How we look after your data

Happidev is operated by Macpherson Dieze in Port Harcourt, Rivers State, Nigeria. We're the data controller for the personal data described in this policy, which follows the Nigeria Data Protection Act 2023 (NDPA).

For any privacy question or request, email hello@happidev.pro.

• Contact details: your name, email address, phone or WhatsApp number and business name.
• Project details: your goals, content, files and feedback.
• Messages: emails and WhatsApp conversations with us.
• Project briefs: the service, budget, timeline and details you send through our contact form.
• Newsletter: your email address, where on our website you subscribed and when you confirmed or unsubscribed.
• Call bookings: the name, email and answers you give when booking a call through Cal.com.
• Orders: the plan, extras, amounts and payment status of anything you buy through our checkout.
• Client accounts: your name, login email and password, which is stored scrambled (hashed) so nobody, including us, can read it, plus the sign-in sessions that keep you logged in.
• Payment records: amounts, dates and references. Card details are collected by Paystack or Payoneer, not by us.
• Technical data: basic information your browser sends, such as device type and approximate location, kept in our hosting provider's server logs.
• Usage data, only if you accept analytics cookies: pages you visit, how you found us, approximate location and device type, plus actions such as sending a brief or starting checkout.
• Error reports: when something breaks on our website, a technical report of the error, your browser and the page you were on. We don't attach your name, email, cookies or form contents.
• Preferences: your chosen currency and your cookie choice, saved in your own browser.

We only use your data when we have a lawful reason under section 25 of the NDPA:

• To reply to enquiries, prepare quotes and deliver your project, because it's needed for our contract with you.
• To send invoices and keep tax and accounting records, because the law requires it.
• To keep our website secure and working well, including fixing errors, because we have a legitimate interest in doing so.
• To understand how visitors use our website so we can improve it, only if you accept analytics cookies. You can withdraw consent at any time.
• To send The Happi Letter, our monthly newsletter, only after you've confirmed your subscription. You can withdraw consent at any time.

The Happi Letter is our monthly email with practical tips on websites, SEO and growing online. We use double opt-in: after you subscribe, we send one email asking you to confirm, and we only add you to the list once you do.

• Every email has a one-click unsubscribe link, and unsubscribing takes effect straight away.
• If you don't confirm, your sign-up is deleted automatically within 30 days.
• When you unsubscribe, we keep your email address marked as unsubscribed so we never email you again by mistake. Ask us and we'll delete it completely.
• We never sell or share the list, and we never add you to it without your consent.

When we build or look after your website, you're the data controller for your own customers' data and we act as your data processor. We only access that data to do the work you've asked for, keep it confidential and never use it for anything else.

The same applies when we run systems for a startup as its technical co-founder, product team or IT team. The startup stays the data controller, we act as its data processor under the Nigeria Data Protection Act 2023, and our partnership agreement sets out how that data is handled.

We never sell your data. We only share it with trusted providers that help us run our business:

• Vercel, which hosts this website
• MongoDB Atlas, which stores client accounts, orders, project briefs, bookings and newsletter subscriptions
• Resend, which sends our emails, including confirmations and the newsletter
• Cal.com, when you book a call
• Google Analytics, only if you accept analytics cookies
• Sentry, which records website errors so we can fix them
• Google (Gmail), which we use for email. We may move to Hostinger for business email, and we'll update this policy if we do.
• Paystack, which processes naira and card payments, and Payoneer, which processes US dollar invoices
• WhatsApp (Meta), when you message us there
• Professional advisers such as accountants or lawyers, where needed
• Authorities, only when the law requires it

Some of our providers store data outside Nigeria. We only use providers that offer an adequate level of protection, in line with sections 41 to 43 of the NDPA. If you're in the EU or UK, the same safeguards apply to your data.

• Enquiries and briefs that don't become projects: up to 24 months.
• Newsletter subscriptions: until you unsubscribe. Unconfirmed sign-ups: up to 30 days.
• Contracts, invoices and payment records: 6 years, for tax and accounting.
• Project files: for as long as we work together, then deleted or returned to you on request.
• Client accounts: for as long as we work together. Ask us and we'll close your account and delete its data, apart from records we must keep by law.

We keep your data in secure, password-protected accounts that only we can access, and all data sent to and from this website is encrypted.

If a data breach puts your information at risk, we'll report it to the Nigeria Data Protection Commission within 72 hours and let you know straight away if the risk to you is high.

Under sections 34 to 38 of the NDPA, you have the right to:

• know what data we hold about you and get a copy
• have incorrect data corrected
• have your data deleted
• receive your data in a format you can move to someone else
• object to how we use your data, or ask us to limit it
• withdraw consent at any time

To use any of these rights, email hello@happidev.pro. We'll respond within 72 hours.

If you're not happy with how we've handled your data, you can complain to the Nigeria Data Protection Commission.

We store your currency preference and your cookie choice in your browser so the site remembers them. These are needed for the site to work and don't track you.

With your consent, we use Google Analytics to see which pages help visitors and where they come from. It sets cookies starting with _ga that last up to 2 years. We never use advertising cookies, and Google Analytics doesn't load until you choose Accept.

You can change your choice at any time with the Cookie settings link at the bottom of every page. If you decline or withdraw consent, we stop analytics and remove its cookies.

The booking calendar on our contact page is provided by Cal.com, which may set its own cookies needed for booking, under Cal.com's privacy policy.

Our services are for businesses and adults. We don't knowingly collect data from anyone under 18.

We'll update this policy if the way we use data changes. The date at the top shows when it last changed.