Privacy Policy

Effective Date: 14 December 2025
Last Updated: 14 December 2025

Introduction

Nollybiography (“we”, “us”, “our”) operates the website https://nollybiography.com.ng/ (the “Website”). We are committed to protecting your privacy and personal data in full compliance with the General Data Protection Regulation (GDPR), the Nigeria Data Protection Regulation (NDPR) 2019, and all applicable data protection laws.

This Privacy Policy explains comprehensively how we collect, use, store, share, and protect your personal information when you visit and interact with our Website. We encourage you to read this policy carefully to understand our data practices and your rights.

1. Data Controller and Contact Information

Data Controller: Nollybiography
Email: info@nollybiography.com.ng
Website: https://nollybiography.com.ng/

For all enquiries, requests, or concerns regarding this Privacy Policy or our data protection practices, please contact us using the details above.

2. Our Commitment to E-E-A-T and Data Protection

As part of our commitment to Google’s Experience, Expertise, Authoritativeness, and Trustworthiness (E-E-A-T) principles, we:

  • Operate with complete transparency regarding data collection and usage
  • Implement robust security measures to protect your information
  • Respect your privacy rights under all applicable laws
  • Maintain the highest standards of data governance and ethical practices

3. Information We Collect

3.1 Personal Information You Provide Directly

Contact Forms and Email Communication: When you contact us via email or contact forms, we collect:

  • Full name
  • Email address
  • Subject line and message content
  • Any additional information you voluntarily include

Newsletter Subscriptions (if applicable):

  • Email address
  • Name (if provided)
  • Subscription date and preferences

Comments (if enabled via WordPress):

  • Name or username
  • Email address
  • Website URL (optional)
  • Comment content
  • Date and time of submission

Celebrity Biography Suggestions:

  • Suggested celebrity names
  • Supporting information or sources
  • Your contact details (if you choose to provide them)

3.2 Information Automatically Collected

When you visit our Website, we automatically collect:

Technical Information:

  • Internet Protocol (IP) address
  • Browser type and version
  • Operating system and device type
  • Screen resolution
  • Device identifiers
  • Internet Service Provider (ISP)
  • Time zone and language settings

Usage and Behavioural Data:

  • Pages visited and content viewed
  • Date, time, and duration of visits
  • Navigation paths and clickstream data
  • Referring website or traffic source
  • Search queries on our site
  • Links clicked
  • Celebrity profiles viewed

Location Information:

  • Approximate geographic location (country, region, city) based on IP address

3.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies. Please see Section 7 for comprehensive details.

4. How We Use Your Information

We process your personal data for the following purposes:

4.1 Website Operation and Service Delivery

  • To operate, maintain, and improve Website functionality
  • To provide content and services you request
  • To respond to enquiries and communications
  • To enable commenting and user interaction
  • To process biography suggestions

4.2 Communication

  • To respond to your messages and questions
  • To send administrative updates and service notifications
  • To send newsletters (only with explicit consent)
  • To acknowledge and respond to feedback

4.3 Analytics and Website Improvement

  • To analyse visitor behaviour and preferences
  • To understand which celebrity biographies are most popular
  • To optimise content and user experience
  • To monitor Website performance
  • To identify and fix technical issues
  • To generate statistical insights

4.4 Security and Fraud Prevention

  • To protect against security threats and abuse
  • To detect and prevent spam and malicious activity
  • To enforce our terms and policies
  • To protect our rights and legitimate interests

4.5 Legal Compliance

  • To comply with applicable laws and regulations
  • To respond to legal requests and court orders
  • To establish, exercise, or defend legal claims

4.6 Marketing (with Consent)

  • To send promotional content about new biographies (only if you opt-in)
  • To inform you about new celebrity profiles and features
  • To conduct surveys with your permission

5. Legal Basis for Processing (GDPR Compliance)

Under GDPR Article 6, we process your personal data based on:

5.1 Consent (Article 6(1)(a) GDPR)

  • Newsletter subscriptions
  • Marketing communications
  • Non-essential cookies
  • Voluntary feedback participation

You can withdraw consent at any time.

5.2 Legitimate Interests (Article 6(1)(f) GDPR)

  • Website analytics and improvement
  • Security and fraud prevention
  • Responding to enquiries
  • Operating and maintaining our Website

We balance our interests against your rights and freedoms.

5.3 Legal Obligation (Article 6(1)(c) GDPR)

  • Complying with Nigerian and EU laws
  • Responding to legal requests
  • Meeting regulatory requirements

5.4 Contractual Necessity (Article 6(1)(b) GDPR)

  • Providing services you request
  • Fulfilling our obligations to you

6. WordPress-Specific Data Processing

Our Website is built on WordPress:

6.1 Comment System

When you comment:

  • Your name, email, website URL, and comment are stored in our database
  • Your IP address and browser user agent are collected for spam detection
  • An anonymised hash of your email may be sent to Gravatar for profile pictures
  • Comments are retained indefinitely unless you request deletion

6.2 Media Uploads

If applicable:

  • Location data (EXIF GPS) in uploaded images may be visible
  • We recommend removing location data before uploading

6.3 WordPress Cookies

WordPress sets essential cookies:

  • wordpress_test_cookie – Checks cookie functionality
  • wordpress_logged_in_ – Maintains login sessions
  • wp-settings- – Stores user preferences
  • wordpress_sec_ – Security authentication

6.4 Contact Forms

  • Data is sent to our email
  • May be temporarily stored in our database
  • Retained only as long as necessary
  • Not shared with third parties

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our Website, helping us provide better service and analyse usage.

7.2 Types of Cookies We Use

Strictly Necessary Cookies: Essential for Website functionality:

  • Session management
  • Security and authentication
  • WordPress administrative functions

Analytics Cookies:

  • Google Analytics (see Section 8)
  • Performance monitoring
  • User behaviour analysis

Functional Cookies:

  • Remember your preferences
  • Language and display settings
  • Previously viewed content

Advertising Cookies (if applicable):

  • Google AdSense (if we display ads)
  • Targeted advertising
  • Remarketing

7.3 Cookie Duration

  • Session Cookies: Deleted when you close your browser
  • Persistent Cookies: Remain for specified periods (days to years)

7.4 Managing Cookies

Control cookies through:

Browser Settings:

  • Chrome: Settings > Privacy and Security > Cookies
  • Firefox: Options > Privacy & Security > Cookies
  • Safari: Preferences > Privacy > Cookies
  • Edge: Settings > Cookies and site permissions

Cookie Consent Banner: On first visit, you can:

  • Accept all cookies
  • Reject non-essential cookies
  • Customise preferences
  • Change preferences anytime

Note: Disabling cookies may affect Website functionality.

7.5 Do Not Track (DNT)

We currently do not respond to DNT signals, but you can manage cookies through browser settings.

8. Google Analytics

We use Google Analytics to analyse Website traffic and user behaviour.

8.1 Data Collected

Google Analytics collects:

  • How you use our Website (pages viewed, time spent)
  • Device and browser information
  • Approximate location (country/city)
  • Referring websites and search terms
  • Which celebrity biographies you view

8.2 IP Anonymisation

We’ve enabled IP anonymisation (anonymizeIP):

  • Your IP address is truncated before processing
  • Personal identification is impossible
  • GDPR-compliant anonymisation

8.3 Google Analytics Cookies

  • _ga – Distinguishes users (expires after 2 years)
  • _gid – Distinguishes users (expires after 24 hours)
  • _gat – Throttles requests (expires after 1 minute)

8.4 Data Retention

Google Analytics data is automatically deleted after 26 months.

8.5 Opting Out

You can opt-out by:

8.6 Google’s Privacy Policy

Review Google’s practices: https://policies.google.com/privacy

9. Other Google Services

We may use additional Google services:

9.1 Google Fonts

9.2 Google AdSense (if applicable)

9.3 Google reCAPTCHA (if applicable)

  • Protects forms from spam
  • Collects hardware/software information and browser data
  • Subject to Google’s Privacy Policy

9.4 YouTube Embedded Videos (if applicable)

  • May embed celebrity interviews or related content
  • YouTube sets cookies and collects data
  • We use privacy-enhanced mode when possible
  • Privacy Policy: https://policies.google.com/privacy

10. Third-Party Services and Integrations

We may use additional third-party services:

10.1 Email Marketing (if applicable)

Examples: Mailchimp, ConvertKit

  • Newsletter delivery and management
  • Data shared: Email, name, preferences
  • Control: Unsubscribe links provided

10.2 Comment Management

Examples: Akismet, Disqus

  • Spam filtering and moderation
  • Data processed: Comments, email, IP address

10.3 Content Delivery Networks (CDN)

Examples: Cloudflare

  • Fast content delivery
  • Security and DDoS protection
  • Data collected: IP address, browser info

10.4 Social Media Integration

  • Social sharing buttons
  • May track visits even without clicking
  • We use privacy-respecting solutions where possible

Each third-party service has its own privacy policy. We encourage you to review them.

11. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information.

11.1 Service Providers

We share data with trusted providers who assist us:

  • Web hosting
  • Email delivery
  • Analytics processing
  • Security services
  • Payment processing (if applicable)

Providers are contractually obligated to protect your data and use it only for specified purposes.

11.2 Legal Requirements

We may disclose data to:

  • Comply with laws and regulations
  • Respond to court orders or legal requests
  • Enforce our terms and policies
  • Protect our rights and safety
  • Prevent fraud or illegal activity

11.3 Business Transfers

If Nollybiography undergoes merger, acquisition, or asset sale:

  • Your data may be transferred
  • We will notify you of changes
  • You’ll be informed of your options

11.4 Aggregated Data

We may share anonymised, aggregated data that cannot identify you personally:

  • Traffic statistics
  • Popular celebrity profiles
  • Usage trends
  • Research insights

12. International Data Transfers

Your data may be transferred to and processed in countries outside Nigeria, including:

  • European Union – For Google services (GDPR-compliant)
  • United States – For service providers
  • Other jurisdictions – Where our partners operate

12.1 Safeguards

We ensure appropriate safeguards:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Enhanced security measures
  • GDPR-level protection

12.2 Your Rights

You can:

  • Request information about transfers
  • Object to inadequately protected transfers
  • Request safeguard documentation

13. Data Security

We implement comprehensive security measures:

13.1 Technical Security

  • SSL/TLS Encryption: All data transmission encrypted
  • Secure Hosting: Enterprise-grade servers
  • Firewall Protection: Network-level security
  • Regular Updates: Timely security patches
  • Malware Scanning: Automated detection
  • Intrusion Detection: Suspicious activity monitoring
  • Database Security: Encrypted with access controls
  • Secure Backups: Regular encrypted backups

13.2 Organisational Security

  • Access Controls: Limited data access
  • Staff Training: Data protection awareness
  • Confidentiality Agreements: All personnel bound
  • Incident Response: Breach detection and response procedures
  • Vendor Management: Third-party security assessments
  • Regular Audits: Security practice reviews

13.3 Security Limitations

Despite our efforts:

  • No internet transmission is 100% secure
  • No storage system is completely invulnerable
  • We cannot guarantee absolute security

We continuously monitor and update security measures.

13.4 Data Breach Notification

If a breach occurs:

  • We’ll notify authorities within 72 hours (GDPR Article 33)
  • We’ll inform affected individuals without delay (GDPR Article 34)
  • Notification includes breach nature, consequences, and remedial measures

14. Data Retention

We retain data only as long as necessary:

14.1 Specific Retention Periods

Comments:

  • Retained indefinitely unless you request deletion

Contact Forms and Emails:

  • Retained for up to 3 years or until resolved

Newsletter Subscriptions:

  • Until you unsubscribe
  • Deleted within 30 days of unsubscribing

Analytics Data:

  • Deleted after 26 months (Google Analytics)

WordPress Logs:

  • Retained for 90 days for security

Cookie Data:

  • Duration varies (session to 2 years)

Legal Records:

  • As required by Nigerian and EU laws (typically 6-7 years)

14.2 Post-Retention Deletion

After retention periods expire, we securely delete or anonymise data unless:

  • Legal obligations require retention
  • Ongoing legal proceedings necessitate preservation
  • You’ve exercised right to erasure

15. Your Rights Under GDPR and NDPR

You have comprehensive rights regarding your personal data:

15.1 Right to Access (GDPR Article 15, NDPR Section 8)

  • Confirm whether we process your data
  • Obtain a copy of your personal data
  • Receive information about processing

15.2 Right to Rectification (GDPR Article 16, NDPR Section 9)

  • Correct inaccurate or incomplete data
  • Supplement incomplete information

15.3 Right to Erasure / “Right to be Forgotten” (GDPR Article 17, NDPR Section 10)

Request deletion when:

  • Data no longer necessary
  • You withdraw consent
  • You object with no overriding grounds
  • Data unlawfully processed
  • Legal obligations require deletion

Exceptions: We may refuse if retention necessary for legal compliance or defending claims.

15.4 Right to Restriction (GDPR Article 18)

Limit processing when:

  • You contest data accuracy
  • Processing is unlawful
  • We no longer need data, but you need it for claims
  • You’ve objected (pending verification)

15.5 Right to Data Portability (GDPR Article 20)

  • Receive data in structured, machine-readable format
  • Transmit data to another controller
  • Applies to automated processing based on consent or contract

15.6 Right to Object (GDPR Article 21)

Object to processing based on:

  • Legitimate interests
  • Direct marketing (absolute right)
  • Profiling

15.7 Right to Withdraw Consent (GDPR Article 7(3))

  • Withdraw consent anytime
  • Doesn’t affect prior lawful processing
  • Easy mechanisms provided

15.8 Right to Lodge Complaint (GDPR Article 77, NDPR)

Nigeria:

European Union:

15.9 How to Exercise Your Rights

Contact Us: Email: info@nollybiography.com.ng

Include:

  • Full name and contact information
  • Specific right(s) you wish to exercise
  • Details to locate your data
  • Proof of identity

Response Time:

  • Within 30 days (GDPR/NDPR)
  • Complex requests may need additional 60 days
  • We’ll inform you of delays

No Fee:

  • Exercising rights is free
  • We may charge for manifestly unfounded or excessive requests

16. Children’s Privacy

16.1 Age Restrictions

Our Website is not directed at children under 16 years of age.

16.2 No Knowing Collection

We do not knowingly:

  • Collect data from children under 16
  • Target content to children
  • Encourage children to provide information

16.3 Parental Notice

If you believe your child provided us with data:

  • Contact us immediately at info@nollybiography.com.ng
  • We’ll investigate and delete promptly
  • Provide details to help identify and remove data

17. External Links and Third-Party Websites

17.1 Links to Other Sites

Our Website may link to external sites including:

  • Celebrity social media profiles
  • News sources and references
  • Industry databases
  • Partner websites

17.2 No Responsibility

We:

  • Don’t control third-party content or practices
  • Aren’t responsible for external data collection
  • Don’t endorse third-party websites
  • Can’t guarantee external content accuracy

17.3 Review External Policies

Before providing information to external sites:

  • Review their privacy policies
  • Understand their data practices
  • Make informed decisions

18. Automated Decision-Making and Profiling

18.1 Limited Automated Processing

We do not engage in automated decision-making that produces legal effects or significantly affects you.

18.2 Analytics and Personalisation

We use automated tools for:

  • Website analytics
  • Content recommendations (related biographies)
  • Spam filtering

These don’t constitute profiling under GDPR Article 22.

19. Changes to This Privacy Policy

19.1 Right to Modify

We may update this policy to reflect:

  • Changes in data practices
  • New legal requirements
  • New features or services
  • Industry best practices

19.2 Notification of Changes

For material changes:

  • Updated “Last Updated” date
  • Prominent Website notice
  • Email notification (where applicable)
  • Renewed consent if required

For minor changes:

  • Updated “Last Updated” date
  • Immediate effect upon posting

19.3 Continued Use

Continued Website use after changes constitutes acceptance.

19.4 Review Periodically

We encourage you to:

  • Review this policy regularly
  • Check the “Last Updated” date
  • Contact us with questions

20. Special Provisions for Different Jurisdictions

20.1 Nigeria

For Nigerian users:

  • We comply with NDPR 2019
  • File complaints with NDPC
  • We adhere to NDPR principles
  • Cross-border transfers comply with NDPR Section 2.9

20.2 European Union (EU) / EEA

For EU/EEA users:

  • All GDPR provisions apply fully
  • Lodge complaints with national authorities
  • Transfers protected by appropriate safeguards
  • Lawfulness, fairness, and transparency principles

20.3 Other Jurisdictions

For users elsewhere:

  • We apply strictest applicable standards
  • Respect local privacy laws
  • Contact us for jurisdiction-specific information

21. Transparency and Accountability

21.1 Our Commitment

We commit to:

  • Transparency: Clear communication about data practices
  • Accountability: Responsibility for protecting data
  • Compliance: Adherence to all applicable laws
  • Continuous Improvement: Regular practice reviews

21.2 Data Protection Impact Assessments

We conduct DPIAs for:

  • New processing activities
  • High-risk operations
  • Significant processing changes

21.3 Records of Processing

We maintain detailed records including:

  • Processing purposes
  • Data categories
  • Recipients
  • International transfers
  • Retention periods
  • Security measures

21.4 Data Protection by Design

We implement protection principles:

  • Minimising collection to necessities
  • Pseudonymisation and encryption
  • Ongoing confidentiality and availability
  • Regular security testing

22. Contact Us and Data Protection Enquiries

For questions, concerns, or requests:

Email: info@nollybiography.com.ng
Website: https://nollybiography.com.ng/
Subject: Privacy Enquiry / Data Protection Request

Include:

  • Full name and contact information
  • Nature of enquiry or request
  • Specific details
  • Supporting documentation

Our Commitment:

  • Acknowledge within 2 business days
  • Substantive response within 30 days
  • Complex matters may need additional time
  • All enquiries treated confidentially

23. Consent and Acknowledgement

By using Nollybiography, you acknowledge:

✓ You’ve read and understood this Privacy Policy
✓ You understand our data collection and processing
✓ You consent to processing as described
✓ You’re at least 16 years of age
✓ You understand your rights
✓ You can withdraw consent or exercise rights anytime

Thank you for trusting Nollybiography with your personal information. We’re committed to protecting your privacy, respecting your rights, and maintaining the highest data protection standards.

For any concerns, contact us at info@nollybiography.com.ng