Privacy Policy

  1. Home
  2. »
  3. Privacy Policy

Sizzle Digital Privacy Policy

Welcome to the Sizzle Digital Privacy Policy Page

This Privacy Policy explains what information we collect, why we collect it, how we use it, how we protect it, your rights, and how to contact us about privacy.

Sizzle Digital Privacy Policy | Digital Marketing Agency in Nigeria

Last Updated: Tuesday - 23rd September, 2025

1. Introduction - who we are and why this policy exists

Sizzle Digital (“we”, “us”, “our”) is a digital marketing and web development agency based in Nigeria. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, how we protect it, your rights, and how to contact us about privacy.

 

This policy is written in plain English so our clients, visitors, job applicants and partners can understand how we handle data in line with Nigeria’s data protection rules (NDPR) and best practices. For background on Nigeria’s data protection regulation and implementation framework see NITDA website

2. Data controller & contact

Data controller: [ Sizzle Digital ]


Data Protection / Privacy contact: [ contact@sizzledigital.ng ]

3. What personal data we collect

We collect different categories of personal data depending on how you interact with us:

 

a. Identity & contact data – name, company name, job title, email address, phone number, postal address.
b. Communications – messages you send (email, contact form, WhatsApp), chat transcripts, meeting notes.
c. Transactional & billing data – invoices, payment records, billing address.
d. Marketing data & preferences – whether you consent to receive newsletters, your subscription status.
e. Recruitment & HR data (if you apply) – CVs, portfolios, interview notes, references; voluntary equality info only if provided.
f. Technical & usage data – IP address, browser, device, pages visited, cookies and analytics data, referral source.
g. Third-party data – data we receive from partners, social profiles you use to connect (profile name, public info) or advertising platforms.
h. Sensitive data – we avoid collecting special category data (e.g., health, race, religion). If we must process special categories we will obtain explicit consent and explain why.

4. How we collect personal data

We collect data in three main ways:

 

  • Directly from you – when you contact us, request services, subscribe to newsletters, apply for a job, sign contracts, or make payments.

  • Automatically – via cookies, analytics (e.g., Google Analytics/GA4), server logs while you browse our site.

  • From third parties – such as payment processors, hosting providers, social media platforms, referral partners, and publicly available sources (e.g., LinkedIn) when you link/supply such accounts.

 

Cookies and tracking require consent for certain types of tracking

5. Why we process your data

We only process personal data where we have a lawful basis. Typical purposes include:

 

a. To provide services (contract) – to perform contracts (e.g., building a website, running a marketing campaign). Legal basis: performance of a contract.
b. To communicate with you (contract / legitimate interest) – project updates, support, meetings. Legal basis: performance of contract or legitimate interest (effective project delivery).
c. Marketing (consent / legitimate interest) – sending newsletters and offers when you have opted in; where appropriate we rely on consent. You may withdraw consent at any time.
d. Legal & compliance (legal obligation) – to comply with laws, tax and accounting obligations.
e. Security & fraud prevention (legitimate interest) – to detect and prevent fraud, secure systems and protect rights of others.
f. Recruitment & HR (contract / consent) – processing job applications and onboarding staff.
g. Analytics & service improvement (legitimate interest / consent for some cookies) – to measure and improve our site and services.

6. Cookies, trackers & analytics

What are cookies? Small files stored on your device that help our site function and remember your preferences.

 

Types we use:

  • Essential cookies – required for the website to work (sessions, login).

  • Performance & analytics cookies – measure how you use the site (e.g., Google Analytics). These help us improve the site.

  • Functional cookies – remember preferences (language, layout).

  • Advertising/marketing cookies – used by third parties (ad networks) to show relevant ads and measure ad performance.

 

Consent & control: For non-essential cookies (analytics, advertising), we ask for clear, informed consent before setting them. You can change cookie preferences anytime via our cookie banner or browser settings.

Third-party analytics: We use services such as Google Analytics (GA4) to analyze traffic. These tools may place cookies and process data outside Nigeria; we limit the personal data passed and rely on contractual safeguards with those providers.

7. Third-party processors & international transfers

We use trusted third-party providers to deliver services (hosting, email, analytics, payment processors). Examples include: AWS/Google Cloud/other hosting providers, Google (Analytics), Mailchimp/HubSpot (email/CRM), payment processors (Stripe, Paystack), and ad platforms (Google Ads, Meta). These providers may process data outside Nigeria.

 

When data is transferred abroad, we implement appropriate safeguards (data processing agreements, contractual protections) and limit transfers to necessary cases. We also follow NITDA’s implementation guidance on cross-border processing.

8. How long we keep your data

We retain personal data only as long as necessary to fulfill the purpose or to meet legal obligations. Typical retention examples:

 

  • Client project records & invoices: 7 years (for accounting & tax) unless otherwise agreed.

  • Active project data: retained while the project is active and for the support period afterwards (30 – 90 days by default) and longer if on a maintenance retainer.

  • Marketing subscribers: retained until unsubscribed (you can unsubscribe any time).

  • Job applicants: CVs/portfolio kept for up to 24 months unless you request earlier deletion.

  • Analytics cookies: retention per the cookie tool / analytics provider (you can clear cookies from your browser).

 

If you want data deleted earlier, see “Your rights” below.

9. Your rights

Under Nigerian data protection rules (NDPR) and updated guidance, you have rights including the right to:

 

  • Access your personal data (see what we hold about you).

  • Rectify inaccurate or incomplete data.

  • Erase data (“right to be forgotten”) where applicable.

  • Object to processing for direct marketing or legitimate interest.

  • Restrict processing in certain situations.

  • Withdraw consent at any time where processing is based on consent.

 

(Please note: some rights and their exact form may vary under recent national updates to data protection law – check the latest NITDA guidance for details.)

 

How to exercise your rights: Email: contact@sizzledigital.ng

10. Security measures we use

We implement appropriate technical and organizational measures to protect personal data, including:

 

  • Access controls and role-based permissions.

  • Encrypted transmission (HTTPS/SSL) for data in transit.

  • Regular backups and secure hosting (industry-standard providers).

  • Regular security patching and software updates.

  • Staff training, confidentiality obligations, and restricted access to data.

  • Use of secure third-party vendors with contractual safeguards.

 

Despite these measures, no system is 100% secure. Where a breach is likely to result in risk to individuals we will notify affected people and the regulator as required by law.

11. Data breaches

If we detect a personal data breach we will:

 

  1. Contain the breach and secure our systems.

  2. Assess the likelihood and severity of risk to individuals.

  3. Notify affected individuals and the regulator as required by applicable law and guidance.

  4. Provide steps affected individuals can take to protect themselves.

  5. Implement remedial measures to prevent recurrence.

 

We’ll always act promptly, transparently and in accordance with NDPR guidance.

12. Marketing communications & unsubscribing

If you opt in to our newsletters or marketing, we’ll only send what you agreed to. Every marketing email includes an unsubscribe link. If processing is based on legitimate interest (rare for direct marketing) you can opt out at any time.

13. Children & minors

We do not knowingly collect personal data from children under 18 without verified parental/guardian consent. If you believe we have collected data from a minor without consent, reach us at contact@sizzledigital.ng and we will delete the data where required.

14. Links to other sites

Our website may link to third-party sites (partners, social platforms, payment gateways). This policy does not cover those sites. Check the privacy policies of any external site you visit.

15. Changes to this Privacy Policy

We may update this policy to reflect changes to our data practices or legal requirements. We will post the revised policy on this page with the “Last updated” date. Where required by law, we’ll notify affected users.

16. Contact & complaints

Privacy contact (DPO): contact@sizzledigital.ng

If you are not satisfied with our handling of your request, you may lodge a complaint with NITDA and follow their guidance for complaints and enforcement. See NITDA’s website for enforcement and guidance.

17. Short summary (what you can do right now)

Want your data? Email: [ contact@sizzledigital.ng ]

Want to unsubscribe? Click the link in any newsletter

Want to complain to the regulator? Visit NITDA’s official site for instructions and contact info