Privacy Policy

Last Updated: September 19, 2026

Upstreet Studio (“Upstreet Studio”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit https://upstreetstudio.com, contact us, submit an enquiry, purchase our services or otherwise interact with us.

This policy is intended to operate in accordance with applicable data protection laws, including the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations and guidance.

1. Who We Are

The data controller responsible for personal information collected through our website and services is:

Upstreet Studio
Website: https://upstreetstudio.com
Email: support@upstreetstudio.com

For privacy-related questions or requests, contact us using the details above.

2. Information We Collect

Depending on how you interact with us, we may collect the following categories of information.

Information You Provide

This may include:

Full name
Business or organization name
Email address
Telephone or WhatsApp number
Billing or business address
Project requirements
Website or domain information
Information submitted through contact, quotation, project or support forms
Communications you send to us
Files, images, documents and other materials you voluntarily provide
Information required to provide a requested service

Payment and Transaction Information

When you purchase a service, we may receive information relating to the transaction, such as:

Customer name
Amount paid
Currency
Transaction reference
Date and time of payment
Payment status
Product or service purchased

Payments may be processed by third-party payment providers.

Where payment is processed by a payment provider, your card or financial information may be collected and processed directly by that provider in accordance with its own privacy and security policies.

We do not intentionally request or store your full card number, PIN, CVV or online banking password on our website.

3. Automatically Collected Information

When you visit our website, certain technical information may be collected automatically, depending on the technologies we use.

This may include:

IP address
Browser type
Device type
Operating system
Pages visited
Referring website
Approximate location derived from technical information
Date and time of visits
Website interaction information
Security and diagnostic information

This information may be used to operate, secure and improve our website and services.

4. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies may be used to:

Keep the website functioning correctly;
Remember preferences;
Understand website traffic and usage;
Improve website performance;
Support security;
Measure marketing or advertising performance where applicable.

Some cookies may be placed by third-party services used on our website.

Where required by applicable law, we will provide appropriate information and choices regarding non-essential cookies.

You may also control cookies through your browser settings. Disabling certain cookies may affect some website functionality.

5. Why We Use Your Information

We may process your personal information for purposes including:

Responding to enquiries;
Providing requested services;
Processing orders and payments;
Communicating with you about your order or project;
Managing subscriptions;
Providing customer support;
Delivering digital products and services;
Managing websites, domains or systems on your behalf;
Sending service-related notifications;
Preventing fraud and unauthorized transactions;
Maintaining website and system security;
Improving our website and services;
Maintaining business and financial records;
Complying with legal and regulatory obligations;
Resolving disputes and enforcing agreements;
Sending marketing communications where permitted and where applicable consent has been provided.

6. Lawful Basis for Processing

Depending on the circumstances, we may process personal information on one or more lawful bases permitted under applicable data protection law, including:

Your consent;
Performance of a contract or steps taken at your request before entering into a contract;
Compliance with a legal obligation;
Protection of legitimate business interests where those interests are not overridden by your rights and interests;
Other lawful bases recognized under applicable law.

Where processing is based on consent, you may withdraw your consent subject to legal or contractual limitations.

7. Payment Processing

We may use third-party payment providers to process payments for our products and services.

Payment providers may process transaction and payment information to:

Process and authorize payments;
Prevent fraud;
Verify transactions;
Maintain payment security;
Comply with financial and regulatory requirements;
Process refunds and transaction disputes.

The payment provider’s own terms and privacy policy will also apply to the payment transaction.

8. Service Providers and Third Parties

We may use trusted third-party providers to help us operate our business and provide services.

These may include providers for:

Payment processing;
Website hosting;
Domain registration;
Email and communication;
Analytics;
Website security;
Cloud storage;
Customer support;
Project management;
Advertising and marketing;
Software, plugins and APIs;
Business administration.

We seek to use third-party providers that provide appropriate safeguards for personal information.

We do not sell your personal information as a business practice.

We may disclose information where reasonably necessary to provide a service, process a payment, protect our systems, comply with the law, enforce our agreements or respond to a lawful request.

9. International Data Transfers

Some service providers we use may process or store information outside Nigeria.

Where personal information is transferred across borders, we will take reasonable steps to ensure that the transfer and processing are conducted in accordance with applicable data protection requirements.

10. Data Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.

These measures may include access controls, secure connections, account protections, software updates, security monitoring and other appropriate safeguards.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

11. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining business records, resolving disputes, enforcing agreements and complying with legal, tax, accounting or regulatory obligations.

Different categories of information may therefore be retained for different periods.

When information is no longer required, we may securely delete, anonymize or otherwise dispose of it in accordance with applicable requirements.

12. Your Data Protection Rights

Subject to applicable law and relevant conditions, you may have rights including:

The right to be informed about how your personal information is processed;
The right to request access to personal information we hold about you;
The right to request correction of inaccurate or incomplete information;
The right to object to certain processing;
The right to request restriction of processing in appropriate circumstances;
The right to request deletion or erasure where applicable;
The right to data portability where applicable;
The right to withdraw consent where processing is based on consent;
Rights relating to certain automated decision-making;
The right to lodge a complaint with the relevant data protection authority.

The NDPC identifies these as among the rights available to data subjects under the Nigeria Data Protection Act.

13. How to Exercise Your Rights

To make a privacy or data-protection request, contact:

Email: support@upstreetstudio.com

Please provide enough information to allow us to identify you and understand your request.

We may need to verify your identity before providing access to personal information or carrying out certain requests.

We will respond to valid requests within the period required by applicable law.

14. Marketing Communications

Where applicable, we may send you information about our services, offers, updates or other marketing communications.

You can unsubscribe from marketing communications at any time by following the unsubscribe instructions in the communication or contacting us.

Even if you opt out of marketing communications, we may continue to send important service-related communications, such as payment confirmations, project updates, security notices or other transactional messages.