Privacy policy.

The data controller responsible for your personal data is:

We may collect the following categories of personal data:

• Contact & identity data: name, email address, phone number and company name — provided when you use our contact form, message us, or engage our services.
• Project & communication data: the service you are interested in, your budget, project briefs, requirements, messages, and files you share with us before and during an engagement.
• Payment data: when you make a payment, you are redirected to Paystack, a PCI-DSS compliant payment processor. We do not store your card details. Paystack may collect your name, card number, billing address, and email for payment processing. See Paystack's Privacy Policy.
• Account data: if you create an account or sign in on our website, your email address and sign-in details are handled by Google Firebase Authentication.
• Usage & technical data: IP address, browser type, pages visited and time spent — collected automatically through Google Analytics, Google Tag Manager and standard server logs, to understand how the website is used and improve it.
• AI chat data: messages you send our AI assistant (Lou) are sent to OpenAI to generate a reply, together with up to the last 12 messages of the same conversation so Lou can follow it. The conversation itself is saved only in your browser's local storage for up to 7 days — we do not store your chat transcript in our database. If, during a conversation, you ask to be put in touch with our team and confirm you're happy for us to do so, Lou will save the details you've shared (such as your name, contact details, and project description) as an enquiry in our database and notify our team by email, in the same way a contact form submission is handled. This only happens with your explicit agreement in the conversation. Those details are also added to a private Google Sheet our team uses to follow up. If you book a consultation call with Lou, your name, email address, the time you chose and any notes you share are added to our Google Calendar, and a confirmation is emailed to you.

We use your personal data for the following purposes:

• To respond to your enquiries and provide our services (web development, mobile apps, AI automation, cloud solutions)
• To notify our team by email when you submit the contact form, so we can reply quickly
• To process payments securely through Paystack
• To send project updates, proposals, and invoices
• To improve our website and AI assistant based on usage patterns
• To comply with legal obligations under Nigerian law and applicable regulations
• To protect against fraud or misuse of our platform

We rely on the following lawful bases for processing: contract performance (to deliver the services you requested), legitimate interests (to improve our services and communicate effectively), and legal obligation (to comply with Nigerian law).

We work with the following third-party services that may process your data:

• Paystack — payment processing. View their Terms
• OpenAI — powers our AI assistant (Lou). Messages are processed under OpenAI's privacy policy.
• Google Analytics & Google Tag Manager — website usage analytics.
• Google Calendar & Google Sheets — consultation calls booked through Lou, and a private copy of enquiries for our team to follow up.
• Google Firebase — account sign-in (authentication).
• Firebase Firestore — stores enquiries submitted through our contact form.
• Resend — email delivery, including forwarding contact form enquiries to our team inbox.
• Netlify — hosts this website. Client projects may also be hosted on Vercel or Railway.
• Supabase — database services for applications we build or operate for clients.

We only share the minimum data necessary and do not sell, rent, or trade your personal information to any third party.

We retain your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by Nigerian law. Typically:

• Client project data — retained for the duration of the engagement plus 5 years for audit and legal purposes
• Enquiry/contact data — including contact form submissions held in our database and team inbox — retained for 2 years if no project engagement follows
• Payment records — retained as required by Nigerian tax and financial regulations
• AI chat history — stored only in your browser's local storage for up to 7 days, then automatically cleared. You can clear it sooner with the “Clear” button in the chat.

As a data subject under the Nigeria Data Protection Act 2023, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data where it is no longer necessary
• Object — object to processing based on legitimate interests
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at info@loukama.com. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include secure HTTPS connections, access controls, and encrypted storage where applicable. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

This website uses cookies set by Google Analytics (for example _ga) to measure traffic and understand how pages are used. Our AI assistant also saves your conversation in your browser's local storage, as described above. We do not use cookies for targeted advertising.

You can block or delete cookies in your browser settings, or opt out of Google Analytics with Google's opt-out browser add-on.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a child, please contact us immediately so we can delete it.

Some of our third-party service providers (e.g. Google, Netlify, Firebase, Resend) are based outside Nigeria. Where we transfer data internationally, we ensure appropriate safeguards are in place in line with the NDPA 2023 and applicable standards, including contractual protections with service providers.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised “Last updated” date. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: