Last updated: 21 October 2026

This policy explains how [Legal company name], trading as 27 Media (“we”, “us”, “our”), collects, uses and protects personal data when you visit 27media.tech, contact us or use our services. We handle personal data in line with the Nigeria Data Protection Act 2023 (the “NDPA”) and the directives of the Nigeria Data Protection Commission (“NDPC”).

Who we are

We are the data controller for the personal data described in this policy.

  • Company: [Legal company name], registered with the Corporate Affairs Commission, RC number [RC number]
  • Address:14 wole olateju cresent,lekki . Lagos

What personal data we collect

  • Enquiries and forms: your name, email address, phone number, company, the service you are interested in, budget range and anything you write in your message.
  • Booking a call: your name, email address and the time you choose, if you use our booking tool.
  • Clients: contact details, billing details, project briefs, files and communications needed to deliver our services.

Our services are not aimed at children. We do not knowingly collect personal data from anyone under 18 without the consent of a parent or guardian.

Why we use your data, and our lawful basis

We only process personal data where the NDPA allows it.

  • Replying to your enquiry and preparing a proposal: steps taken at your request before a contract, and our legitimate interests in running our business.
  • Delivering our services, invoicing and keeping records: performance of a contract, and compliance with legal obligations such as tax and accounting.
  • Sending you marketing messages: your consent. You can withdraw it at any time by using the unsubscribe link or contacting us.
  • Understanding and improving our website: your consent for non-essential cookies.
  • Keeping our website and systems secure: our legitimate interests.

We do not sell your personal data. We do not make decisions about you based solely on automated processing.

Who we share your data with

We share personal data only with service providers and advisers who help us run the business, and who must protect it. These include:

  • Website hosting and security provider
  • Email, form and CRM tools
  • Analytics providers

We may also disclose personal data where the law requires it, or to a regulator or court.

Transfers outside Nigeria

Some of our providers store or process data outside Nigeria. Where that happens, we make sure the transfer meets the NDPA, for example by transferring to a country or organisation that provides adequate protection, or by using appropriate safeguards such as contractual terms, or relying on your consent where that applies.

How long we keep your data

  • Enquiries that do not become work: up to [12] months.
  • Client records and contracts: up to [6] years after the work ends, or as Nigerian tax and company law requires.
  • Marketing subscribers: until you unsubscribe.
  • Website analytics: up to [14] months.

We keep personal data no longer than necessary for the purpose it was collected, then delete or anonymise it.

Cookies

We use essential cookies to make the site work. With your consent, we also use analytics and marketing cookies. You can change your choice at any time using the cookie settings link in the footer. See our Cookie Policy for details.

Your rights

Under the NDPA you have the right to:

  • be told how we use your personal data, and ask for a copy of it
  • have inaccurate or incomplete data corrected
  • ask us to delete your data in certain cases
  • ask us to restrict how we use your data in certain cases
  • object to processing based on our legitimate interests, and to direct marketing at any time
  • receive your data in a portable format, where it applies
  • withdraw your consent at any time, where we rely on it
  • not be subject to a decision based solely on automated processing that significantly affects you

To use any of these rights, email [privacy@27media.tech]. We will respond without undue delay and within one month. We may need to confirm your identity first. There is normally no charge.

Security and data breaches

We use technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, backups and security monitoring. If a breach is likely to put your rights and freedoms at risk, we will notify the NDPC within 72 hours of becoming aware of it, and tell you without undue delay where the NDPA requires.

Complaints

If you have a concern about how we handle your personal data, please tell us first. You do not need a special form or legal terms. Email [privacy@27media.tech] and we will acknowledge it promptly, look into it and tell you the outcome.

You also have the right to complain to the Nigeria Data Protection Commission at any time:

Links to other websites

Our website may link to other sites. We are not responsible for their privacy practices, so please read their policies.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.

Contact us

Questions about this policy? Email [privacy@27media.tech].