsubscribe Link: Click “unsubscribe” in any marketing email
• Email Request: Send email to moc.sevitaercgigobfsctd-206439@olleh with subject “Unsubscribe”
• Reply: Reply to any marketing email with “UNSUBSCRIBE”

Processing Time: We will process opt-out requests within 5 business days.

15.5 What Opting Out Does NOT Affect

Even if you opt out of marketing, you may still receive:

• Transactional emails (invoices, receipts, confirmations)
• Project-related communications
• Important service announcements
• Security or legal notifications
• Responses to your inquiries

15.6 Suppression Lists

When you unsubscribe, we add you to a suppression list to ensure you don’t receive future marketing. We retain this suppression record to honor your preference.

---

16. Third-Party Marketing

16.1 Our Policy

We do NOT share your personal data with third parties for their direct marketing purposes without your explicit consent.

16.2 Advertising Partners

We work with advertising platforms (Google, Meta, LinkedIn, TikTok) to:

• Retarget visitors to our Site
• Find similar audiences (lookalikes)
• Measure advertising effectiveness

This involves placing cookies and pixels with your consent. See our Cookie Policy for details.

16.3 Opting Out of Third-Party Advertising

You can opt out of targeted advertising via:

• Our Cookie Settings
• Platform-specific settings:
  • Google: https://adssettings.google.com
  • Facebook: https://www.facebook.com/ads/preferences
  • LinkedIn: https://www.linkedin.com/psettings/advertising
  • TikTok: App settings
• Industry opt-out tools:
  • NAI: https://optout.networkadvertising.org
  • DAA: https://optout.aboutads.info
  • EDAA (EU): https://www.youronlinechoices.eu

---

17. Do Not Track (DNT)

17.1 Current Response

Some browsers offer a “Do Not Track” (DNT) signal. Currently, our Site does NOT respond to DNT signals because:

• There is no universal standard for DNT
• Different browsers implement DNT differently
• Many websites do not honor DNT

17.2 Alternative Controls

Instead of relying on DNT, you can:

• Manage cookies through our Cookie Settings
• Use browser privacy settings
• Use privacy-focused browsers
• Install privacy extensions
• Opt out of advertising tracking directly

---

18. Social Media Features

18.1 Social Sharing

Our Site may include social media features (share buttons, links, widgets). These features may:

• Collect your IP address
• Set cookies
• Track your interaction

They are governed by the privacy policies of the respective platforms.

18.2 User-Generated Content

If you post content on our social media pages or interact with us publicly:

• That content may be visible to others
• We may repost or share your content (with attribution)
• Privacy settings are controlled by the platform

18.3 Social Login

If we offer social login (login with Facebook, Google, etc.):

• We receive profile information you authorize
• We use this only for authentication and account creation
• Review the platform’s permissions before authorizing

---

19. Job Applicants

19.1 Applicant Data

If you apply for a position with Gigcreatives:

19.2 Purpose

We use applicant data to:

• Evaluate your qualifications
• Conduct interviews
• Make hiring decisions
• Communicate with you about opportunities

19.3 Retention

• Successful applicants: Data becomes part of employment records
• Unsuccessful applicants: Data retained for 12 months for future opportunities, then deleted
• You may request earlier deletion

19.4 Legal Basis

• Consent (you applied voluntarily)
• Pre-contract steps (evaluating for potential employment)

---

20. Changes to This Privacy Policy

20.1 Our Right to Update

We may update this Privacy Policy from time to time to:

• Reflect changes in our practices
• Address new legal requirements
• Improve clarity and transparency
• Add new services or features
• Respond to feedback

20.2 Notification of Changes

When we update this Privacy Policy:

• The “Last Updated” date will be revised
• Material changes may be highlighted on the Site
• We may notify you via email for significant changes
• Continued use after changes constitutes acceptance

20.3 Review Recommendation

We encourage you to review this Privacy Policy periodically to stay informed about our data practices.

20.4 Previous Versions

Upon request, we can provide previous versions of this Privacy Policy.

---

21. Contact Information

21.1 General Privacy Inquiries

For questions, concerns, or requests regarding this Privacy Policy:

Gigcreatives

21.2 Response Times

21.3 Escalation

If you are not satisfied with our response:

1. Request escalation to management
2. Contact relevant supervisory authority (see Section 13)
3. Seek legal remedies available in your jurisdiction

---

22. Additional Provisions

22.1 Severability

If any provision of this Privacy Policy is found to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect.

22.2 Entire Privacy Agreement

This Privacy Policy, together with our Cookie Policy, constitutes the entire agreement regarding privacy practices. It supersedes any prior privacy statements or policies.

22.3 No Waiver

Our failure to enforce any provision of this Privacy Policy does not constitute a waiver of our right to enforce it later.

22.4 Language

This Privacy Policy is provided in English. If translated, the English version prevails in case of conflict.

22.5 Governing Law

This Privacy Policy is governed by the laws of the Federal Republic of Nigeria, without regard to conflict of law principles.

For users in other jurisdictions, this does not affect your statutory rights under local data protection laws.