Privacy Policy

Effective Date: 14 December 2025
Last Updated: 14 December 2025

Introduction

Kuuk (“we”, “us”, “our”) operates the website https://kuuk.com.ng/ (the “Website”). We are committed to protecting your privacy and personal data in full compliance with the General Data Protection Regulation (GDPR), the Nigeria Data Protection Regulation (NDPR) 2019, the South African Protection of Personal Information Act (POPIA), and other applicable data protection laws.

This Privacy Policy explains in detail how we collect, use, store, share, and protect your personal information when you visit and interact with our Website. We encourage you to read this policy carefully to understand our practices regarding your data and your rights.

1. Data Controller and Contact Information

Data Controller: Kuuk
Email: chatwithphilip@kuuk.com.ng
Website: https://kuuk.com.ng/

For all enquiries, requests, or concerns regarding this Privacy Policy or our data protection practices, please contact us using the details above.

2. Our Commitment to E-E-A-T and Data Protection

As part of our commitment to Google’s Experience, Expertise, Authoritativeness, and Trustworthiness (E-E-A-T) principles, we:

  • Operate with complete transparency regarding data collection and usage
  • Implement robust security measures to protect your information
  • Respect your privacy rights under all applicable laws
  • Maintain the highest standards of data governance

3. Information We Collect

3.1 Personal Information You Provide Directly

Contact Forms and Email Communication: When you contact us, we may collect:

  • Full name
  • Email address
  • Subject line and message content
  • Any additional information you voluntarily provide in your communication

Newsletter Subscriptions (if applicable):

  • Email address
  • Name (if provided)
  • Subscription preferences
  • Date and time of subscription

Comments (if enabled via WordPress):

  • Name (or username)
  • Email address
  • Website URL (optional)
  • Comment content
  • Date and time of comment submission

Biography Suggestions and Submissions:

  • Information about suggested subjects
  • Your relationship to the subject (if disclosed)
  • Supporting documentation or sources you provide

3.2 Information Automatically Collected

When you visit our Website, we automatically collect certain technical and usage information:

Technical Information:

  • Internet Protocol (IP) address
  • Browser type and version
  • Operating system and platform
  • Device type (desktop, mobile, tablet)
  • Screen resolution
  • Device identifiers
  • Internet Service Provider (ISP)
  • Time zone settings and locale

Usage and Behavioural Data:

  • Pages and content viewed
  • Date, time, and duration of visits
  • Clickstream data and navigation paths
  • Referring website/source of traffic
  • Search queries performed on our site
  • Links clicked
  • Downloads or interactions with content
  • Exit pages

Location Information:

  • Approximate geographical location (country, region, city) derived from IP address
  • Language preferences

3.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies. Please see Section 7 for comprehensive details about our cookie practices.

4. How We Use Your Information

We process your personal data for the following specific purposes:

4.1 Website Operation and Service Delivery

  • To operate, maintain, and improve our Website functionality
  • To provide requested services and respond to enquiries
  • To deliver content personalised to your interests and browsing behaviour
  • To enable commenting and user interaction features
  • To process and respond to biography suggestions

4.2 Communication

  • To respond to your messages, questions, and requests
  • To send administrative emails (e.g., service updates, policy changes)
  • To send newsletters and content updates (only with explicit consent)
  • To notify you of responses to your comments
  • To acknowledge biography suggestions and provide feedback

4.3 Analytics and Website Improvement

  • To analyse how visitors use our Website
  • To understand user preferences and reading patterns
  • To identify popular content and optimize our editorial strategy
  • To monitor Website performance and identify technical issues
  • To conduct A/B testing for content and design improvements
  • To generate statistical reports and insights

4.4 Security and Fraud Prevention

  • To protect our Website from security threats and vulnerabilities
  • To detect, prevent, and respond to fraud or illegal activities
  • To identify and block spam, malicious bots, and abusive behaviour
  • To enforce our terms of service and policies
  • To protect our rights, property, and legitimate interests

4.5 Legal Compliance

  • To comply with applicable laws and regulations
  • To respond to legal requests, court orders, or government demands
  • To establish, exercise, or defend legal claims
  • To meet regulatory reporting requirements

4.6 Marketing (with Consent)

  • To send promotional content about new biographies and features (only if you opt-in)
  • To inform you about special features or content series
  • To conduct surveys or request feedback (with your permission)

5. Legal Basis for Processing (GDPR Compliance)

Under GDPR Article 6, we process your personal data based on the following lawful grounds:

5.1 Consent (Article 6(1)(a) GDPR)

We rely on your explicit consent for:

  • Newsletter subscriptions and marketing communications
  • Non-essential cookies and tracking technologies
  • Voluntary participation in surveys or feedback requests
  • Optional information sharing

You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

5.2 Legitimate Interests (Article 6(1)(f) GDPR)

We process data based on our legitimate interests for:

  • Website analytics and performance monitoring
  • Security measures and fraud prevention
  • Improving user experience and content quality
  • Responding to general enquiries
  • Operating and maintaining our Website infrastructure

We balance our legitimate interests against your rights and freedoms, ensuring no overriding impact on your privacy.

5.3 Legal Obligation (Article 6(1)(c) GDPR)

We process data to comply with:

  • Legal requirements under Nigerian, South African, and EU laws
  • Court orders, government requests, or regulatory demands
  • Tax and accounting obligations
  • Data protection and privacy regulations

5.4 Contractual Necessity (Article 6(1)(b) GDPR)

Where applicable, we process data to:

  • Provide services you specifically request
  • Fulfil our obligations under agreements with you

6. WordPress-Specific Data Processing

Our Website is built on WordPress, which involves specific data processing activities:

6.1 Comment System

When you post a comment on Kuuk:

  • Your name, email address, website URL (if provided), and comment content are stored in our WordPress database
  • Your IP address and browser user agent string are collected automatically for spam detection and moderation purposes
  • An anonymised hash of your email address may be sent to Gravatar (a third-party service) to retrieve your profile picture if you have one
  • Comments and associated metadata are retained indefinitely to maintain comment threads and enable effective moderation
  • You can request deletion of your comments at any time by contacting us

6.2 Media Uploads

If you upload images or media files (where applicable):

  • Location data (EXIF GPS coordinates) embedded in uploaded images may be visible to other Website visitors
  • We recommend removing embedded location data before uploading any images

6.3 WordPress Cookies

WordPress sets essential cookies for registered users and commenters:

  • wordpress_test_cookie – Checks whether your browser accepts cookies
  • wordpress_logged_in_[hash] – Maintains login session for authenticated users
  • wp-settings-[user_id] – Stores WordPress interface customisation
  • wordpress_sec_[hash] – Provides security authentication for logged-in users

These cookies are essential for WordPress functionality and cannot be disabled without affecting your ability to use certain features.

6.4 Contact Forms

Data submitted through contact forms is:

  • Sent directly to our email address (chatwithphilip@kuuk.com.ng)
  • May be temporarily stored in our database depending on form plugins used
  • Retained only as long as necessary to respond to your enquiry
  • Not shared with third parties except as necessary to address your request

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device (computer, smartphone, tablet) when you visit our Website. They enable us to recognise your device, remember your preferences, and analyse how you use our Website.

7.2 Types of Cookies We Use

Strictly Necessary Cookies: These cookies are essential for basic Website functionality and cannot be disabled:

  • Session management cookies
  • Security and authentication cookies
  • WordPress administrative cookies
  • Load balancing cookies

Performance and Analytics Cookies: These help us understand visitor behaviour and improve our Website:

  • Google Analytics cookies (see Section 8)
  • Page load performance monitoring
  • Error tracking and debugging

Functional Cookies: These enhance your experience by remembering your preferences:

  • Language and region settings
  • Display preferences (e.g., dark mode if implemented)
  • Previously viewed biographies or content

Advertising and Marketing Cookies (if applicable): These may be used for targeted advertising:

  • Google AdSense cookies (if we display ads)
  • Retargeting and remarketing cookies
  • Third-party advertising network cookies

7.3 Cookie Duration

  • Session Cookies: Temporary cookies deleted when you close your browser
  • Persistent Cookies: Remain on your device for a specified period (ranging from days to years)

7.4 Managing and Controlling Cookies

You have full control over cookies:

Browser Settings:

  • Google Chrome: Settings > Privacy and Security > Cookies and other site data
  • Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Cookies and website data
  • Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies

Cookie Consent Banner: When you first visit Kuuk, you’ll encounter a cookie consent banner allowing you to:

  • Accept all cookies
  • Reject non-essential cookies
  • Customise cookie preferences by category
  • Withdraw or change consent at any time

Important Note: Disabling certain cookies may limit Website functionality and affect your browsing experience.

7.5 Do Not Track (DNT) Signals

Some browsers offer “Do Not Track” settings. Currently, there is no universal industry standard for responding to DNT signals. Our Website does not currently respond to DNT browser signals, but you can manage cookies through your browser settings and our cookie consent tool.

8. Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC (“Google”), to analyse Website traffic, user behaviour, and content performance.

8.1 Data Collected by Google Analytics

Google Analytics collects and processes:

  • How you navigate and interact with our Website (pages viewed, time on page, bounce rate)
  • Your device and browser information (browser type, operating system, screen resolution)
  • Your approximate geographic location (country, region, city based on IP address)
  • Referring websites and traffic sources (search engines, social media, direct visits)
  • Demographic information and interests (if applicable and anonymised)

8.2 IP Anonymisation

We have enabled IP anonymisation (anonymizeIP feature) in Google Analytics. This means:

  • Your full IP address is truncated/anonymised before being processed
  • The last octet of your IP address is removed, making personal identification impossible
  • Data processing complies with GDPR requirements for anonymisation

8.3 Google Analytics Cookies

Google Analytics uses the following cookies:

  • _ga – Distinguishes unique visitors (expires after 2 years)
  • _gid – Distinguishes unique visitors (expires after 24 hours)
  • _gat – Throttles request rate to prevent server overload (expires after 1 minute)
  • gat_gtag[property-id] – Throttling cookie specific to our property

8.4 Data Retention Period

Google Analytics data is automatically deleted after 26 months from the date of collection.

8.5 Data Sharing with Google

We do not enable data sharing with Google for advertising purposes. Your Analytics data is used solely for our internal Website improvement purposes.

8.6 Opting Out of Google Analytics

You can opt-out of Google Analytics tracking through:

  • Our cookie consent banner (rejecting analytics cookies)
  • Installing the Google Analytics Opt-out Browser Add-on
  • Using browser privacy features, incognito mode, or ad-blocking extensions
  • Configuring your browser to block third-party cookies

8.7 Google’s Privacy Policy

For detailed information about Google’s data practices, please review:

9. Other Google Services

We may integrate additional Google services on our Website:

9.1 Google Fonts

  • Purpose: To enhance typography and improve visual presentation
  • Data Collected: Google may collect your IP address when loading fonts
  • Implementation: Fonts may be loaded from Google’s CDN or hosted locally on our servers
  • Privacy Policy: https://policies.google.com/privacy

9.2 Google AdSense (if applicable)

9.3 Google reCAPTCHA (if applicable)

  • Purpose: To protect forms from spam and automated abuse
  • Data Collected: Hardware/software information, IP address, mouse movements, and browser data
  • Subject to: Google Privacy Policy and Terms of Service
  • Privacy-Enhanced Mode: We use reCAPTCHA v3 where possible for minimal user disruption

9.4 YouTube Embedded Videos (if applicable)

  • Purpose: To embed biographical videos or related content
  • Data Collected: YouTube may set cookies and collect viewing data
  • Implementation: We use YouTube’s privacy-enhanced mode (youtube-nocookie.com) when embedding
  • Privacy Policy: https://policies.google.com/privacy

10. Third-Party Services and Integrations

Our Website may use additional third-party services:

10.1 Email Marketing Services (if applicable)

Examples: Mailchimp, ConvertKit, SendGrid

  • Purpose: Newsletter delivery and subscriber management
  • Data Shared: Email address, name, subscription preferences
  • Control: Unsubscribe links in every email

10.2 Comment Management and Spam Protection

Examples: Akismet, Disqus

  • Purpose: Spam filtering and comment moderation
  • Data Processed: Comment content, email address, IP address
  • Privacy Policies: Refer to respective service providers

10.3 Content Delivery Networks (CDN)

Examples: Cloudflare, Amazon CloudFront

  • Purpose: Fast, reliable content delivery and DDoS protection
  • Data Collected: IP address, browser information, request data
  • Purpose: Performance optimisation and security

10.4 Social Media Integration

  • Social Sharing Buttons: May allow social networks to track visits even without clicking
  • Implementation: We use privacy-respecting social sharing solutions where possible
  • Control: Browser extensions can block social media trackers

Each third-party service operates under its own privacy policy. We carefully vet all third-party partners but encourage you to review their privacy practices independently.

11. Data Sharing and Disclosure

We respect your privacy and do not sell, rent, or trade your personal information to third parties.

11.1 Service Providers and Processors

We share data with trusted third-party service providers who assist us in operating our Website:

  • Web Hosting Providers: Store Website files and databases
  • Email Services: Deliver communications and newsletters
  • Analytics Providers: Process usage data (e.g., Google Analytics)
  • Security Services: Protect against threats and spam
  • Payment Processors: Handle transactions (if applicable)

These providers are contractually obligated to:

  • Process data only for specified purposes
  • Implement appropriate security measures
  • Comply with data protection laws
  • Not use data for their own purposes

11.2 Legal Requirements and Law Enforcement

We may disclose your personal data if required to:

  • Comply with applicable laws, regulations, or legal processes
  • Respond to valid government requests, court orders, or subpoenas
  • Enforce our terms of service, policies, or user agreements
  • Protect our rights, property, safety, or that of our users
  • Detect, prevent, or address fraud, security, or technical issues
  • Prevent illegal activities or violations of law

11.3 Business Transfers

In the event of:

  • Merger, acquisition, or sale of all or part of our assets
  • Bankruptcy, liquidation, or similar proceedings
  • Corporate restructuring or reorganisation

Your personal data may be transferred to the acquiring entity. We will notify you via email and/or prominent Website notice before your data is transferred and becomes subject to a different privacy policy.

11.4 Aggregated and Anonymised Data

We may share aggregated, anonymised, or statistical data that cannot identify you personally:

  • Traffic statistics and demographics
  • Content performance metrics
  • Research and analysis reports
  • Industry trends and insights

This anonymised data does not constitute personal data under GDPR.

12. International Data Transfers

Your personal data may be transferred to and processed in countries outside Nigeria and South Africa, including:

  • European Union – For Google services (GDPR-compliant with adequate safeguards)
  • United States – For various service providers and cloud infrastructure
  • Other jurisdictions – Where our service providers operate

12.1 Safeguards for International Transfers

When transferring data internationally, we ensure appropriate safeguards:

  • Standard Contractual Clauses (SCCs): EU-approved contract terms ensuring GDPR-level protection
  • Adequacy Decisions: Transfers to countries deemed adequate by EU Commission
  • Privacy Shield (where applicable): Though invalidated, replaced by SCCs and enhanced measures
  • Binding Corporate Rules: For transfers within multinational organisations

12.2 Your Rights Regarding Transfers

You have the right to:

  • Request information about international transfers of your data
  • Object to transfers that don’t have adequate safeguards
  • Request a copy of safeguard documentation

13. Data Security

We implement comprehensive technical and organisational security measures to protect your personal data:

13.1 Technical Security Measures

  • SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted
  • Secure Hosting Infrastructure: Enterprise-grade servers with robust security protocols
  • Firewall Protection: Network-level firewalls block unauthorised access
  • Regular Security Updates: Timely installation of WordPress, plugin, and theme security patches
  • Malware Scanning: Automated detection and removal of malicious code
  • Intrusion Detection: Monitoring systems alert us to suspicious activity
  • Database Security: Encrypted databases with restricted access controls
  • Secure Backup Systems: Regular encrypted backups stored securely

13.2 Organisational Security Measures

  • Access Controls: Limited access to personal data on a need-to-know basis
  • Staff Training: Regular data protection and security awareness training
  • Confidentiality Agreements: All personnel sign confidentiality commitments
  • Incident Response Plan: Procedures for detecting, reporting, and responding to breaches
  • Vendor Management: Security assessments of third-party service providers
  • Regular Audits: Periodic review of security practices and controls

13.3 Security Limitations

Despite our best efforts:

  • No method of internet transmission is 100% secure
  • No data storage system is completely invulnerable
  • We cannot guarantee absolute security against all threats

We continually monitor, review, and update our security measures to address evolving risks.

13.4 Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms:

  • We will notify relevant supervisory authorities within 72 hours (as required by GDPR Article 33)
  • We will inform affected individuals without undue delay (as required by GDPR Article 34)
  • Notification will include the nature of the breach, likely consequences, and remedial measures

14. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

14.1 Specific Retention Periods

Website Comments:

  • Retained indefinitely to maintain comment threads and discussion continuity
  • Deleted upon your request

Contact Form Submissions and Email Correspondence:

  • Retained for up to 3 years or until the matter is resolved
  • Deleted earlier if no longer needed for the purpose collected

Newsletter Subscriptions:

  • Retained until you unsubscribe
  • Automatically deleted within 30 days of unsubscription

Analytics Data (Google Analytics):

  • Automatically deleted after 26 months

WordPress Logs and Technical Data:

  • Retained for 90 days for security and troubleshooting purposes

Cookie Data:

  • Duration varies by cookie type (from session-only to 2 years)
  • Detailed in Section 7.3

Legal or Compliance Records:

  • Retained as required by Nigerian, South African, or EU laws (typically 6-7 years for financial/tax records)

14.2 Deletion After Retention Period

Once the retention period expires, we securely delete or anonymise your personal data unless:

  • Legal obligations require longer retention
  • Ongoing legal proceedings necessitate preservation
  • You have exercised your right to erasure

15. Your Rights Under GDPR, NDPR, and POPIA

You have comprehensive rights regarding your personal data under applicable data protection laws:

15.1 Right to Access (GDPR Article 15, NDPR Section 8, POPIA Section 23)

  • Request confirmation of whether we process your personal data
  • Obtain a copy of your personal data
  • Receive information about how and why we process your data

15.2 Right to Rectification (GDPR Article 16, NDPR Section 9, POPIA Section 24)

  • Request correction of inaccurate or incomplete personal data
  • Supplement incomplete data with additional information

15.3 Right to Erasure / “Right to be Forgotten” (GDPR Article 17, NDPR Section 10)

Request deletion of your personal data when:

  • Data is no longer necessary for the purposes collected
  • You withdraw consent and there’s no other legal basis
  • You object to processing and there are no overriding legitimate grounds
  • Data has been unlawfully processed
  • Legal obligations require deletion

Exceptions: We may refuse erasure if retention is necessary for:

  • Legal compliance
  • Establishing, exercising, or defending legal claims
  • Archiving purposes in the public interest

15.4 Right to Restriction of Processing (GDPR Article 18, POPIA Section 25)

Request limitation of processing when:

  • You contest the accuracy of data (during verification period)
  • Processing is unlawful, but you prefer restriction over deletion
  • We no longer need the data, but you need it for legal claims
  • You’ve objected to processing (pending verification of legitimate grounds)

15.5 Right to Data Portability (GDPR Article 20)

  • Receive your personal data in a structured, commonly used, machine-readable format
  • Transmit your data directly to another controller where technically feasible
  • Applies only to data processed by automated means based on consent or contract

15.6 Right to Object (GDPR Article 21, POPIA Section 11)

Object to processing based on:

  • Legitimate interests: We must demonstrate compelling legitimate grounds that override your interests
  • Direct marketing: Absolute right to object at any time
  • Profiling: Object to automated decision-making that produces legal or similarly significant effects

15.7 Right to Withdraw Consent (GDPR Article 7(3))

  • Withdraw consent at any time where processing is based on consent
  • Withdrawal doesn’t affect lawfulness of processing before withdrawal
  • Easy mechanisms provided (e.g., unsubscribe links, contact email)

15.8 Right to Lodge a Complaint (GDPR Article 77, NDPR, POPIA)

File a complaint with supervisory authorities:

Nigeria:

South Africa:

European Union:

15.9 How to Exercise Your Rights

To exercise any of these rights:

Contact Us: Email: chatwithphilip@kuuk.com.ng

Include in Your Request:

  • Your full name and contact information
  • Specific right(s) you wish to exercise
  • Details to help us locate your data (e.g., email address used)
  • Any relevant dates or transactions
  • Proof of identity (to prevent unauthorised access)

Our Response Time:

  • We will respond within 30 days (GDPR) or one month (NDPR/POPIA)
  • Complex requests may require up to 60 days additional time
  • We will inform you of any delay and the reasons

No Fee:

  • Exercising your rights is free of charge
  • We may charge a reasonable fee for manifestly unfounded, excessive, or repetitive requests

16. Children’s Privacy

16.1 Age Restrictions

Our Website is not directed at, nor intended for use by, children under the age of 16 years (or the applicable age of digital consent in your jurisdiction).

16.2 No Knowing Collection

We do not knowingly:

  • Collect personal data from children under 16
  • Target content or advertising to children
  • Encourage children to provide personal information

16.3 Parental Notice

If you are a parent or legal guardian and believe your child has provided us with personal data:

  • Contact us immediately at chatwithphilip@kuuk.com.ng
  • We will investigate and delete the information promptly
  • Provide details to help us identify and remove the data

16.4 Age Verification

We do not implement age verification mechanisms, but rely on users’ honesty. By using our Website, you represent that you are at least 16 years old.

17. External Links and Third-Party Websites

17.1 Links to Other Sites

Our Website may contain hyperlinks to external websites, resources, or references not operated by Kuuk, including:

  • Source citations and references
  • Related content and additional reading
  • Social media platforms
  • Partner websites
  • Archival and historical resources

17.2 No Responsibility for Third Parties

We:

  • Do not control the content, privacy practices, or security of third-party sites
  • Are not responsible for data collection or processing by external sites
  • Do not endorse or assume liability for third-party websites
  • Cannot guarantee the accuracy, legality, or safety of external content

17.3 Review External Privacy Policies

Before providing personal information to any external website:

  • Review their privacy policy and terms of service
  • Understand how they collect, use, and protect your data
  • Make informed decisions about data sharing

17.4 Link Removal Requests

If you believe any external link is inappropriate, broken, or violates policies, please contact us for review.

18. Automated Decision-Making and Profiling

18.1 Limited Automated Processing

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you.

18.2 Analytics and Personalisation

We use automated tools for:

  • Website analytics (understanding visitor behaviour)
  • Content recommendations (suggesting related biographies)
  • Spam filtering (protecting comments and forms)

These activities do not constitute profiling under GDPR Article 22 as they don’t produce legal or similarly significant effects.

18.3 Your Right to Human Review

If we ever implement automated decision-making in the future:

  • We will provide clear notice
  • You will have the right to obtain human intervention
  • You can express your point of view and contest decisions

19. Changes and Updates to This Privacy Policy

19.1 Right to Modify

We reserve the right to update, modify, or replace this Privacy Policy at any time to reflect:

  • Changes in our data processing practices
  • New legal or regulatory requirements
  • Introduction of new features or services
  • Feedback from users or supervisory authorities
  • Industry best practices

19.2 Notification of Changes

For material changes that significantly affect your rights:

  • We will update the “Last Updated” date at the top of this policy
  • Provide prominent notice on our Website homepage
  • Send email notification to registered users (where applicable)
  • Request renewed consent where legally required

For minor changes (e.g., clarifications, corrections, formatting):

  • We will update the “Last Updated” date
  • Changes will take effect immediately upon posting

19.3 Continued Use

Your continued use of our Website after changes take effect constitutes acceptance of the updated Privacy Policy.

19.4 Review Periodically

We encourage you to:

  • Review this Privacy Policy periodically
  • Check the “Last Updated” date regularly
  • Contact us with questions about changes

20. Special Provisions for Different Jurisdictions

20.1 European Union (EU) / European Economic Area (EEA)

For users in the EU/EEA:

  • All GDPR provisions in this policy apply fully
  • You have the right to lodge complaints with your national supervisory authority
  • Data transfers outside the EU/EEA are protected by appropriate safeguards
  • We comply with principles of lawfulness, fairness, and transparency

20.2 Nigeria

For users in Nigeria:

  • We comply with the Nigeria Data Protection Regulation (NDPR) 2019
  • You can file complaints with the Nigeria Data Protection Commission (NDPC)
  • We adhere to NDPR principles of consent, lawfulness, and purpose limitation
  • Cross-border data transfers comply with NDPR Section 2.9

20.3 South Africa

For users in South Africa:

  • We comply with the Protection of Personal Information Act (POPIA)
  • You can lodge complaints with the Information Regulator South Africa
  • We process data lawfully, reasonably, and transparently
  • We honour your POPIA rights outlined in Section 15

20.4 Other Jurisdictions

For users in other countries:

  • We apply the strictest applicable data protection standards
  • We respect local privacy laws and regulations
  • Contact us for jurisdiction-specific information

21. California Privacy Rights (CCPA) – If Applicable

If you are a California resident (though our primary audience is African):

Your Rights Under CCPA:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of sale of personal information
  • Right to deletion of personal information
  • Right to non-discrimination for exercising CCPA rights

Our CCPA Compliance:

  • We do not sell personal information
  • We provide mechanisms to exercise your rights
  • Contact us at chatwithphilip@kuuk.com.ng for CCPA requests

22. Transparency and Accountability

22.1 Our Commitment

We are committed to:

  • Transparency: Clear, honest communication about data practices
  • Accountability: Taking responsibility for protecting your data
  • Compliance: Adhering to all applicable data protection laws
  • Continuous Improvement: Regularly reviewing and enhancing our practices

22.2 Data Protection Impact Assessments (DPIAs)

Where appropriate, we conduct DPIAs for:

  • New data processing activities
  • High-risk processing operations
  • Significant changes to existing processing

22.3 Records of Processing Activities

We maintain detailed records of our data processing activities as required by GDPR Article 30, including:

  • Purposes of processing
  • Categories of data subjects and personal data
  • Recipients of personal data
  • International transfers and safeguards
  • Retention periods
  • Security measures

22.4 Data Protection by Design and Default

We implement data protection principles throughout our systems:

  • Minimising data collection to what’s necessary
  • Pseudonymisation and encryption where appropriate
  • Ensuring ongoing confidentiality, integrity, and availability
  • Regular testing and evaluation of security measures

23. Contact Us and Data Protection Enquiries

For any questions, concerns, requests, or complaints regarding this Privacy Policy or our data protection practices:

Email: chatwithphilip@kuuk.com.ng
Website: https://kuuk.com.ng/
Subject Line: Privacy Enquiry / Data Protection Request

What to Include:

  • Your full name and contact information
  • Nature of your enquiry or request
  • Specific details (dates, emails, pages, etc.)
  • Any supporting documentation

Our Commitment:

  • We will acknowledge receipt within 2 business days
  • We will provide a substantive response within 30 days
  • Complex matters may require additional time with explanation
  • We treat all enquiries confidentially and seriously

24. Consent and Acknowledgement

By using Kuuk, you acknowledge and agree that:

✓ You have read and understood this Privacy Policy in its entirety
✓ You understand how we collect, use, store, and protect your personal data
✓ You consent to the processing of your data as described herein
✓ You are at least 16 years of age (or the applicable age in your jurisdiction)
✓ You understand your rights under applicable data protection laws
✓ You can withdraw consent or exercise your rights at any time

Thank you for trusting Kuuk with your personal information. We are committed to protecting your privacy, respecting your rights, and maintaining the highest standards of data protection.

For any concerns, please don’t hesitate to contact us at chatwithphilip@kuuk.com.ng

This Privacy Policy demonstrates our commitment to transparency, accountability, and compliance with GDPR, NDPR, POPIA, and international data protection standards. It forms part of our broader commitment to E-E-A-T principles and responsible data governance.