1. Introduction

Welcome to Creativo El Matador Consulting Services (“we,” “us,” or “our”). This Privacy Policy explains how we collect, use, process, and protect your personal data when you visit our website (elmatador.org).

We are committed to safeguarding your privacy in strict compliance with the Nigeria Data Protection Act (NDPA) 2023 and the regulatory frameworks established by the Nigeria Data Protection Commission (NDPC).

2. Information We Collect

Through the standard technical operation of our website, we automatically collect certain digital footprints:

• Analytics & Usage Data: We use third-party analytics tools to track basic website traffic. This automatically collects non-identifiable information such as your IP address, browser type, device information, geographic region, and how you interact with our pages.

• Security Logs: To protect our website infrastructure from malicious activity, brute-force attacks, and spam, our automated security systems monitor and log IP addresses and login attempts.

• Cookies & Performance Data: We utilize cookies through our caching and optimization infrastructure to ensure fast page-loading speeds and proper site functionality.

3. Lawful Basis for Processing

We collect automated background data, our processing relies on Legitimate Interest:

• Website Security: Logging IP addresses is necessary to prevent fraud, block unauthorized access, and ensure the integrity of our web infrastructure.

• Website Analytics: Understanding generalized visitor traffic helps us improve user experience and optimize our digital content.

4. How We Share and Store Your Data

We do not sell, rent, or trade your personal data. We only share necessary diagnostic or usage data with our essential third-party service providers:

• Infrastructure Processors: Automated data is processed by our secure hosting, analytics, and website optimization partners strictly for delivering performance and security services.

• Data Backups: We maintain secure, encrypted site backups using automated cloud services to ensure business continuity and disaster recovery.

• Cross-Border Transfers: Some of our third-party infrastructure partners process data on servers located outside of Nigeria. We ensure these processors maintain adequate safeguards (such as standard contractual clauses) that align with NDPC standards for international data transfers.

5. Data Retention

We retain automatically collected analytics and security logs only for as long as necessary to fulfill the purposes outlined in this policy. Once this data is no longer required for security monitoring or statistical analysis, it is routinely and securely erased from our servers.

6. Your Rights as a Data Subject

You are guaranteed specific rights regarding your personal data:

• Right to be Informed: To know exactly how and why your data is being processed, as outlined in this document.

• Right of Access: To request confirmation of processing and access the personal data we hold about you.

• Right to Rectification: To request the correction of inaccurate or incomplete personal data.

• Right to Erasure: To request the deletion of your personal data where there is no compelling or legal reason for its continued processing.

• Right to Object: To object to the processing of your data when it is based on legitimate interests.

7. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or need to contact our Data Protection Officer (DPO), please reach out to us:

Creativo El Matador Group

• Email: info@elmatador.org

• Phone: +234 905 912 6205