Privacy Policy

Y&T Designs (“Y&T”, “we”, “us”, “our”) is a commercial and residential interior design and property development company based in Lagos, Nigeria. For the purposes of the NDPA, we are the data controller of the personal data described in this policy.

You can reach us at info@yandtdesigns.com or on +234 816 334 1762. Our office address is shown on our Contact page.

We collect only what we need. Depending on how you deal with us, this may include:

• Enquiry details: when you use the contact form on this website, your full name, email address, telephone number, the type of project you have in mind and the message you write.
• Correspondence: emails, calls, WhatsApp or other messages you send us, and our replies.
• Project and client information: if you become a client, details needed to deliver the work, such as your project address, floor plans, photographs, design preferences, budget, and billing and payment details. This is usually collected directly from you outside the website, under our written proposal or agreement.
• Technical data: basic information our hosting and content-delivery providers receive whenever a website is visited, such as your IP address, browser type, device type, the pages requested and the date and time. We do not use this to identify you personally.

We do not knowingly collect sensitive personal data (for example health, religion or biometric data) and ask that you do not send it to us through the website.

We use your personal data only for the following purposes, each supported by a lawful basis under the NDPA:

• To respond to your enquiry and prepare a proposal (taking steps at your request before entering into a contract, and our legitimate interest in running our business).
• To deliver our services and manage our relationship with you (performance of a contract), including project management, procurement, invoicing and after-sales support.
• To meet our legal obligations, such as tax, accounting and regulatory record-keeping, and to respond to lawful requests from authorities.
• To keep our website and business secure and to improve our services (legitimate interests), provided those interests are not overridden by your rights.
• To send you news or updates about our work, only where you have given consent or where the law otherwise permits. You can opt out at any time.

Where we rely on your consent, you may withdraw it at any time. This will not affect processing already carried out. We do not sell your personal data, and we do not make decisions about you using solely automated processing.

We share personal data only where necessary and only with:

• Service providers that help us run the website and our business, acting on our instructions. These include Web3Forms (which processes and forwards contact-form submissions to our email), our website hosting and content-delivery providers, and our email and IT providers.
• Project partners and contractors, such as suppliers, manufacturers, installers and tradespeople, but only the information they need to carry out your project, and only once you are a client.
• Professional advisers such as accountants, auditors and lawyers, under duties of confidentiality.
• Authorities, courts and regulators where we are legally required to, or to protect our legal rights.
• A buyer or successor if our business is sold or restructured, in which case your data would remain protected as described here.

Some of our service providers (for example the form-processing service and the website hosting and content-delivery providers) may store or process data on servers outside Nigeria. Where that happens, we take steps to make sure your data stays protected to a standard consistent with the NDPA, for example by choosing reputable providers and relying on appropriate safeguards or other lawful transfer grounds.

We keep personal data only for as long as needed for the purposes above. In general:

• Enquiries that do not lead to a project are kept for a reasonable period so that we can follow up with you, then deleted or anonymised.
• Client and project records, including financial records, are kept for as long as the project relationship lasts and afterwards for the periods required by tax, corporate and limitation laws, and to handle warranty or after-sales matters.

When data is no longer needed, we delete it or anonymise it so it no longer identifies you.

We use reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access and disclosure, including restricting access to those who need it and using reputable providers. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs that is likely to put your rights at risk, we will notify the Nigeria Data Protection Commission and, where required, you, within the time limits set by law.

Under the NDPA you have the right, subject to the conditions and exceptions in the law, to:

• be informed about how your personal data is used;
• access the personal data we hold about you and obtain a copy;
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete your data or restrict how we use it;
• object to processing based on our legitimate interests or for direct marketing;
• receive your data in a structured, commonly used format, or have it sent to another controller (data portability);
• withdraw consent at any time, where we rely on it.

To exercise any of these rights, email info@yandtdesigns.com. We may need to verify your identity first, and we will respond within the period required by law.

We do not use advertising or analytics cookies on this website. Some embedded third-party content, such as the Google Map on our Contact page, may collect data or set cookies once it loads. For details, please read our Cookie Policy.

Our website and services are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, please contact us and we will delete it.

Our website links to third-party sites and social media pages, including Instagram and Facebook. Those services have their own privacy policies and we are not responsible for how they handle your data. Please read their policies before sharing personal data with them.

We may update this policy from time to time, for example to reflect changes in our practices or the law. The “Last updated” date at the top shows when it was last revised. Please check back periodically.

If you have a question about this policy or how we handle your data, contact us at info@yandtdesigns.com. We would like the chance to resolve any concern first. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (ndpc.gov.ng).