Privacy Policy

Who we are

BusinessPress publishes the website at businesspress.ng. The website is operated by Business Press Room, a business registered with the Corporate Affairs Commission (CAC) in Nigeria (registration number 9689108), which is the controller of the personal data described in this policy.

Privacy questions and requests can be sent to contact@businesspr.ng.

What data we collect

We do not require reader accounts, and we do not collect names, addresses or payment details from readers. We collect:

• Newsletter data — the email address you submit, the fact and time of your consent, and the status of your subscription (pending, confirmed or unsubscribed).
• Contact messages — your email address and the content of any message you send us.
• Security data — when you use the newsletter form, your IP address is processed briefly to limit abusive repeat requests. It is stored only as a one-way hash (keyed with a server-side secret), never in its original form, and those records are removed automatically once they are more than 24 hours old.
• Analytics data — only where you have accepted analytics cookies: the pages and screens you view, the time and duration of your visit, your approximate location derived from your IP address, and your browser and device type. Google Analytics 4 does not log or store visitor IP addresses.

How we use your data and our lawful bases

Under the Nigeria Data Protection Act 2023, we rely on the following lawful bases:

• Newsletter emails — your consent, given when you subscribe and verified by the confirmation (double opt-in) email. You may withdraw at any time.
• Analytics — your consent, given through the cookie banner. Nothing analytics-related runs before you accept.
• Preventing abuse of the newsletter form — our legitimate interests in keeping the service secure and available.
• Responding to enquiries and legal correspondence — our legitimate interests and, where applicable, compliance with a legal obligation.

We do not sell personal data.

Newsletter subscriptions

Newsletter subscriptions are optional and require an email address and explicit consent. We use a confirmation email to verify each request; pending requests do not receive news updates. Confirmed subscribers can withdraw consent at any time using the unsubscribe link provided in every newsletter email. Unsubscribed addresses are kept only as needed to honour that request and to prevent unwanted re-subscription, and are then deleted as described under “Retention” below.

Cookies and analytics

We use Google Analytics 4 (GA4), a web analytics service provided by Google, to understand how readers use the site in aggregate. When you accept analytics cookies, GA4 sets first-party cookies named _ga and _ga_<measurement-id> and collects the analytics data described above. We use this information only to measure and improve our journalism and the performance of the site, and we do not sell it.

Analytics cookies are not required for the site to function, and the Google Analytics tag is loaded only after you accept it using the consent banner. You can change or withdraw your choice at any time using the control below, or by blocking or deleting cookies in your browser settings. Withdrawing consent deletes the analytics cookies and stops the tag from loading. Your choice is remembered in your browser using a local-storage entry, not a tracking cookie.

The password-protected newsroom administration area uses a single strictly necessary session cookie (bpr_session) to keep signed-in staff authenticated. It is not set on the public website.

Open cookie settings

Sharing and international transfers

We use service providers to run the site and its email, and they process personal data only on our instructions. Our current providers are:

• Vercel — website hosting and delivery;
• Supabase — database and storage for newsroom content and subscriber records;
• Resend — delivery of newsletter and confirmation emails;
• Google — Google Analytics 4, only where you have accepted analytics cookies.

Some of these providers operate globally and may process personal data outside Nigeria. Where personal data is transferred outside Nigeria, we rely on appropriate safeguards under the Nigeria Data Protection Act 2023 for those transfers.

Retention

We keep personal data only as long as it is needed for the purposes described in this policy, or as required by law. Our retention schedule is:

• Newsletter security records (hashed IP rate limits) are removed automatically once they are more than 24 hours old.
• Unconfirmed newsletter requests — the confirmation link expires 24 hours after signup, and unconfirmed records are deleted automatically after that.
• Confirmed subscribers — kept while your subscription is active. If you unsubscribe, the record is kept for 12 months to honour your choice and prevent unwanted re-subscription, and is then deleted automatically.
• Contact messages are kept only as long as needed to deal with the enquiry and any related legal obligation.

Deletion is performed by a secure, scheduled process that runs on our own infrastructure. Records are deleted rather than reused, so a deleted address cannot be reactivated without you subscribing again.

Your rights

Under the Nigeria Data Protection Act 2023 you may have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent where processing is based on consent. Where processing is based on consent, you may withdraw that consent at any time. To exercise any of these rights, contact us at contact@businesspr.ng.

NDPC registration and our Data Protection Officer

Business Press Room processes personal data as a data controller under the Nigeria Data Protection Act 2023. We review our obligations under the Act and the Nigeria Data Protection Commission (NDPC) guidance, including any requirement to register as a data controller and to appoint a Data Protection Officer.

Complaints

If you are not satisfied with how we handle your personal data, please contact us first. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Contact

Questions about this policy or your personal data can be sent to contact@businesspr.ng. See also our contact page.

Last updated: 14 October 2026.