Privacy Policy

The data controller responsible for your personal data is:

We may collect the following categories of personal data:

• Contact & Identity Data: Name, email address, phone number, company name — provided when you contact us, fill a form, or engage our services.
• Project & Communication Data: Project briefs, requirements, messages, and files you share with us during the course of our engagement.
• Payment Data: When you make a payment, you are redirected to Paystack, a PCI-DSS compliant payment processor. We do not store your card details. Paystack may collect your name, card number, billing address, and email for payment processing. See Paystack's Privacy Policy.
• Usage & Technical Data: IP address, browser type, pages visited, time spent — collected automatically via standard server logs and analytics tools to improve our website.
• AI Chat Data: Messages you submit to our AI assistant (Lou) are processed by Google Gemini and temporarily held in your browser's local storage. We do not store your chat history on our servers.

We use your personal data for the following purposes:

• To respond to your enquiries and provide our services (web development, mobile apps, AI automation, cloud solutions)
• To process payments securely through Paystack
• To send project updates, proposals, and invoices
• To improve our website and AI assistant based on usage patterns
• To comply with legal obligations under Nigerian law and applicable regulations
• To protect against fraud or misuse of our platform

We rely on the following lawful bases for processing: contract performance (to deliver the services you requested), legitimate interests (to improve our services and communicate effectively), and legal obligation (to comply with Nigerian law).

We work with the following third-party services that may process your data:

• Paystack — payment processing. View their Terms
• Google Gemini AI — powers our AI chat assistant (Lou). Messages are processed under Google's data policies.
• Vercel / Netlify / Railway — website hosting and deployment infrastructure.
• MongoDB / Firebase / Supabase — database services for applications we build or operate.
• Resend — transactional email delivery.

We only share the minimum data necessary and do not sell, rent, or trade your personal information to any third party.

We retain your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by Nigerian law. Typically:

• Client project data — retained for the duration of the engagement plus 5 years for audit and legal purposes
• Enquiry/contact data — retained for 2 years if no project engagement follows
• Payment records — retained as required by Nigerian tax and financial regulations
• AI chat history — stored only in your browser's local storage for up to 7 days, then automatically cleared

As a data subject under the Nigeria Data Protection Act 2023, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data where it is no longer necessary
• Object — object to processing based on legitimate interests
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at info@loukama.com. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include secure HTTPS connections, access controls, and encrypted storage where applicable. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Our website may use cookies and similar technologies to enhance your browsing experience and analyse site traffic. You can control cookie preferences through your browser settings. We do not use cookies for targeted advertising.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a child, please contact us immediately so we can delete it.

Some of our third-party service providers (e.g. Google, Vercel) are based outside Nigeria. Where we transfer data internationally, we ensure appropriate safeguards are in place in line with the NDPA 2023 and applicable standards, including contractual protections with service providers.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: