Privacy Policy

Last Updated: November 10, 2025

Introduction

ProfileLegacy (“we”, “us”, “our”) operates the website https://profilelegacy.com.ng/ (the “Website”). We are committed to protecting your privacy and personal data in compliance with the General Data Protection Regulation (GDPR), the Nigeria Data Protection Regulation (NDPR), and other applicable data protection laws.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our Website. Please read this policy carefully to understand our practices regarding your data.

1. Data Controller

Profile Legacy
Email: info@profilelegacy.com.ng
Website: https://profilelegacy.com.ng/

For any questions about this Privacy Policy or our data practices, please contact us using the details above.

2. Information We Collect

2.1 Information You Provide Directly

We may collect personal information that you voluntarily provide to us, including:

Contact Forms and Email Communication:

  • Name
  • Email address
  • Subject and message content
  • Any other information you choose to include

Comments (if enabled):

  • Name
  • Email address
  • Website URL (optional)
  • Comment content
  • IP address (automatically collected by WordPress)

Newsletter Subscriptions (if applicable):

  • Name
  • Email address
  • Subscription preferences

2.2 Information Automatically Collected

When you visit our Website, we automatically collect certain information, including:

Technical Information:

  • IP address
  • Browser type and version
  • Operating system
  • Device type (desktop, mobile, tablet)
  • Screen resolution
  • Time zone setting

Usage Data:

  • Pages visited and content viewed
  • Date and time of visits
  • Time spent on pages
  • Referring website/source
  • Click patterns and navigation paths
  • Search queries on our site

Location Data:

  • Approximate geographic location based on IP address (country/city level)

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies. See Section 6 for detailed information about cookies.

3. How We Use Your Information

We process your personal data for the following purposes:

3.1 Website Operation and Communication

  • To respond to your enquiries and communications
  • To provide and maintain our Website functionality
  • To manage and moderate user comments
  • To send administrative information and updates

3.2 Analytics and Improvement

  • To analyse how visitors use our Website
  • To monitor and improve Website performance
  • To understand user preferences and behaviour
  • To identify technical issues and bugs
  • To send newsletters and promotional content (only if you opt-in)
  • To inform you about new content and features
  • To comply with legal obligations
  • To enforce our terms and conditions
  • To protect our rights and prevent fraud
  • To respond to legal requests from authorities

Under GDPR, we process your personal data based on the following legal grounds:

Consent (Article 6(1)(a) GDPR):

  • Newsletter subscriptions
  • Non-essential cookies
  • Marketing communications

Legitimate Interests (Article 6(1)(f) GDPR):

  • Website analytics and improvement
  • Security and fraud prevention
  • Responding to enquiries
  • Operating and maintaining our Website

Legal Obligation (Article 6(1)(c) GDPR):

  • Complying with laws and regulations
  • Responding to legal requests

Contractual Necessity (Article 6(1)(b) GDPR):

  • Providing services you request

5. WordPress-Specific Data Processing

Our Website is built on WordPress, which processes data in the following ways:

5.1 Comments

When you leave a comment:

  • Your name, email, website URL, and comment content are stored in our WordPress database
  • Your IP address and browser user agent are collected for spam detection
  • An anonymised string created from your email address (a hash) may be provided to Gravatar to display your profile picture
  • Comments and associated metadata are retained indefinitely to enable comment threads and moderation

5.2 Media Uploads

If you upload images or media (if applicable):

  • Embedded location data (EXIF GPS) in uploaded images may be visible to Website visitors
  • We recommend removing location data before uploading images

5.3 Contact Forms

Data submitted through contact forms is:

  • Sent to our email address
  • May be temporarily stored in our database depending on form plugins used
  • Not shared with third parties except as necessary to respond to your enquiry

5.4 Cookies Set by WordPress

WordPress sets the following cookies:

  • wordpress_test_cookie – Checks if cookies are enabled
  • wordpress_logged_in_ – Used for authenticated users (if applicable)
  • wp-settings- – Customises WordPress interface for logged-in users
  • wordpress_sec_ – Security cookie for logged-in users

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our Website. They help us provide a better user experience and analyse site usage.

6.2 Types of Cookies We Use

Strictly Necessary Cookies:

  • Essential for Website functionality
  • Cannot be disabled without affecting site performance
  • Include WordPress session cookies and security cookies

Analytics Cookies:

  • Google Analytics cookies (see Section 7)
  • Help us understand visitor behaviour and improve our content

Functionality Cookies:

  • Remember your preferences and settings
  • Improve your browsing experience

Advertising Cookies (if applicable):

  • May be used if we display Google AdSense or similar advertisements
  • Track your browsing to show relevant ads

6.3 Managing Cookies

You can control and delete cookies through your browser settings:

Browser Cookie Settings:

  • Chrome: Settings > Privacy and Security > Cookies
  • Firefox: Options > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Cookies and Website Data
  • Edge: Settings > Cookies and Site Permissions

Note: Disabling cookies may affect Website functionality and your user experience.

When you first visit our Website, you’ll see a cookie banner requesting your consent for non-essential cookies. You can:

  • Accept all cookies
  • Reject non-essential cookies
  • Customise your cookie preferences

Your cookie preferences are stored for 12 months.

7. Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC (“Google”), to analyse Website traffic and user behaviour.

7.1 Data Collected by Google Analytics

Google Analytics collects:

  • How you use our Website (pages visited, time spent, interactions)
  • Information about your device and browser
  • Your approximate location (country/city level)
  • Referring websites and search terms

7.2 IP Anonymisation

We have enabled IP anonymisation (anonymizeIP) in Google Analytics. This means your IP address is truncated/anonymised before being processed, ensuring you cannot be personally identified.

7.3 Google Analytics Cookies

Google Analytics sets the following cookies:

  • _ga – Distinguishes unique users (expires after 2 years)
  • _gid – Distinguishes unique users (expires after 24 hours)
  • _gat – Throttles request rate (expires after 1 minute)

7.4 Data Retention

Google Analytics data is retained for 26 months, after which it is automatically deleted.

7.5 Opting Out of Google Analytics

You can opt-out of Google Analytics by:

7.6 Google’s Privacy Policy

For more information, read Google’s Privacy Policy: https://policies.google.com/privacy

8. Other Google Services

We may use additional Google services on our Website:

8.1 Google Fonts

  • We may use Google Fonts to enhance typography
  • Google may collect your IP address when loading fonts
  • Fonts may be loaded from Google’s servers or hosted locally
  • Google Fonts Privacy Policy: https://policies.google.com/privacy

8.2 Google AdSense (if applicable)

8.3 Google reCAPTCHA (if applicable)

  • We may use reCAPTCHA to protect forms from spam
  • Google collects hardware and software information and browser data
  • reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service

8.4 YouTube Embedded Videos (if applicable)

  • If we embed YouTube videos, YouTube may set cookies and collect data
  • We use YouTube’s privacy-enhanced mode when possible
  • YouTube Privacy Policy: https://policies.google.com/privacy

9. Third-Party Services and Plugins

Our Website may use third-party WordPress plugins and services, which may process your data:

Potential Third-Party Services:

  • Email marketing platforms (e.g., Mailchimp, ConvertKit) – if newsletters are enabled
  • Comment management systems (e.g., Disqus, Akismet for spam filtering)
  • Social media sharing buttons
  • Content delivery networks (CDNs)
  • Security plugins

Each third-party service has its own privacy policy. We encourage you to review their policies.

10. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your data in the following circumstances:

10.1 Service Providers

We may share data with trusted third-party service providers who assist us in:

  • Website hosting
  • Email delivery
  • Analytics and performance monitoring
  • Security and spam prevention
  • Payment processing (if applicable)

These providers are contractually obligated to protect your data and use it only for specified purposes.

We may disclose your information if required to:

  • Comply with legal obligations, court orders, or government requests
  • Enforce our terms and conditions
  • Protect our rights, property, or safety
  • Prevent fraud or illegal activity
  • Protect the rights and safety of others

10.3 Business Transfers

If ProfileLegacy is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will notify you of any such change and your options.

11. International Data Transfers

Your information may be transferred to and processed in countries outside Nigeria, including:

  • European Union – for Google services (GDPR-compliant)
  • United States – for Google and other service providers

When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by relevant authorities
  • Privacy Shield frameworks (where applicable)

12. Data Security

We implement appropriate technical and organisational security measures to protect your personal data, including:

  • SSL/TLS encryption for data transmission
  • Secure hosting infrastructure
  • Regular security updates and patches
  • Access controls and authentication
  • Regular backups
  • Firewalls and malware protection

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

13. Data Retention

We retain your personal data only for as long as necessary:

Comments: Retained indefinitely unless you request deletion
Contact Form Submissions: Retained for up to 2 years or until resolved
Email Correspondence: Retained as needed for communication purposes
Analytics Data: Retained for 26 months (Google Analytics setting)
Cookie Data: Varies by cookie type (see Section 6)
Newsletter Subscriptions: Until you unsubscribe

14. Your Rights Under GDPR and NDPR

You have the following rights regarding your personal data:

14.1 Right to Access (Article 15 GDPR)

You can request a copy of the personal data we hold about you.

14.2 Right to Rectification (Article 16 GDPR)

You can request correction of inaccurate or incomplete personal data.

14.3 Right to Erasure (“Right to be Forgotten”) (Article 17 GDPR)

You can request deletion of your personal data in certain circumstances.

14.4 Right to Restriction of Processing (Article 18 GDPR)

You can request that we limit how we use your personal data.

14.5 Right to Data Portability (Article 20 GDPR)

You can request a copy of your data in a structured, machine-readable format.

14.6 Right to Object (Article 21 GDPR)

You can object to processing of your personal data based on legitimate interests or for direct marketing.

14.7 Right to Withdraw Consent (Article 7 GDPR)

Where processing is based on consent, you can withdraw it at any time.

14.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority:

  • Nigeria: Nigeria Data Protection Commission (NDPC)
  • EU: Your national data protection authority

14.9 How to Exercise Your Rights

To exercise any of these rights, contact us at: Email: info@profilelegacy.com.ng

We will respond to your request within 30 days. We may request proof of identity to verify your request.

15. Children’s Privacy

Our Website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us, and we will delete it promptly.

Our Website may contain links to external websites not operated by us. We are not responsible for the privacy practices of third-party sites. We encourage you to review their privacy policies before providing any information.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes in our data practices
  • New legal requirements
  • New features or services

When we make significant changes, we will:

  • Update the “Last Updated” date at the top of this page
  • Notify you via email or a prominent notice on our Website (for material changes)
  • Request new consent where required by law

We encourage you to review this Privacy Policy periodically.

18. Do Not Track (DNT) Signals

Some browsers offer a “Do Not Track” (DNT) feature. Currently, there is no industry standard for responding to DNT signals. Our Website does not currently respond to DNT browser settings.

19. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

20. Data Protection Officer (DPO)

If required by law, we will appoint a Data Protection Officer. Currently, data protection enquiries should be directed to:

Email: info@profilelegacy.com.ng

21. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Profile Legacy
Email: info@profilelegacy.com.ng
Website: https://profilelegacy.com.ng/

We are committed to resolving any privacy concerns promptly and transparently.

Consent Statement:

By using our Website, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.

22. Additional Information for EU Users

If you are located in the European Union:

  • Our legal basis for processing is outlined in Section 4
  • You have the rights outlined in Section 14
  • You may lodge a complaint with your national supervisory authority
  • Data transfers outside the EU are protected by appropriate safeguards
  • Your data is processed in accordance with GDPR requirements

23. Additional Information for Nigerian Users

If you are located in Nigeria:

  • We comply with the Nigeria Data Protection Regulation (NDPR) 2019
  • You have the right to file a complaint with the Nigeria Data Protection Commission (NDPC)
  • Contact NDPC: https://ndpc.gov.ng/
  • Your data rights are protected under Nigerian law

This Privacy Policy is effective as of November 10, 2025.