Data Compliance

• We collect only the personal data we need to fulfil your order and run a secure service.
• We tell you what we collect and why in our Privacy Policy.
• We delete uploaded documents on a strict schedule — 30 minutes after delivery is confirmed, with a hard 72-hour maximum after print confirmation and a 96-hour storage-level safety net.
• We never sell personal data, and we share only the minimum needed with named processors listed in the Privacy Policy.
• We respond to data-subject requests within 30 days. Right-to-deletion is typically executed within an hour.
• We notify NITDA and affected users within 72 hours if we become aware of a breach affecting personal data.
• We file the annual NDPR data-protection audit return when we cross the threshold that requires it.

Our DPO is the named contact responsible for data-protection enquiries, complaints, and regulator correspondence.

For general support questions please email hello@imprezzle.com instead — the DPO address is reserved for data-protection matters.

Under the NDPR you have the right to:

• Access the personal data we hold about you.
• Rectify data that is wrong or out of date.
• Delete your account and personal data, subject to data we must keep for tax or legal compliance.
• Restrict or object to processing in certain circumstances.
• Port your data to another service in a machine-readable format.
• Withdraw consent at any time where consent is the legal basis (e.g. marketing communications).
• Complain to NITDA if you are not satisfied with our response.

To exercise any of these, you have three options:

1. Self-service.The fastest path is the “Delete my account” control in your account settings, which immediately schedules file deletion and anonymisation of your order history.
2. Email. Write to dpo@imprezzle.com from the email address on your account and tell us which right you wish to exercise.
3. WhatsApp / phone. Customers who placed orders by phone-OTP without an email can reach us on the WhatsApp number used for order receipts.

We may ask for verification before we act on a request — this is to protect you against someone else trying to access or delete your data. Acceptable verification is usually a one-time code sent to the phone or email on the account.

If you are unhappy with how we have handled your data or responded to a request:

1. Write to dpo@imprezzle.com describing the issue. We aim to resolve all complaints within 30 days.
2. If you remain dissatisfied, you have the right to lodge a complaint with the regulator: Nigeria Data Protection Commission (NDPC) / NITDA, via ndpc.gov.ng.

You do not need our permission to escalate to the regulator, but we appreciate the chance to put things right first.

• Privacy Policy — the full list of data we collect, why, who we share it with, and how long we keep it.
• Terms of Service — the agreement under which we provide the service.
• IP Infringement Policy — for copyright and trademark takedown notices.