Privacy Policy

Last updated: 29 July 2026

This policy explains what personal data Legend Paints collects through this website, why we collect it, who else sees it, and what you can ask us to do about it. Legend Paints is a trading name of Gerolyn Chemical & Allied Products Ltd., 3 Abiodun Odueke Crescent, Off Una Road, Iju-Ishaga, Lagos, Nigeria. We are the data controller for the data described here.

It is written to the Nigeria Data Protection Act 2023 (NDPA). If you are visiting from the EU or UK, we also treat your data in line with the GDPR principles of lawful basis, minimisation, and your right to access and erasure.

What we collect, and why

1. Bulk quote requests

When you submit the contractor quote form we collect your name, company name, phone number, email address, and the project scope you describe. We use it for one purpose: to price your job and get back to you. Our lawful basis is your request, meaning steps taken at your initiative prior to a contract.

You should know exactly how this works, because it is unusual: this website has no server and no database. Submitting the form opens WhatsApp on your own device with the details pre-filled into a draft message. Nothing is sent until you press send in WhatsApp yourself. Once you do, the message is delivered through WhatsApp, which is operated by Meta, and is then held in our WhatsApp Business inbox and our own sales records. If you would rather not involve WhatsApp, call us on 08023202635 or email legendpaints@yahoo.com and we will take the details directly.

2. Analytics

We use PostHog, hosted in the European Union, to understand which pages, colours, and tools people actually use. It records pageviews, clicks, the device and browser type, an approximate location derived from your IP address, and technical errors.

Until you press Accept on the consent bar, this runs in cookieless mode. No cookie is set, nothing is written to your browser storage, and no identifier is kept that could link your visits together. If you accept, PostHog sets a first-party cookie so we can tell a returning visitor from a new one. If you decline, it stays cookieless permanently. Either way the site works exactly the same, and we do not sell this data or use it for advertising.

3. Things we deliberately do not collect

  • We do not run a mailing list. This website has no newsletter sign-up and we do not collect email addresses for marketing. The only email address we hold is one you put in a quote request, and it is used solely to reply to it.
  • Photos you use in the Room Visualizer never leave your device. The visualizer is a self-contained tool that runs entirely inside your browser. There is no upload, no server, and no copy kept anywhere. Close the tab and it is gone.
  • We take no card or bank details on this website. There is no checkout. Payment is arranged directly with our sales team.
  • We do not run advertising pixels or sell data to third parties.

Who else processes your data

  • Vercel hosts this website and processes server logs, including IP addresses, to serve pages and block abuse.
  • PostHog (EU region) processes the analytics described above.
  • Meta / WhatsApp delivers any message you choose to send us, under WhatsApp's own privacy policy.
  • Google Fonts serves the site's typefaces, which involves your browser requesting files from Google.

Some of these are outside Nigeria, so your data may be transferred abroad. We only use providers that commit to protection standards comparable to the NDPA.

How long we keep it

Quote requests and the correspondence around them are kept for up to seven years, because they are business and tax records. Analytics data is retained on PostHog's standard schedule and is not tied to a named person.

Your rights

Under the NDPA you can ask us to:

  • tell you what data we hold about you, and give you a copy
  • correct anything that is wrong
  • delete your data, where we are not legally required to keep it
  • stop using it for a particular purpose, including marketing

To exercise any of these, email legendpaints@yahoo.com or call 08023202635. We will respond within 30 days. If you are not satisfied, you can complain to the Nigeria Data Protection Commission.

Security

The site is served only over HTTPS. Because we hold no database and no payment details, there is no store of customer records on this website to breach. Quote details live in our WhatsApp Business inbox and internal sales records, which are access-restricted to the staff who need them.

Changes

If we change how we handle data, we will update this page and move the date at the top. If we ever start a mailing list, we will ask for consent then rather than assume it from a past quote request.

We use privacy-friendly analytics to see which pages and colours people actually use. Until you accept, it runs without cookies and without identifying your device. Read our privacy policy.