Skip to content
Brandit
Sign in

Privacy Policy

Last updated October 2026

We collect only what we need to print your order and deliver it. We do not sell your data. This policy is written to follow the Nigeria Data Protection Act 2023.

Draft for legal review. This is plain-language starting text. Have a Nigerian lawyer review and adapt it before Brandit takes public orders.

1. Who we are

Brandit is run by Cerebre Media Africa, Lagos, Nigeria. We decide why and how your personal information is used, so under the Nigeria Data Protection Act we are the “data controller”.

2. What we collect

  • You give us: your name, phone number and email; your delivery address and landmark; your business name and tax number if you add them for an invoice; the artwork, logos and words you upload; the brief you write for a design; and what you tell us when you report a problem.
  • Custom-order requests: what you describe, the size and quantity, any reference pictures you attach, and our quote and your reply.
  • Google sign-in: if you choose it, your name, email address and profile picture. Nothing else, and we never post for you.
  • Orders and coupons: what you bought, what you paid, your delivery information and the coupon codes you used.
  • Reviews: your rating, your words, and whether you agreed to have them shown on our site. If you add a photo, the photo too, and whether you agreed to have the photo shown.
  • Brand kit (optional): the logo, colours and files you choose to save in your account for later orders.
  • Templates and event plans: your answers (such as names, dates, times and venues), the kind of event, the date and the number of guests.
  • Delivery choices: whether you prefer a morning or afternoon delivery, and your reminder and language choices.
  • Referral codes: your personal code, which codes you used, and the rewards you earned. When your code is used on a delivered order, we message you that a reward is ready, and the message names the friend by first name.
  • Rider position: while your order is out for delivery, the rider's phone can share where it is (not yours). We keep only the latest position.
  • Payments: handled by our payment provider. We get a confirmation and a reference, never your full card number or PIN.
  • Technical: your IP address and device type when you sign in or place an order, kept to protect the service from abuse.
  • ID-card jobs: staff lists and photos you upload for printing ID cards. We treat these with extra care (see how long we keep it).

3. Why we use it

  • To price, print, check, deliver and support your order, and to message you about it (this is needed to do the job).
  • To take payment, issue receipts and VAT invoices, and keep the accounts the law requires.
  • To reply to custom-order requests and keep your quote.
  • To keep the service safe, find fraud and fix problems.
  • To send reorder reminders and offers only if you choose to receive them. You can turn them off in your account.
  • To send one reminder, by WhatsApp or SMS, if you fill in your details at checkout and do not pay. You can turn this off in your account (“Remind me once if I leave an order unpaid”) or by telling us.
  • To give your friends a referral code and to give you a reward when a friend's order is delivered.
  • To show you the rider's position on a map while your order is out for delivery, and to plan the day's deliveries around the window you chose.
  • To use your photo on our site only if you agree with a separate box when you add it, and only after a person at Brandit has checked it.
  • To show your review on our site only if you agree when you leave it. We show your first name and the product, nothing else.

4. Who sees it

We do not sell your data. We share it only with people who need it to serve you:

  • Our team, according to their jobs. A designer sees your brief and files; a rider sees a delivery address and phone number.
  • Delivery partners, only the name, phone number and address needed to deliver. A rider who uses the rider link can see the delivery address and phone number for that delivery, and chooses whether to share their own position.
  • Other customers: never your files, your brand kit or your private photo. If you agreed to have a review or its photo shown, visitors see your first name, what you ordered and the words and photo you agreed to share. A friend who gets your referral code sees the first name on your account in the code's description (“A gift from …”).
  • Service providers that take payments, send SMS, WhatsApp and email, host our systems and store files. They may process data on servers outside Nigeria. We choose providers that protect data, and only share what the service needs.
  • Authorities, when the law requires it.

If you ask us to deliver with “plain pack”, we leave Brandit's name off the packing slip and the customer's messages, but we still keep the order record.

5. Brandit Studio and other countries

  • When you use Brandit Studio, we keep the words you type, the photo and logo you upload, and the designs we make, so you can change and order them.
  • To draw background art, Studio sends only your description of the look (style, colours, mood and the sentence you wrote) to picture-making companies, some outside Nigeria. Your names, dates, phone numbers, photos and logo are not sent. You agree to this before your first design.
  • Your words and uploaded pictures may also pass through a safety check by a service that screens for content we refuse.
  • We count free sketches by verified phone number, so we keep a short record of when a number asked for a sketch.
  • Read more on the AI designs page.

6. How long we keep it

  • Orders and invoices are kept for the period the law requires for business accounts, even if you delete your account.
  • Artwork is kept so you can reorder, until you ask us to delete it or you delete your account.
  • ID-card staff lists and photos are deleted 30 days after delivery.
  • Unpaid drafts and unanswered custom quotes are cleaned up automatically after a while.
  • The rider's position is overwritten each time it updates, so only the latest one is kept. It is deleted when the order is delivered, and in any case within a day.
  • Review photos: a photo that nobody has checked is deleted after 60 days. A photo we reject is deleted straight away. An approved photo stays until you ask us to remove it or you delete your account.
  • Brand kit files: kept until you remove them or delete your account. We never save ID-card photos in a brand kit.
  • Event plans and template answers are kept with your order so we can reprint it. Event-plan details are cleared when you delete your account.
  • Studio designs, words and uploads are deleted 30 days after you last use the design, or when you delete it or your account. Free-sketch counts are deleted after 40 days.
  • Sign-in records are kept for a limited time for security.

7. Cookies and your phone’s storage

We do not use advertising cookies or trackers. We use:

  • A sign-in cookie that keeps you signed in. It is needed for the site to work.
  • A few small notes kept on your own phone, such as your last delivery area, an unfinished order so we can offer to continue it, and a coupon or referral code from a link you opened. They never leave your phone except when you use them, and you can clear them in your browser settings.
  • A small cookie called bl that remembers whether you chose English or Pidgin. It holds nothing else and lasts a year.
  • If you add Brandit to your home screen, your phone keeps a small copy of our pages and pictures so the app opens faster and shows a friendly message when you have no network. It never stores your orders, tracking pages, payments or anything from the staff console, and it holds nothing personal. We remember on your phone that you closed the “Add to home screen” message so we do not ask again for 30 days.
  • The rider link asks the rider's phone for permission to share its position. It works only while the page is open and only after the rider starts the trip.

8. Your rights

Under the Nigeria Data Protection Act you can ask to:

  • see what we hold about you, and get a copy (your account page has a “Download my data” button, which includes your brand kit, referral codes and rewards, reviews and delivery choices);
  • correct something that is wrong (you can change your details in your account);
  • delete your account and your files, including your brand kit and any review photos (your account page has a “Delete my account” option, which works when you have no order in progress; we keep only the records the law requires; your referral code stops working);
  • stop reminders and offers at any time;
  • object to or limit how we use your data, and take back a consent you gave.

You can also message us and we will help.

9. Keeping it safe

We protect your data with encrypted connections, restricted staff access based on job roles, private storage for your files, and rate limits on sign-in. No system is perfectly safe. If something happens that puts your data at risk, we will tell you and the authorities as the law requires.

10. Children

Brandit is not meant for children under 18. If you think a child has given us personal information, tell us and we will delete it.

11. Changes

If we change this policy, we update the date at the top. If a change affects how we use your data in a big way, we tell you on the site or by message.

12. Contact and complaints

  • Ask us anything about your data on WhatsApp.
  • If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission (NDPC).

Read how an order works in our Terms and Conditions.