Privacy Policy

Gravity Concepts ("we", "our", "us") is a creative and technology studio operating in Anambra State, Nigeria. We provide graphic design, print production, web design and development, and hosting and maintenance services to clients across Nigeria and globally.

This Privacy Policy applies to all information collected when you visit gravity-concepts.com, submit an enquiry, request a quote, or engage any of our services — whether initiated via our website, WhatsApp, email, phone, or in person. By using our website or submitting your information, you agree to the practices described in this policy.

We are committed to handling your data with integrity, transparency, and the care it deserves. We do not sell your data. We do not run advertising networks. We use your information only to deliver and improve our services.

We collect information in three ways: directly from you, automatically when you browse our site, and occasionally from third parties involved in delivering our services.

A. Information you provide directly

• Full name, email address, and phone number
• Company or business name and industry
• Service type requested — design, print, web, or hosting
• Project details, requirements, creative briefs, and reference files
• Budget range and timeline preferences
• Brand assets, logos, images, and copy you share with us
• Communication history — messages, email threads, WhatsApp conversations, and call notes

B. Information collected automatically

When you visit our website, we may automatically collect basic technical data to help us understand site performance and improve the user experience. This includes:

• Approximate device type (mobile, desktop, tablet) and operating system
• Browser type and version
• Pages visited, time on page, and navigation paths
• Referring URLs (how you arrived at our site)
• General geographic location (country/city level — not precise GPS data)

C. Information we do not collect

We do not collect payment card numbers, bank account details, or government-issued identity numbers through our website. Payment discussions and transactions are handled directly through agreed secure channels. We do not process payments on our website.

Every piece of information we collect has a clear and specific purpose. We use it to:

• Respond to enquiries and prepare accurate, detailed project quotes
• Deliver design, print, web development, and hosting services
• Communicate project updates, revision notes, milestone approvals, and delivery details
• Provide post-delivery support, bug fixes, and ongoing maintenance
• Issue invoices and manage payment schedules
• Improve our website, internal workflows, and service quality
• Send relevant project-related follow-ups — not unsolicited marketing
• Prevent fraud, abuse, and security incidents
• Meet applicable legal and regulatory obligations

We do not use your information to build advertising profiles, serve third-party ads, or sell access to your data to any external party for commercial purposes.

Our website uses cookies and similar tracking technologies to support site functionality and to help us understand how visitors interact with our pages. We use three categories of cookies:

• Essential cookies — required for basic site functionality; cannot be disabled
• Analytics cookies — help us understand which pages are visited, how long visitors stay, and where they navigate next (e.g. via tools like Google Analytics or similar)
• Preference cookies — remember settings such as dark/light mode, if applicable

We do not run advertising networks, retargeting pixels, or behavioural tracking for ad serving purposes. Analytics data is used purely to improve site experience and content quality.

You can manage or disable cookies through your browser settings. Disabling non-essential cookies will not affect your ability to request a quote or use our contact form.

We do not sell, rent, trade, or share your personal data for commercial purposes. We share information only when strictly necessary to deliver our services or comply with legal obligations:

• Service providers — hosting platforms (e.g. Vercel), project management tools, and email services we use to operate our studio; each bound by their own privacy commitments and data processing agreements
• Print production partners — when your project requires third-party print production, we share only the files, specifications, and contact information needed to complete and deliver your order
• Legal and regulatory compliance — where required by applicable Nigerian law, valid court order, or to protect the rights and safety of our clients, staff, or studio

We never share your data with advertisers, data brokers, or any third party for purposes unrelated to delivering your project.

Our website and services integrate with or link to third-party platforms. Each of these operates under its own privacy policy and data practices, independent of this document:

• Vercel — our website hosting and deployment platform
• Google Analytics or similar — website analytics (no ad profiling)
• WhatsApp (Meta) — our primary client communication channel
• Gmail / Google Workspace — email communication and file sharing
• GitHub — version control and code hosting for web projects

We encourage you to review the privacy policies of any third-party platform you interact with. Links to external websites from our site do not constitute an endorsement of those sites or their data practices, and we are not responsible for the privacy practices of external platforms.

We retain your information for as long as necessary to fulfil the purposes described in this policy. Our retention approach by category:

• Active client project files and communication history — retained for the full duration of the engagement and for a minimum of 12 months after project completion, to support revisions, handover requests, or follow-up work
• Enquiries that do not result in a project — contact information is retained for up to 6 months, after which it is deleted unless you have initiated further contact
• Analytics and technical data — retained in aggregated, anonymised form; raw session data is not stored indefinitely
• Legal and financial records — retained for the period required by applicable Nigerian law, including tax and accounting obligations

You may request deletion of your personal data at any time (see Section 9). Where deletion is not technically or legally feasible, we will anonymise or archive the data instead and notify you accordingly.

We implement appropriate technical and organisational measures to protect your information from unauthorised access, loss, alteration, misuse, or disclosure. Specific measures include:

• Our website is served exclusively over HTTPS with TLS encryption
• Access to client files and communications is restricted to authorised studio personnel on a need-to-know basis
• Third-party tools used in our workflow are evaluated for their own security and data protection practices
• Sensitive project files shared by clients are handled with care and not stored on public-facing systems

No method of transmission over the internet or electronic storage is 100% secure. While we work diligently to protect your data, we cannot guarantee absolute security against all threats. In the event of a data incident that materially affects your information, we will notify you as promptly as practicable and take all necessary remediation steps.

Regardless of your location, you have the following rights with respect to your personal data held by Gravity Concepts:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete information
• Erasure — request deletion of your personal data, subject to our legal retention obligations
• Restriction — request that we limit how we use your data in certain circumstances
• Portability — request your data in a structured, commonly used format
• Objection — object to processing based on our legitimate interests
• Withdrawal of consent — withdraw consent for any processing where consent was the lawful basis

To exercise any of these rights, contact us directly using the details in Section 12. We will respond to all legitimate requests within a reasonable timeframe — generally within 30 days — in accordance with applicable law.

We will not charge a fee for processing your request unless it is manifestly unfounded or excessive. We will never retaliate against a client or visitor for exercising their data rights.

Our services are intended for individuals aged 18 and above, or businesses and their authorised representatives. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our services, business practices, legal requirements, or applicable regulatory guidance. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active clients directly.

We encourage you to review this policy periodically. Continued use of our website or services after any update constitutes acceptance of the revised policy.

For any questions, concerns, access requests, or complaints related to this Privacy Policy or how we handle your data, please contact us: