Privacy Policy
Last updated: 4 November 2026
1. Who we are
This website, forgedesignmedia.com, is operated by FORGEDESIGN MEDIA LTD (“we”, “us”), a company registered with the Corporate Affairs Commission of Nigeria under RC 8989830, of Mansard Place, Bishop Aboyade Cole Street, Victoria Island, Lagos State, Nigeria. We provide graphic design, branding, animation, website design and content services. We are the data controller of your personal data under the Nigeria Data Protection Act 2023 (NDPA).
For privacy questions or requests, email info@forgedesignmedia.com.
2. Personal data we collect
- Quote and contact requests: your name, email, company, country, the service you are interested in, your project description, your budget range and any links you send us.
- Orders: your name, billing details, email, order contents and order history. If you create an account, we also keep your login details.
- Payment data: card and bank payments are processed by the payment provider shown at checkout. We do not receive or store your full card details. We do receive confirmation of payment and limited transaction data, such as the amount, date and the last four digits of your card.
- Project materials: briefs, logos, text, images and feedback that you send us for your project.
- Technical and cookie data: see section 7.
3. Why we use it and our lawful basis (NDPA s.25)
- To reply to enquiries, prepare quotes and proposals, and perform our contract with you, including delivering files and handling revisions. Basis: contract or steps you asked us to take before a contract.
- To process payments, prevent fraud, and keep accounting and tax records. Basis: legal obligation and legitimate interests.
- To keep the shop working, for example the cart, checkout and currency selection. Basis: legitimate interests and strictly necessary cookies.
- To understand where our orders come from (order attribution). Basis: consent, given through our cookie banner.
- To send marketing emails, only if you opt in. Basis: consent. You can withdraw it at any time.
4. Who we share it with
We share your data only with service providers who help us run the business, and only as far as they need it:
- our website host
- our payment provider
- our email provider
- the file-sharing and design tools we use to deliver your work (for example Google Drive, Canva or Figma)
We may also share it with professional advisers or authorities where the law requires. We do not sell personal data.
5. International transfers
Some of our providers process data outside Nigeria. Where they do, we rely on the safeguards in Part VIII of the NDPA, such as adequate protection, contractual safeguards or your consent.
6. How long we keep it
- Enquiries that do not lead to a project: up to 12 months.
- Order, invoice and contract records: as long as Nigerian tax and company law requires.
- Project files: up to 12 months after final delivery, unless we agree otherwise, so that we can re-send files. After that we delete or anonymise them.
7. Cookies
We use the following cookies:
| Cookie | Set by | Category | Purpose | Duration |
|---|---|---|---|---|
| Consent preference cookie | CookieAdmin | Necessary | Remembers your cookie choices | Up to 12 months |
| woocommerce_cart_hash, woocommerce_items_in_cart | WooCommerce | Necessary | Keep track of your cart | Session |
| wp_woocommerce_session_* | WooCommerce | Necessary | Links your cart and checkout to your session | Up to 2 days |
| Payment provider cookies | Payment provider (checkout only) | Necessary | Fraud prevention and secure payment | Set by the provider |
| wordpress_logged_in_*, wordpress_sec_* | WordPress | Necessary | Keep you logged in to your account | Session, or up to 14 days |
| Currency cookies (wmc_*) | WooCommerce Multi-Currency | Functional | Remember the display currency you chose | Short-term |
| sbjs_* | WooCommerce Order Attribution | Analytics | Record which website or campaign led to an order | Session, up to 6 months |
Non-necessary cookies are set only after you consent. You can change your choice at any time using Cookie settings in the footer. We do not use advertising cookies.
8. Your rights
Under the NDPA you have the right to:
- be informed
- access your data
- have it corrected or erased
- restrict or object to its processing
- receive it in a portable form (data portability)
- withdraw your consent
- not be subject to decisions made solely by automated processing
To use any of these rights, email info@forgedesignmedia.com. We will reply within 30 days. You can also complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
9. Security
We protect your data with:
- HTTPS on the whole site
- access controls on our accounts
- payment providers that meet PCI DSS
No system is completely secure. If a breach affects your data, we will notify the NDPC and you as the NDPA requires.
10. Children
Our services are for businesses and adults. We do not knowingly collect data from children under 18.
11. Changes
We may update this policy. The “Last updated” date at the top shows when it last changed.