Chumapp’s Privacy and Cookie Policy

Last updated: 2nd April, 2026

Welcome to CHUMAPP’S CREATIVE AND FREELANCE HUB (“CHUMAPP,” “we,” “us,” or “our”). We respect your privacy and are committed to protecting your personal data. This privacy and cookie policy explains how we protect your personal data when you visit our website, what cookies we use, and your privacy rights under applicable data protection laws, including the Nigeria Data Protection Act (NDPA).

1. Introduction

At CHUMAPP, we value your privacy. This policy explains how we handle your personal information when you interact with our website. We strive to protect your data in line with all relevant legal requirements and privacy regulations.

CHUMAPP’S CREATIVE AND FREELANCE HUB operates as the data controller responsible for your personal data.

2. What Data We Collect

We may collect the following types of personal data:

• Identity Data: Name, username, business name, or any other identifier you provide.
• Contact Data: Email address, phone number, and postal or business address.
• Technical Data: IP address, browser type and version, operating system, time zone, device type, and other technical data automatically collected when you access our website.
• Usage Data: Information about how you use our website, including pages visited, time spent, and navigation paths.
• Service Briefs & Enquiries: Information submitted when inquiring about or requesting our services (e.g., Web Design, Graphic Design, CAC Registration Assistance, Social Media Management, or Training).

3. How We Use Your Data

We use your personal data for the following purposes:

• Service Delivery: To respond to enquiries submitted through our contact form and to deliver our professional services.
• Legitimate Interests: To improve our website, understand user behavior through analytics, and ensure our marketing efforts are effective.
• Email Communications & Newsletters: We utilize Brevo as our third-party email automation platform to manage contact lists, send transactional messages, deliver client updates, and dispatch newsletters to subscribed users.
• Website Optimization & Analytics: We utilize Google Analytics (via Site Kit by Google) to track visitor numbers, measure traffic trends, and optimize user experience across our website pages.
• Legal Compliance: To meet our legal and regulatory obligations.

We do not sell your personal data to third parties.

4. Data Security

Your data security is paramount. We implement appropriate technical and organisational measures to prevent unauthorized access, loss, or misuse. This includes HTTPS SSL encryption, secure API integrations, and restricted access to data on a need-to-know basis. Our contact form is protected by automated security systems (such as Cloudflare Turnsile reCAPTCHA) to help prevent spam and abuse.

5. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected. Contact form submissions are retained for up to 24 months unless an active client or business relationship ensues. Analytics data is retained in aggregated, anonymised form.

6. Your Rights

Under applicable data protection law, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request the deletion of your personal data.
• Restriction: Request that we limit how we process your data.
• Objection: Object to our processing of your personal data.
• Data Portability: Request the transfer of your data in a structured, commonly used format.
• Withdrawal of Consent: Where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the email provided above.

7. Third-Party Links & Tools

Our website contains integrations and links to external platforms. We do not control these third parties and are not responsible for their privacy policies. We encourage you to review their policies when leaving our site.

8. Cookies We Use

Cookies are small text files stored on your device when you visit a website. We use the following cookies:

Essential Cookies

These are necessary for the website to function properly. They cannot be disabled.

Cookie	Provider	Purpose	Duration
chumapp-cookies-acknowledged	CHUMAPP	Remembers that you have acknowledged our cookie notice	Persistent
sib_cuid	Brevo	Stores unique visitor identifiers to link form submissions and track email sign-ups
session_id	CHUMAPP	Remembers active session navigation during your visit	Session

Analytics Cookies

These help us understand how visitors interact with our website by collecting and reporting information anonymously.

Cookie	Provider	Purpose	Duration
_ga	Google Analytics (Site Kit)	Distinguishes unique users by assigning a randomly generated number. Used to calculate visitor, session, and campaign data	2 years
_ga_<ID>	Google Analytics (Site Kit)	Used to persist session state across page views	2 years
_gid	Google Analytics (Site Kit)	Stores and updates a unique value for each page visited. Used to count and track pageviews	24 hours
_gat	Google Analytics (Site Kit)	Used to throttle request rate to limit data collection on high-traffic sites	1 minute

9. Managing Cookies

You can control and manage cookies in your browser settings. Most browsers allow you to:

• View what cookies are stored and delete them individually.
• Block third-party cookies.
• Block all cookies from specific sites.
• Delete all cookies when you close the browser.

Please note that blocking essential cookies may affect the functionality of some website features.

10. Tracking & Analytics

We use the following tools to understand how visitors use our website: Google Analytics 4 (via Site Kit): We use Site Kit to deploy GA4. GA4 operates with IP anonymization enabled to monitor overall traffic trends without identifying individual visitors.

Brevo: Manages our email communications and form processing. Brevo emails may contain tracking pixels to confirm email deliveries and open rates, allowing us to improve communication quality.

11. Data Protection Principles

We adhere to core data protection principles, ensuring your data is:

• Processed fairly, lawfully, and transparently.
• Collected for specified, explicit, and legitimate purposes.
• Adequate, relevant, and limited to what is necessary.
• Accurate and kept up to date.
• Stored only for as long as necessary.
• Processed securely using appropriate technical measures.

12. Updates & Contacts

We may update this policy periodically to reflect changes in our practices or for legal and regulatory reasons. The “Last updated” date at the top of this page indicates when the policy was most recently revised. We encourage you to review this policy regularly.