1. Introduction

This Privacy Policy describes how The Legacy Haus – TLH (“we”, “us”, “our”) collects, uses, discloses, retains, and protects personal data of users and visitors (“you”) via our website (https://www.tlh.com.ng) and related services. It explains your rights under Nigerian data protection laws (NDPR 2019 and NDPA 2023) and applies to personal data processed within Nigeria.

2. Who We Are

The Legacy Haus (TLH), located in Lagos, Nigeria, is the Data Controller responsible for processing data collected via our website in accordance with Nigerian law.

3. Definitions

Key terms used in this Privacy Policy document include:

• Personal Data: Any information relating to an identified or identifiable natural person (e.g. name, email, IP address).
• Sensitive Personal Data: Includes legal data, beliefs, biometric identifiers, etc.
• Processing: Any operation performed on personal data, such as collection, storage, retrieval, use, disclosure, erasure.

4. Types of Personal Data We Collect

We may collect the following data categories:

• Identity & Contact Data: Name, email, phone number, job title, address.
• Technical & Usage Data: IP address, browser/device information, pages visited, timestamps.
• Subscription/Interaction Data: Survey responses, newsletter sign‑ups, event registrations.

5. How We Collect Your Personal Data

We collect personal data:

• When you voluntarily provide it (e.g. contact forms, event registration, subscribing).
• Automatically via cookies and analytics when you browse our site.
• From third‑party sources (e.g. partners, publicly available sources) when relevant and lawful.

6. Legal Basis for Processing

Under Nigerian law, we rely on lawful bases including:

• Consent: Where you have explicitly agreed (e.g. receiving marketing emails).
• Legitimate Interests: To operate and improve our services, protect against fraud, and  communicate with you.
• Legal Obligation: To comply with applicable Nigerian laws.
• Contract: Where personal data is needed to fulfill contractual relationships.

7. Purposes of Processing

We process personal data to:

• Communicate with you (respond to inquiries, newsletters, updates).
• Organize, manage events and surveys.
• Personalize your experience on our website.
• Improve our content, marketing and technical infrastructure.
• Comply with legal, regulatory, or audit requirements.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When no longer needed, we securely anonymize and delete the data.

9. Data Security

We implement appropriate technical and organizational measures (access controls, encryption, secure storage) to protect your data from unauthorized access or breach. Access is limited to authorized personnel and vetted service providers.

10. Disclosure to Third Parties

Your data may be shared with:

• Trusted third‑party service providers (e.g. hosting, analytics, email service providers).
• Affiliates or partners for joint events or services.
• Legal or regulatory authorities when required by law or to protect our rights.
• Potential buyers in case of a merger, acquisition or business transfer. In such events, we will notify affected users. (ntloss.com)

Third‑party providers processing your data are contractually bound to uphold data protection standards consistent with ours.

11. International Transfers

If personal data is transferred outside Nigeria (e.g. to hosting or service providers abroad), we ensure appropriate safeguards are in place (NDPC‑approved standard contractual clauses or adequate‑level protections) in compliance with the NDPA 2023.

12. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and gather analytics. Essential cookies are required for core functionality; non‑essential cookies require your consent. You can disable cookies using your browser settings—though this may affect site performance.

13. Your Rights under Nigerian Law

Under NDPA 2023, you have the rights to:

• Access your personal data held by us.
• Rectify inaccurate or incomplete data.
• Request deletion (“right to be forgotten”) in certain circumstances.
• Restrict or object to processing.
• Receive a copy or transfer your data (data portability).
• Withdraw consent at any time.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if your rights are violated.

14. Exercising Your Rights

To exercise the above rights, please contact us via email here (info@tlh.com.ng). We may need to verify your identity and will respond within one week.

15. Changes to this Privacy Policy

This Privacy Policy is effective from today, 1^st August, 2025. We may periodically review and update this Policy to reflect changes in our processing activities or legal obligations. Material changes will be notified via our website here or email where required.

16. Complaints & Contact Information

If you have any privacy concerns or wish to file a complaint, please contact us here info@tlh.com.ng