Privacy Policy
Effective Date: 1 October 2026
Yorubuddy (“Yorubuddy”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal information submitted through Yorubuddy.com (the “Website”).
This Privacy Policy explains how we collect, use, store, disclose and protect personal information provided by visitors, artists, competition applicants, finalists, partners and other users of the Website.
This Privacy Policy is intended to operate in accordance with applicable Nigerian data-protection legislation, including the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations and guidance.
—
1. Who Controls Your Personal Data?
For purposes of applicable data-protection law, Yorubuddy may act as the data controller in relation to personal information collected through the Website.
Data Controller:
Yorubuddy Art Competition by the German Consulate in Nigeria, Lagos
Registered Address:
15, Walter Carrington Crescent, Victoria Island, Lagos
Email:.LAGO KU-100 Okeahialam, Udochukwu Odinaka <ku-100@lago.auswaertiges-amt.de>
Telephone: +234 817 260 3332
Where third-party service providers process information on our behalf, they may act as data processors or service providers, subject to the terms of our arrangements with them and applicable law.
—
2. Information We Collect
Depending on how you interact with the Website, we may collect the following categories of information.
A. Information You Provide Directly
This may include:
– Full name;
– Email address;
– Telephone number;
– Residential or business address where required;
– Date of birth or age where relevant to eligibility;
– Nationality or country of residence where relevant;
– Artist name;
– Artist biography;
– Artist statement;
– Social-media handles;
– Website or portfolio links;
– Artwork title;
– Artwork description;
– Artwork images;
– Photographs;
– Videos;
– Competition application information;
– Information required to contact finalists or winners; and
– Any other information you voluntarily provide.
We only request information that is reasonably necessary for the relevant purpose.
—
3. Information Collected Automatically
When you visit the Website, certain technical information may be collected automatically, including:
– IP address;
– Browser type;
– Device type;
– Operating system;
– Approximate location derived from technical information;
– Pages visited;
– Date and time of visits;
– Referring website;
– Website interaction information; and
– Technical information concerning the operation and security of the Website.
This information may be collected through server logs, analytics tools, cookies and similar technologies.
—
4. How We Use Your Information
We may process personal information for the following purposes:
Website Operation
To operate, maintain, secure and improve Yorubuddy.com.
Competition Administration
Where you enter the Yorubuddy Art Competition, to:
– Process your application;
– Verify eligibility;
– Review your submission;
– Contact you regarding your application;
– Select finalists;
– Organise finalist exhibitions;
– Contact finalists;
– Announce competition results;
– Administer prizes; and
– Maintain records of the Competition.
Communications
To respond to enquiries, requests and communications.
Where you have opted in, we may also send newsletters, announcements or information about Yorubuddy activities.
Publicity and Promotion
Where permitted under the applicable Competition Terms & Conditions or where you have otherwise given the required permission, we may use an artist’s name, biography, artwork images and related information to promote Yorubuddy, the Competition and exhibitions.
Security
To detect, investigate and prevent fraud, abuse, unauthorised access, security incidents and other unlawful activity.
Legal and Regulatory Compliance
To comply with applicable legal, regulatory and law-enforcement requirements.
—
5. Lawful Basis for Processing
Depending on the circumstances, we may rely on one or more lawful bases recognised under applicable data-protection law, including:
– Your consent;
– Performance of a contract or steps taken at your request before entering into a contract;
– Compliance with a legal obligation;
– Legitimate interests, where permitted by law; and
– Other lawful bases recognised under applicable legislation.
Where we rely on consent, you may withdraw your consent subject to applicable legal and contractual limitations.
Withdrawal of consent does not affect processing that took place lawfully before consent was withdrawn.
—
6. Competition Entries and Public Information
If you enter the Yorubuddy Art Competition, certain information may need to be used publicly if you become a finalist or winner.
This may include:
– Your name or artist name;
– Your biography;
– Your artwork title;
– Images of your artwork;
– Your artist statement;
– Competition-related photographs or recordings; and
– Your finalist or winner status.
The specific rights granted to Yorubuddy in relation to competition entries are set out in the Competition Terms & Conditions.
—
7. Sharing Personal Information
We may share personal information where reasonably necessary with:
– Members of the Competition Jury;
– Event and exhibition organisers;
– Website hosting providers;
– Website developers and technical service providers;
– Cloud storage providers;
– Email and communications providers;
– Competition administration providers;
– Professional advisers;
– Payment or prize fulfilment providers where applicable;
– Marketing, public-relations or media partners where appropriately authorised; and
– Government authorities, regulators or law-enforcement bodies where legally required.
We require appropriate third parties handling personal information on our behalf to maintain suitable confidentiality and security measures.
We do not sell your personal information.
—
8. Jury and Competition Review
Where you submit an artwork to the Yorubuddy Art Competition, relevant application information and artwork materials may be made available to authorised members of the Competition Jury for the purpose of evaluating your submission.
Jury members are expected to use information provided to them only for legitimate Competition purposes and in accordance with applicable confidentiality and data-protection requirements.
—
9. International Transfers
Some of our technology, hosting, communications or other service providers may process personal information outside Nigeria.
Where personal information is transferred outside Nigeria, we will take reasonable steps to ensure that the transfer and processing are conducted in accordance with applicable data-protection law and appropriate safeguards.
—
10. Data Security
We take reasonable technical and organisational measures designed to protect personal information against:
– Unauthorised access;
– Accidental loss;
– Destruction;
– Alteration;
– Unauthorised disclosure; and
– Other unlawful or unauthorised processing.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
You should therefore avoid submitting sensitive information through the Website unless it is specifically requested and appropriate for the relevant service.
—
11. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:
– Administering competitions;
– Maintaining appropriate Competition records;
– Providing requested services;
– Resolving disputes;
– Maintaining business and financial records;
– Complying with legal obligations; and
– Protecting our legitimate interests.
Retention periods may vary depending on the nature and purpose of the information.
Where personal information is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it, subject to applicable legal or legitimate retention requirements.
—
12. Cookies
Yorubuddy.com may use cookies and similar technologies.
These may include:
Necessary Cookies
Used to enable essential Website functionality and security.
Preference Cookies
Used to remember settings and preferences.
Analytics Cookies
Used to understand how visitors use the Website and help us improve its performance.
Marketing or Advertising Technologies
If used, these will be subject to applicable consent requirements and the relevant settings provided through the Website.
Where required by applicable law, non-essential cookies will only be activated after the appropriate user choice or consent has been obtained.
You may also be able to control cookies through your browser settings.
—
13. Your Data Protection Rights
Subject to applicable law and relevant conditions or exemptions, you may have rights including the right to:
– Be informed about how your personal data is processed;
– Request access to personal information we hold about you;
– Request correction of inaccurate or incomplete information;
– Request deletion or erasure of personal information in appropriate circumstances;
– Object to certain processing;
– Request restriction of processing in appropriate circumstances;
– Request portability of certain personal information;
– Withdraw consent where processing is based on consent;
– Request information about certain automated decision-making; and
– Lodge a complaint with the relevant data-protection supervisory authority.
The NDPC identifies these rights under the Nigeria Data Protection Act framework.
—
14. How to Exercise Your Rights
To exercise a data-protection right or ask a privacy-related question, contact:
Privacy Contact:
yorubuddyinfo@gmail.com
Subject: Data Protection Request – Yorubuddy
We may need to request additional information to verify your identity before responding to certain requests.
We will handle requests within the timeframes required by applicable law.
—
15. Children and Young Persons
The Website is not intended to knowingly collect personal information from children in circumstances where parental or guardian authorisation is legally required without obtaining the appropriate consent or authorisation.
Where a Competition permits participation by persons under the applicable age of consent, the Organisers may require a parent or legal guardian to provide consent and/or submit the application on the participant’s behalf.
If you believe that a child has provided personal information to us without the required authorisation, please contact us.
—
16. Third-Party Services
The Website may use third-party services for functions such as:
– Website hosting;
– Forms and submissions;
– Cloud storage;
– Analytics;
– Email;
– Payment processing;
– Security;
– Video or image hosting; and
– Event or competition administration.
These third parties may process personal information on our behalf or independently, depending on the service.
We encourage users to review the privacy policies of third-party services when appropriate.
—
17. External Links
The Website may contain links to third-party websites.
This Privacy Policy does not apply to third-party websites.
We encourage you to read the privacy policies of any external websites you visit.
—
18. Data Breaches
If we become aware of a personal-data breach, we will assess and respond to the incident in accordance with applicable law, including any applicable requirements concerning notification to regulators or affected individuals.
—
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:
– The Website;
– Our services;
– Data-processing practices;
– Technology;
– Applicable law; or
– Regulatory requirements.
The updated Privacy Policy will be published on Yorubuddy.com with a revised effective date.
—
20. Contact Us
For questions, complaints or requests concerning this Privacy Policy or the handling of your personal information, please contact:
Yorubuddy
Data Controller: UdochukwuOkeahialam
Address: 15 Walter Carrington Crescent
Email: .LAGO KU-100 Okeahialam, Udochukwu Odinaka <ku-100@lago.auswaertiges-amt.de>
Telephone: +234 817 260 3332
—
21. Regulatory Complaints
If you believe that your personal-data rights have been infringed and you are unable to resolve the matter directly with Yorubuddy, you may have the right to raise a complaint with the Nigeria Data Protection Commission (NDPC) or another competent supervisory authority, subject to applicable law.
The NDPC provides mechanisms for data-subject complaints and privacy grievances.
—
Last Updated: 1 October 2026