Privacy Policy

Effective Date: 04 January 2026
Last Updated: 04 January 2026

Introduction

Storybovr (“we”, “us”, “our”) operates the website https://storybovr.com.ng/ (the “Website”). We are committed to protecting your privacy and personal data in full compliance with the General Data Protection Regulation (GDPR), the Nigeria Data Protection Regulation (NDPR) 2019, and other applicable data protection laws.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our Website. Please read this policy carefully to understand our practices and your rights.

1. Data Controller and Contact Information

Data Controller: Storybovr
Email: info@storybovr.com.ng
Website: https://storybovr.com.ng/

For all enquiries, requests, or concerns regarding this Privacy Policy or our data practices, please contact us using the details above.

2. Information We Collect

2.1 Personal Information You Provide

Contact Forms and Email Communication: When you contact us, we collect:

  • Name
  • Email address
  • Subject and message content
  • Any additional information you voluntarily provide

Comments (if enabled):

  • Name or username
  • Email address
  • Website URL (optional)
  • Comment content
  • IP address (automatically collected by WordPress)

Newsletter Subscriptions (if applicable):

  • Email address
  • Name (if provided)
  • Subscription preferences

2.2 Information Automatically Collected

When you visit our Website, we automatically collect:

Technical Information:

  • IP address
  • Browser type and version
  • Operating system
  • Device type (desktop, mobile, tablet)
  • Screen resolution
  • Time zone setting

Usage Data:

  • Pages visited and content viewed
  • Date, time, and duration of visits
  • Referring website/source
  • Click patterns and navigation paths
  • Search queries on our site

Location Data:

  • Approximate geographic location based on IP address (country/city level)

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies. See Section 6 for detailed information.

3. How We Use Your Information

We process your personal data for the following purposes:

3.1 Website Operation and Communication

  • To respond to enquiries and communications
  • To provide and maintain Website functionality
  • To manage and moderate user comments
  • To send administrative information and updates

3.2 Analytics and Improvement

  • To analyse visitor behaviour and preferences
  • To monitor and improve Website performance
  • To understand content effectiveness
  • To identify technical issues

3.3 Marketing (with consent)

  • To send newsletters and promotional content (only with opt-in)
  • To inform you about new biographies and features

3.4 Legal Compliance

  • To comply with legal obligations
  • To enforce our terms and policies
  • To protect our rights and prevent fraud
  • To respond to legal requests

4. Legal Basis for Processing (GDPR Compliance)

We process your personal data based on:

Consent (Article 6(1)(a) GDPR):

  • Newsletter subscriptions and marketing
  • Non-essential cookies
  • Optional information sharing

Legitimate Interests (Article 6(1)(f) GDPR):

  • Website analytics and improvement
  • Security and fraud prevention
  • Responding to enquiries
  • Operating our Website

Legal Obligation (Article 6(1)(c) GDPR):

  • Complying with laws and regulations
  • Responding to legal requests

5. WordPress-Specific Data Processing

5.1 Comments

When you comment:

  • Your name, email, website URL, and comment are stored in our database
  • Your IP address and browser user agent are collected for spam detection
  • An anonymised hash of your email may be sent to Gravatar for profile pictures
  • Comments are retained indefinitely unless you request deletion

5.2 Media Uploads

If you upload images (where applicable):

  • Embedded location data (EXIF GPS) may be visible to visitors
  • We recommend removing location data before uploading

5.3 Contact Forms

Data submitted through forms:

  • Is sent to our email address
  • May be temporarily stored depending on plugins used
  • Is not shared with third parties except to respond to your enquiry

5.4 WordPress Cookies

WordPress sets:

  • wordpress_test_cookie – Checks if cookies are enabled
  • wordpress_logged_in_ – For authenticated users
  • wp-settings- – Customises interface for logged-in users
  • wordpress_sec_ – Security cookie

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our Website, helping us provide better user experience and analyse usage.

6.2 Types of Cookies We Use

Strictly Necessary Cookies:

  • Essential for Website functionality
  • Cannot be disabled without affecting performance
  • Include WordPress session and security cookies

Analytics Cookies:

  • Google Analytics cookies (see Section 7)
  • Help us understand visitor behaviour

Functionality Cookies:

  • Remember your preferences
  • Improve browsing experience

Advertising Cookies (if applicable):

  • May be used for Google AdSense or similar services
  • Track browsing for relevant ads

6.3 Managing Cookies

Control cookies through browser settings:

  • Chrome: Settings > Privacy and Security > Cookies
  • Firefox: Options > Privacy & Security > Cookies
  • Safari: Preferences > Privacy > Cookies
  • Edge: Settings > Cookies and Site Permissions

You can also use our cookie consent banner to accept, reject, or customise preferences.

Note: Disabling cookies may affect Website functionality.

7. Google Analytics

We use Google Analytics to analyse Website traffic and user behaviour.

7.1 Data Collected

Google Analytics collects:

  • How you use our Website (pages, time spent, interactions)
  • Device and browser information
  • Approximate location (country/city)
  • Referring websites and search terms

7.2 IP Anonymisation

We have enabled IP anonymisation (anonymizeIP), ensuring your IP address is truncated before processing, making personal identification impossible.

7.3 Google Analytics Cookies

  • _ga – Distinguishes users (expires after 2 years)
  • _gid – Distinguishes users (expires after 24 hours)
  • _gat – Throttles requests (expires after 1 minute)

7.4 Data Retention

Google Analytics data is retained for 26 months, then automatically deleted.

7.5 Opting Out

Opt-out by:

7.6 Google’s Privacy Policy

More information: https://policies.google.com/privacy

8. Other Google Services

8.1 Google Fonts

8.2 Google AdSense (if applicable)

8.3 Google reCAPTCHA (if applicable)

  • Protects forms from spam
  • Collects hardware/software and browser data
  • Subject to Google’s Privacy Policy

8.4 YouTube Embedded Videos (if applicable)

9. Third-Party Services

We may use:

  • Email marketing platforms (e.g., Mailchimp)
  • Comment management (e.g., Akismet for spam filtering)
  • Social media sharing buttons
  • Content delivery networks (CDNs)
  • Security plugins

Each service has its own privacy policy. We encourage you to review them.

10. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information.

10.1 Service Providers

We share data with trusted providers who assist in:

  • Website hosting
  • Email delivery
  • Analytics and monitoring
  • Security and spam prevention

These providers are contractually obligated to protect your data.

10.2 Legal Requirements

We may disclose information to:

  • Comply with laws, court orders, or government requests
  • Enforce our terms and conditions
  • Protect our rights, property, or safety
  • Prevent fraud or illegal activity

10.3 Business Transfers

If Storybovr is involved in a merger, acquisition, or sale, your data may be transferred. We will notify you of such changes.

11. International Data Transfers

Your data may be transferred to countries outside Nigeria, including:

  • European Union – For Google services (GDPR-compliant)
  • United States – For service providers

We ensure appropriate safeguards:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Privacy frameworks

12. Data Security

We implement comprehensive security measures:

Technical Measures:

  • SSL/TLS encryption for data transmission
  • Secure hosting infrastructure
  • Firewall protection
  • Regular security updates
  • Malware scanning
  • Intrusion detection
  • Encrypted databases
  • Secure backup systems

Organisational Measures:

  • Access controls (need-to-know basis)
  • Staff training on data protection
  • Confidentiality agreements
  • Incident response procedures
  • Vendor security assessments
  • Regular security audits

Limitations:

  • No transmission method is 100% secure
  • We cannot guarantee absolute security
  • We continually update measures to address risks

Data Breach Notification: In the event of a breach:

  • We notify supervisory authorities within 72 hours (GDPR Article 33)
  • We inform affected individuals without undue delay (GDPR Article 34)

13. Data Retention

We retain personal data only as long as necessary:

Website Comments: Indefinitely unless you request deletion
Contact Forms/Emails: Up to 3 years or until resolved
Newsletter Subscriptions: Until unsubscription
Analytics Data: 26 months (Google Analytics)
WordPress Logs: 90 days
Cookie Data: Varies by type
Legal Records: As required by law (typically 6-7 years)

14. Your Rights Under GDPR and NDPR

You have comprehensive rights:

14.1 Right to Access (Article 15 GDPR)

Request a copy of personal data we hold

14.2 Right to Rectification (Article 16 GDPR)

Request correction of inaccurate data

14.3 Right to Erasure (Article 17 GDPR)

Request deletion of personal data

14.4 Right to Restriction (Article 18 GDPR)

Request limitation of processing

14.5 Right to Data Portability (Article 20 GDPR)

Request data in machine-readable format

14.6 Right to Object (Article 21 GDPR)

Object to processing based on legitimate interests or marketing

14.7 Right to Withdraw Consent (Article 7 GDPR)

Withdraw consent at any time

14.8 Right to Lodge a Complaint

File complaint with supervisory authorities:

  • Nigeria: Nigeria Data Protection Commission (NDPC) – https://ndpc.gov.ng/
  • EU: Your national data protection authority

14.9 How to Exercise Rights

Contact: info@storybovr.com.ng

Include:

  • Your name and contact information
  • Specific right(s) you wish to exercise
  • Details to locate your data
  • Proof of identity

Response Time: 30 days (may extend to 60 days for complex requests)
Fee: Free (unless manifestly unfounded or excessive)

15. Children’s Privacy

Our Website is not directed at children under 16 years of age.

We do not knowingly collect data from children. If you’re a parent/guardian and believe your child provided data, contact us immediately at info@storybovr.com.ng for prompt deletion.

16. External Links

Our Website may link to external sites. We:

  • Do not control third-party content or privacy practices
  • Are not responsible for external sites
  • Do not endorse third-party websites

Review external privacy policies before providing information.

17. Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects.

We use automated tools for:

  • Website analytics
  • Content recommendations
  • Spam filtering

These don’t constitute GDPR Article 22 profiling.

18. Changes to Privacy Policy

We may update this policy to reflect:

  • Changes in practices
  • New legal requirements
  • New features or services

For Material Changes:

  • Update “Last Updated” date
  • Provide prominent Website notice
  • Send email notification (where applicable)
  • Request renewed consent (if required)

For Minor Changes:

  • Update “Last Updated” date
  • Changes effective immediately

Your continued use constitutes acceptance.

19. Jurisdiction-Specific Provisions

19.1 European Union

  • Full GDPR compliance
  • Right to lodge complaints with national authorities
  • Data transfers protected by safeguards

19.2 Nigeria

  • NDPR 2019 compliance
  • File complaints with NDPC
  • Cross-border transfers comply with NDPR Section 2.9

19.3 Other Jurisdictions

  • We apply strictest applicable standards
  • We respect local privacy laws

20. Contact Information

For questions, concerns, or requests:

Email: info@storybovr.com.ng
Website: https://storybovr.com.ng/
Subject Line: Privacy Enquiry / Data Protection Request

Our Commitment:

  • Acknowledge receipt within 2 business days
  • Substantive response within 30 days
  • Confidential and serious treatment of all enquiries

21. Consent and Acknowledgement

By using Storybovr, you acknowledge:

✓ You have read and understood this Privacy Policy
✓ You understand how we process your data
✓ You consent to processing as described
✓ You are at least 16 years of age
✓ You understand your data protection rights
✓ You can withdraw consent or exercise rights anytime

Thank you for trusting Storybovr with your personal information. We are committed to protecting your privacy and maintaining the highest data protection standards.

For any concerns: info@storybovr.com.ng