Privacy Policy

Last updated 5 August 2026Version 2.0

This policy explains how Lufodo Group ("Lufodo", "we", "us") collects, uses, stores and discloses personal data through lufodo.com and the services offered on it. It is written to comply with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation.

1. Who we are

Lufodo Group is a media and entertainment company incorporated in Nigeria (RC 391598), with its registered office at Glover Memorial Hall, 4 Customs Street, Marina, Lagos Island, Lagos. For the purposes of the NDPA, Lufodo Group is the data controller for personal data collected through this website.

2. What we collect

We only collect what we need to answer you and to run the services you ask for.

• Information you give us. Name, email address, telephone number, organisation, and the content of your message, when you complete the general enquiry, venue hire or admissions forms.
• Enquiry-specific details. For venue hire: event type, expected attendance, preferred dates and technical requirements. For admissions: area of interest and any previous experience you choose to share.
• Technical information. Standard server log data — IP address, browser type, operating system, referring page, and pages viewed — generated automatically when you visit.

We do not knowingly collect personal data from children under 18 through this website. We do not collect special-category data through this website, and ask that you do not send it to us via these forms.

3. Lawful basis for processing

Under section 25 of the NDPA we rely on the following bases:

• Consent — where you tick the consent box on a form, for us to hold your details and respond to your enquiry. You may withdraw consent at any time.
• Performance of a contract, or steps prior to a contract — where your enquiry concerns venue hire, admissions, a commission or a distribution arrangement.
• Legitimate interests — for the secure operation, maintenance and improvement of the website, balanced against your rights and freedoms.
• Legal obligation — where we are required to retain records for tax, corporate or regulatory purposes.

4. How we use your data

• To respond to and manage your enquiry, and route it to the correct team.
• To provide quotations, prospectuses, technical specifications and hire terms you have requested.
• To administer admissions, bookings and commissions where these proceed.
• To maintain the security and performance of the website.
• To meet our legal, accounting and regulatory obligations.

We do not sell, rent or trade personal data. We do not use your data for automated decision-making or profiling.

5. Cookies

This website does not set advertising, tracking or third-party analytics cookies. Where cookies are used they are strictly necessary for the operation of the site. If we introduce analytics or marketing cookies in future, we will present a consent banner allowing you to accept or decline non-essential cookies before any such cookie is set, and update this policy accordingly.

The site loads web fonts from Google Fonts and may embed video from YouTube on production pages. These third parties may receive your IP address when their content loads. Their handling of that data is governed by their own privacy policies.

6. Sharing your data

We share personal data only where necessary, and only with:

• Our operating partners — including Ciuci Consulting, our operations partner for Glover Memorial Hall, where your enquiry concerns the venue.
• Service providers — website hosting, email and CRM providers acting on our instructions as data processors under written terms.
• Regulators, auditors and legal advisers — where we are required or permitted by law to do so.

7. International transfers

Some of our service providers operate outside Nigeria. Where personal data is transferred outside Nigeria, we do so only where the recipient country provides an adequate level of protection as recognised by the Nigeria Data Protection Commission, or where appropriate safeguards — such as contractual clauses imposing equivalent obligations — are in place, in accordance with sections 41 to 43 of the NDPA.

8. How long we keep it

• General enquiries — 24 months from last contact, then deleted.
• Venue hire enquiries that do not proceed — 24 months from last contact.
• Contracted bookings, admissions and commissions — for the duration of the relationship and for 6 years afterwards, to meet statutory and tax record-keeping requirements.
• Server logs — 12 months.

9. Your rights

Under the NDPA you have the right to:

• be informed about how your data is used;
• request access to the personal data we hold about you;
• request rectification of inaccurate or incomplete data;
• request erasure of your data where there is no continuing lawful basis to hold it;
• request restriction of processing in certain circumstances;
• request portability of data you provided to us, in a structured, commonly used format;
• object to processing carried out on the basis of legitimate interests;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us using the details in section 12. We respond within 30 days. There is no charge unless a request is manifestly unfounded or excessive.

10. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including transport encryption (HTTPS), access controls, and restriction of access to personnel who need it to do their work. No system is perfectly secure, and we cannot guarantee absolute security of data transmitted over the internet.

11. Breach notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and will notify affected individuals without undue delay where the breach is likely to result in high risk.

12. Contact and complaints

For any question about this policy, or to exercise your rights, contact our data protection contact:

Data Protection Contact, Lufodo Group
Glover Memorial Hall, 4 Customs Street, Marina, Lagos Island, Lagos
info@lufodoproductions.com
+234 816 319 3736

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

13. Changes to this policy

We may update this policy from time to time. The current version and its date are shown at the top of this page. Where changes are material, we will highlight them on this page. Continued use of the website after a change constitutes acceptance of the revised policy.