Privacy Policy
Last updated: 16 August 2026
Looney Graphics (“we”, “us”, “our”) is committed to protecting your personal information. This policy explains what data we collect, why we collect it, and your rights under the Nigeria Data Protection Act (NDPA) 2023, the NDPR 2019, and the EU General Data Protection Regulation (GDPR).
1. Who We Are
Looney Graphics (RC 6979309)
D10 HFP Way, Dolphin Estate, Ikoyi, Lagos, Nigeria
Email: info@looneygraphics.com
Phone: +234 703 093 8500
We are the data controller for personal information collected through this website.
2. Data We Collect
| Data | Source | Purpose |
|---|---|---|
| Name, email, phone, company, message | Contact form | Respond to your enquiry |
| Service type selected | Contact form | Route your request correctly |
| IP address, browser/device type | Automatic (all pages) | Security & fraud prevention |
| Pages visited, WhatsApp button clicks | Automatic | Understand site usage |
| Admin login (email + hashed password) | Admin portal only | Secure staff access |
We do not collect payment card details. Orders are quoted and invoiced separately.
3. Legal Basis for Processing
- Contract / pre-contract: processing your enquiry so we can provide a quote.
- Legitimate interest: site analytics, security monitoring, and fraud prevention.
- Consent: when you voluntarily submit the contact form.
You may withdraw consent at any time by emailing us (see Section 8).
4. How Long We Keep Your Data
| Data type | Retention period |
|---|---|
| Contact form submissions | 2 years from submission, then deleted |
| Analytics / click data | 12 months, then anonymised |
| Admin account records | Duration of employment + 1 year |
| Server / access logs | 90 days |
5. Who We Share Your Data With
We do not sell your data. We share it only with:
- Vercel Inc. (USA) — website hosting. Covered by EU-US Data Privacy Framework.
- PostgreSQL database provider — encrypted storage of form submissions.
- Google Analytics / Microsoft Clarity — anonymised usage analytics.
- WhatsApp (Meta) — when you click a WhatsApp button you leave our site; Meta's own privacy policy applies.
International transfers outside Nigeria or the EEA are protected by standard contractual clauses or adequacy decisions.
6. Cookies
We use only strictly necessary cookies (session security for the admin portal). We do not use advertising or tracking cookies. Google Analytics runs with IP anonymisation enabled.
7. Your Rights
Under the NDPA 2023 and GDPR you have the right to:
- Access — request a copy of data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data (“right to be forgotten”).
- Portability — receive your data in a machine-readable format.
- Object — object to processing based on legitimate interest.
- Restrict processing — ask us to pause processing while a dispute is resolved.
- Withdraw consent — at any time, without affecting prior lawful processing.
Email info@looneygraphics.com to exercise any right. We will respond within 30 days.
8. Complaints
Nigerian residents may lodge a complaint with the Nigeria Data Protection Commission (NDPC): ndpc.gov.ng
EU/EEA residents may complain to their local supervisory authority.
We encourage you to contact us first at info@looneygraphics.com so we can resolve concerns quickly.
9. Security
We use encrypted database connections (SSL/TLS), hashed passwords (Argon2), rate limiting on all form endpoints, and strict HTTP security headers. No internet transmission is 100% secure; we take all reasonable steps to protect your data.
10. Changes to This Policy
We may update this policy periodically. Material changes will be noted by updating the “Last updated” date above. Continued use of the site after changes constitutes acceptance.