Legal

Privacy & cookie policy

Last updated 4 November 2026

01 Who we are

This website (mojadigital.agency) is run by Moja Digital ("Moja", "we", "us"), a branding, web design and digital marketing agency based at Lagos, Nigeria. We are the data controller for the personal information described in this policy. If you have any questions, email us at hey@mojadigital.agency.

We work with clients in Nigeria, Ghana, Kenya, the United Kingdom and elsewhere, so we follow the Nigeria Data Protection Act 2023, Ghana’s Data Protection Act 2012 (Act 843), Kenya’s Data Protection Act 2019 and, for UK visitors and clients, the UK GDPR and Data Protection Act 2018.

02 What we collect

  • Enquiries: when you use our contact or “book a call” forms we collect your name, email address and anything else you choose to give us, such as your company, WhatsApp number, how you’d like us to reply, country, budget, the services you are interested in and your message.
  • Orders: when you buy a package we collect your name, email, phone number, billing address, company name (if given) and order details. Card, bank and mobile-money payments are handled by our payment provider, Flutterwave — we never see or store your full card details.
  • Newsletter: if you subscribe, your email address. You can unsubscribe at any time.
  • WhatsApp and email: if you message us, your name, number or email address and the messages you send.
  • Project materials: logos, copy, images, logins and other information you share with us so we can deliver your project.
  • Technical data: your IP address, browser and device type, and — only if you accept analytics cookies — how you use the site. We use your approximate location (country) to show prices in your local currency.

03 How and why we use it

  • To reply to your enquiry and give you a quote — because you asked us to (steps before a contract / legitimate interests).
  • To process your order, take payment, deliver the work and provide support — to perform our contract with you.
  • To keep invoices and accounting records — to meet our legal and tax obligations.
  • To send our newsletter and marketing tips — with your consent, which you can withdraw at any time.
  • To keep the website secure, prevent fraud and improve our services — our legitimate interests.
  • To measure how the site is used — only with your consent (see Cookies below).

We do not sell your personal information, and we do not make decisions about you based solely on automated processing.

04 Who we share it with

We only share your information with trusted providers who help us run the business, under contracts that require them to protect it:

  • Hostinger — website hosting and email.
  • Flutterwave — payment processing (card, bank transfer and mobile money).
  • WooCommerce / WordPress — the software that runs our shop; order data is stored on our own hosting.
  • Google Analytics — website statistics, only if you accept analytics cookies.
  • Professional advisers (such as accountants and lawyers), and authorities where the law requires it.

05 International transfers

Some of our providers store data outside your country, including in the EU, the UK and the United States. Where this happens we rely on the safeguards each law allows — such as adequacy decisions, standard contractual clauses or your consent — so your information stays protected.

06 How long we keep it

  • Enquiries that don’t become projects: up to 2 years.
  • Orders, invoices and contracts: 6 years after the end of the financial year, for tax and accounting.
  • Project files: for the life of the project and up to 2 years after, so we can support you.
  • Newsletter: until you unsubscribe.

07 Cookies

Cookies are small files stored on your device. We use essential cookies to run the site and shop — these don’t need your consent. Analytics and marketing cookies are only set if you click “Accept all” on our cookie banner. You can change your mind at any time using the “Cookie settings” link at the bottom of every page, or by clearing cookies in your browser.

CookieTypeWhat it does
wordpress_*, wp-settings-*EssentialKeep you signed in to your account.
wp_woocommerce_session_*, woocommerce_cart_hash, woocommerce_items_in_cartEssentialRemember your cart and checkout, and the currency you are shown.
sbjs_*AnalyticsWooCommerce order attribution — records how you found us (for example a search or an ad) and attaches it to your order. Only set after “Accept all”.
moja_consentEssentialRemembers your cookie choice for 6 months.
_ga, _ga_*AnalyticsGoogle Analytics — counts visits and shows which pages are useful. Up to 2 years.

08 Your rights

Depending on where you live, you have the right to:

  • ask for a copy of the personal information we hold about you;
  • ask us to correct or delete it;
  • object to, or ask us to restrict, how we use it;
  • ask us to send it to you or another organisation in a portable format;
  • withdraw your consent at any time (this doesn’t affect anything we did before).

To use any of these rights, email hey@mojadigital.agency. We’ll reply within 30 days.

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to your data protection regulator: the Nigeria Data Protection Commission (ndpc.gov.ng), Ghana’s Data Protection Commission (dataprotection.org.gh), Kenya’s Office of the Data Protection Commissioner (odpc.go.ke) or the UK Information Commissioner’s Office (ico.org.uk).

09 Keeping your information safe

Our site uses HTTPS encryption, payments are processed by Flutterwave’s secure checkout, and access to client data is limited to the people who need it. Logins you share for a project are stored securely and you can change them once the work is done.

10 Children

Our services are for businesses and adults. We don’t knowingly collect information from anyone under 18.

11 Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.