1. Introduction

This policy explains what personal data Bit Collective Limited, trading as Bit Design Agency, collects, why, and what you can do about it. We are the data controller.

Contact: [email protected] · +234 903 378 5773 

What we collect

When you contact us or enquire: name, email address, phone number, company name, and whatever you tell us about your project.

When you book a call: scheduling details through Calendly, including name, email and your selected time.

When you subscribe to our newsletter: your email address.

When you become a client: billing details, contact information for your team, and any credentials you provide us to do the work. We never ask for credentials in plain text where a safer method exists.

Automatically, when you visit: IP address, browser and device type, pages viewed, referring source and time on site, collected through cookies and similar technologies.

Why we process it, and on what basis

We do not make decisions about you by solely automated means.

Cookies and tracking

This site uses:

• Essential cookies: needed for the site to function
• Google Analytics 4: how the site is used, in aggregate. Google may process this outside Nigeria.
• Meta (Facebook) Pixel: measures whether our advertising works, and may be used by Meta for advertising audiences.

You can accept or decline non-essential cookies through the banner, change your choice at any time, and block cookies in your browser settings; some parts of the site may not work correctly if you do.

Who we share it with

We do not sell or rent your personal data. We share it only with:

• Service providers who help us operate (hosting, email, analytics, scheduling, payment processing and accounting), each bound to protect it
• Professional advisers, where necessary
• Authorities, where the law requires it

Some of these providers are outside Nigeria. Where data is transferred internationally, we take reasonable steps to ensure it remains adequately protected.

How long we keep it

• Enquiries that don’t become projects: 24 months
• Client records and project files: 7 years after the engagement ends, to meet tax and legal requirements
• Newsletter subscribers: until you unsubscribe
• Analytics data: 14 months

Your rights

Under the Nigeria Data Protection Act 2023 you have the right to: access your data; correct it; have it erased; restrict how we process it; withdraw consent; object to processing including direct marketing; receive your data in a portable format; and not be subject to solely automated decisions.

To exercise any of these, email us at [email protected]. We’ll respond within 30 days.

If you’re unhappy with how we’ve handled your data, you can complain to the Nigeria Data Protection Commission (NDPC). If you’re in the UK or EU, you may also complain to your local supervisory authority.

Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections, access controls, and regular updates to the systems we run. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a breach occurs that poses a high risk to your rights, we will notify the NDPC within 72 hours of becoming aware of it, and notify you without undue delay.

Children

Our services are not directed at children under 18 and we do not knowingly collect their data.

Changes

We may update this policy. The current version is always published here with its date.