Your information, handled with care.

1. Who is responsible

“GospelCO”, also referred to as “the Studio”, is the creative brand operated by Olámide Gospel. The legal contracting party for a particular job is the person or entity named in the accepted quotation, invoice, service contract or marketplace order. This wording does not represent or imply a specific company registration status that has not been confirmed.

For personal information submitted directly through the GospelCO website or contact channels under our control, GospelCO determines the purposes and means of use and acts as the relevant controller where applicable. For a privacy question or request, email gospelgfxdesigns@gmail.com with “Privacy Request” in the subject line. Replace this address if GospelCO adopts a dedicated monitored privacy contact.

2. Information we may collect

• Enquiry details: name, business name, email, phone or social handle, location where relevant, service interest, budget and preferred timeline.
• Project material: briefs, copy, product information, logos, photographs, videos, audio, brand guidelines, website content, references, credentials that are necessary to perform an agreed task, and feedback/approval records.
• Business and transaction records: quotes, invoices, payment confirmations, agreed scope, delivery records, revision requests and dispute-related correspondence. GospelCO does not need or request card PINs, bank passwords or one-time passcodes.
• Technical/usage data: ordinary hosting request logs and browser/device information that may be handled by the hosting provider; basic navigation information; and information required to keep the site secure and functioning.
• Third-party platform data: messages, user names, order details, files, ratings or delivery records that are available to us through Upwork, Fiverr or another platform when a job is carried out there.

Please do not send sensitive personal data, identity documents, health information or confidential customer lists unless the information is genuinely necessary, the scope is agreed, and an appropriate secure channel and lawful basis have been arranged.

3. Why we use information

Depending on the interaction, information may be used to respond to enquiries; prepare a brief or quotation; enter into and perform a contract; produce, test and deliver creative or digital work; manage revisions and approvals; coordinate project access; verify payment; provide agreed support; maintain accounts and business records; protect against fraud, misuse or security incidents; resolve complaints; and comply with applicable law.

Where Nigerian data-protection law applies, we will identify an appropriate lawful basis, such as steps requested before a contract, performance of a contract, a legal obligation, legitimate interests that do not override data-subject rights, or consent where consent is the appropriate basis. Consent is not treated as a universal substitute for every other lawful basis. If we rely on consent for a particular optional use, it can be withdrawn subject to lawful limits.

4. AI tools and project information

GospelCO may use AI-enabled services for ideation, copy assistance, image or video generation, editing, transcription, captions, synthetic voice, code assistance or workflow support. AI use is assessed for the particular job; it does not mean every item is AI-generated.

• We aim to minimise the personal or confidential information sent to an external AI service.
• We will not knowingly enter client secrets, sensitive personal data, private customer lists or unreleased confidential material into an external AI service unless it is necessary for the agreed work, authorised appropriately, and the tool’s terms and privacy controls have been considered.
• When a client requires a no-AI workflow, the client must say so before the quote or order is accepted. We will confirm whether we can meet that requirement and any effect on price or timing.
• External providers may process prompts, uploads, outputs and technical metadata under their own terms and retention settings. Where an AI provider or subprocessor needs to receive project data, the relevant contractual and privacy requirements must be considered.
• We do not use automated decisions to determine a person's legal rights or eligibility for services through this website.

Clients should not send personal data about their customers, employees, models or performers for AI processing unless they have the authority and a lawful basis to do so. Service-specific disclosures are provided on the Credits & AI Disclosure page.

5. Who may receive information

We may share the minimum information reasonably needed with providers supporting the engagement, such as website hosting and domain providers (the current static site is deployed via Netlify unless deployment changes), business email, WhatsApp, AI image/video/voice and editing services, stock-asset or font providers, software/plugin/CMS vendors, file-transfer/cloud storage services, payment or accounting providers, legal/professional advisers, and relevant freelance marketplaces.

The live website loads some fonts from Google Fonts. Opening WhatsApp, Instagram, Pinterest, Upwork, Fiverr or another external link takes the visitor to that provider, which applies its own privacy practices. The Studio does not control those providers’ systems or policies. We do not claim to use analytics, advertising pixels, a newsletter system or a separate server-side form unless one is actually installed and enabled.

We may disclose information if reasonably necessary to establish or defend a legal claim, investigate suspected misuse, protect safety or comply with a valid legal requirement. We do not sell project files or personal details to data brokers.

6. International processing

Some service providers may store or process information outside Nigeria. Where cross-border transfers are subject to applicable data-protection law, GospelCO will consider the applicable transfer conditions and safeguards. Clients who require a particular hosting region, local-only processing, an approved vendor list or a data-processing agreement must raise the requirement before work begins.

7. Cookies, browser storage and analytics

The current site does not provide a shopping cart or online checkout. Visitors can choose to contact GospelCO through direct WhatsApp links. The website does not collect payment card information through these links.

The hosting provider may keep routine technical logs. Google Fonts is currently loaded from Google’s servers, which means a browser may connect to Google to retrieve font files. If GospelCO later installs analytics, advertising pixels, embedded video, booking forms or other non-essential trackers, this notice must be updated and any legally required notice/consent controls must be added before activation. Visitors can also manage cookies/storage through browser settings.

8. How long we keep information

We keep personal information only as long as reasonably needed for its stated purpose, the active engagement, support or handover, accounting and legal records, security, or the establishment/defence of claims. Enquiries that do not become projects may be deleted or anonymised when no longer useful, subject to necessary records. Project/source files are kept according to the proposal, support arrangement and practical backup needs; clients should not assume indefinite archiving unless it is agreed in writing.

When information is no longer reasonably required, we will take reasonable steps to delete, anonymise or securely dispose of it. Copies may remain in routine backups for a limited period before being overwritten, or where retention is legally required.

9. Security and incidents

We use reasonable safeguards suited to the tools and scale of the work, such as limiting access to project files, using provider security features, keeping credentials separate from public briefs and removing temporary access when no longer needed. No online transmission, cloud service or storage method is guaranteed to be completely secure.

Clients should provide named, limited-access accounts where possible rather than sharing a master password. If a client believes personal data has been exposed, send prompt notice with the project reference and relevant facts so we can investigate, limit access and meet any applicable notification obligations.

10. Your privacy rights

Subject to the Nigeria Data Protection Act 2023 and other applicable law, a data subject may have rights to be informed, request access, correct inaccurate data, request erasure or restriction in appropriate cases, object to certain processing, request portability where applicable, withdraw consent where consent is relied on, and lodge a complaint with the Nigeria Data Protection Commission (NDPC). These rights are not absolute in every situation and may be limited by lawful retention, legal claims or other statutory exceptions.

To make a request, email gospelgfxdesigns@gmail.com with “Privacy Request”. Describe the data and the action you are requesting. We may need proportionate information to verify identity and locate the relevant records; do not email sensitive documents unless we specifically arrange a safe method. We will respond within the timeframe required by applicable law.

Official resource: Nigeria Data Protection Commission.

11. Client customer data and website projects

When GospelCO builds or maintains a client's website, CRM, mailing list, booking system, online shop or analytics setup, the client may remain the controller of its visitors’/customers’ data while GospelCO acts as a processor or service provider for the specific task. The role depends on the actual arrangements.

Clients are responsible for having appropriate notices, lawful bases, permissions, retention rules and security for their own customers. Where required, the parties should agree on a written data-processing agreement covering instructions, access, confidentiality, subprocessors, security, assistance with requests, incidents and deletion/return of data. Website development alone does not certify that the resulting site is legally compliant.

12. Children, marketing and external links

GospelCO’s normal services are directed at businesses, organisations, creators and adults. We do not intentionally seek personal information from children through the main website. Where a project involves a child’s image, name, voice or other personal data, the party commissioning the work must supply the required permissions and safeguards.

We do not use the website policy as permission to send unsolicited marketing. If promotional email or a mailing list is introduced, the notice and opt-out process will be updated. External websites linked from GospelCO are governed by their own notices.

13. Changes and contact

We may update this notice when our services, suppliers, website features or legal requirements change. The current version and its update date will appear on this page. For questions, requests or complaints, contact gospelgfxdesigns@gmail.com. If a concern cannot be resolved directly, you may have a right to contact the NDPC or another relevant authority.