← Back to home
Privacy Policy
Last updated: April 19, 2026
Controller: TheTalkingArts
Contact: {{TTA_CONTACT_EMAIL}} · WhatsApp: +234 {{TTA_WHATSAPP_NUMBER}}
Regulatory framework: Nigeria Data Protection Act (NDPA) 2023, NDPR 2019
1. Who we are
TheTalkingArts ("we", "our", "us") is a premium printing, branding, and press services business operating from Ikotun, Lagos. We are the data controller of any personal information you provide to us through this website, via WhatsApp, or during print job fulfillment.
2. What personal information we collect
We only collect information necessary to quote, produce, and deliver your print job:
- Contact data: name, phone number, WhatsApp handle, email address, pickup or delivery address.
- Job data: design files you send us (PDF, AI, PSD), specs, quantities, brand guidelines.
- Technical data: browser type, pages visited — collected via standard web server logs for security only.
We do not collect biometric data, payment card numbers (payment is handled in person or via trusted third-party processors), or data about minors under 18.
3. Lawful basis for processing (NDPA 2023 Article 25)
- Contract performance: to produce and deliver your print job
- Consent: for any optional marketing communications (you can withdraw at any time)
- Legitimate interest: to improve our service and prevent fraud
- Legal obligation: where required by Nigerian tax or business law
4. How we use your information
- Produce your print job exactly to the spec you provide
- Deliver finished jobs to the address you specify or arrange pickup from our workshop
- Respond to quote requests, design questions, and order status inquiries via WhatsApp and email
- Maintain records as required by Nigerian tax and consumer protection law
We do not sell, rent, or trade your personal information. We do not use your design files for any purpose other than producing your order, and we do not show your files to other clients.
5. Who we share your information with
- Logistics partners: when delivery is requested, with couriers (GIG Logistics, Peace Mass, local bike dispatch) who need your name, phone, and address only.
- Payment processors: if bank transfer or online payment is arranged, the processor receives only the amount and reference — never your design files.
- Legal authorities: only when required by a valid court order or regulatory request under NDPA 2023.
6. Your rights under NDPA 2023
As a data subject you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion where there is no ongoing legal or contractual need
- Restriction — limit how we process your data
- Data portability — receive your data in a structured, machine-readable format
- Object — to processing based on legitimate interest or marketing
- Withdraw consent — at any time, for any processing based on consent
- Lodge a complaint — with the Nigeria Data Protection Commission at ndpc.gov.ng
To exercise any of these rights, contact us at {{TTA_CONTACT_EMAIL}} or via WhatsApp. We respond within 30 days.
7. Data retention
- Order records: 7 years (required for Nigerian tax compliance)
- Design files: 90 days after job delivery, then securely deleted (unless you request archiving)
- Quote inquiries: 12 months after last interaction
- Contact form submissions: 24 months
8. Cookies and tracking
This site uses minimal cookies: session cookies for the cart / form only. We do not currently use third-party analytics. If that changes, we will update this policy and show a consent banner.
9. Data security
- HTTPS encryption (TLS 1.3, HSTS preload)
- Strict Content Security Policy preventing script injection
- Design files stored with access controls; never shared with third parties
- Physical workshop security for printed materials before pickup or dispatch
If a data breach occurs that is likely to result in risk to your rights, we will notify you and the NDPC within 72 hours as required by NDPA 2023 Article 40.
10. International data transfers
Our hosting provider (Cloudflare) processes web traffic data outside Nigeria. Cloudflare offers adequate protection under NDPA 2023 Article 41 through Standard Contractual Clauses.
11. Children's privacy
Our services are intended for customers aged 18 and above. We do not knowingly collect personal data from minors.
12. Changes to this policy
We may update this policy to reflect changes in our practices or Nigerian law. The "Last updated" date at the top will always reflect the most recent revision.
13. Contact
Data inquiries, rights requests, or complaints:
Email: {{TTA_CONTACT_EMAIL}}
WhatsApp: +234 {{TTA_WHATSAPP_NUMBER}}
Workshop: 23 Idimu Road, Ikotun, Lagos, Nigeria