CelebrateThem
Needs legal reviewDrafted to NDPR / GDPR sensibilities in plain language. A Nigerian-qualified data-protection lawyer should review before launch.
Legal

Privacy policy.

Last updated 18 April 2026Data controller: CelebrateThem Ltd, Lagos, Nigeria

CelebrateThem holds information that belongs to you and the people you write about. This page says what we hold, why we hold it, who else sees it, and what you can ask us to change.

01What this covers

This policy applies to everyone who uses CelebrateThem: the person creating a tribute, the family they name, the people who visit to read, sign, or donate. It covers the website, any emails we send you, and any CelebrateThem app you sign in to.

02What we collect

From you directly:

  • Your email address and password, when you create an account.
  • Anything you put into a tribute: names, dates, a life story, photos, audio, video.
  • Messages, candles, and donations you add to tributes.
  • Card payment details, which you give to Paystack or Flutterwave, not to us. We only see whether a payment succeeded.

From your device:

  • The IP address your browser uses, the browser and device type, the pages you visit, and the time you visited. We use this for security and to understand how the site is used.
  • Cookies: the small ones that keep you signed in, and the ones you allowed in the cookie banner.

03Why we collect it

To give you an account. To publish your tribute. To send the messages and photos you post. To take payments. To answer your questions when you email us. To send transactional emails such as payment receipts and new message notifications. If you opted in, to send occasional product update emails, which you can turn off any time.

04Who we share with

A short, complete list. We do not add to it without telling you.

  • Supabase. Stores our database and uploaded files. Based in the United States.
  • Paystack and Flutterwave. Process card payments. Based in Nigeria and the United Kingdom.
  • Resend (or our current transactional email provider). Sends the emails you get from us.
  • Plausible. Anonymous analytics if you agreed to it in the cookie banner. No personal data leaves the site.
  • Law enforcement. Only if they send us a valid court order, and only what that order requires.

We never sell anything about you. We never share with advertisers. That is not what this place is for.

05Cookies and tracking

See the cookie banner for what each category does and how to change your choice. Essential cookies stay on because the site doesn’t work without them.

06Your rights

You can ask us to:

  • Show you a copy of everything we hold about you.
  • Correct anything that is wrong.
  • Delete your account and the data tied to it.
  • Export your tribute’s content as a download.
  • Stop sending you product update emails.

Email privacy@celebratethem.ng. We reply within seven working days.

07Keeping it safe

Data is encrypted in transit and at rest. Access is restricted to named staff with two-factor authentication. We review access quarterly. In the event of a data breach that affects you, we will tell you within seventy-two hours of finding it, as the NDPR requires.

08How long we keep it

Tributes stay up for as long as the account that created them is active. Payment records are kept for seven years for tax and accounting. Analytics data is aggregated and not tied to your identity. If you close your account, we delete your profile within thirty days; tributes you created stay up unless you ask us to take them down.

09Children and young people

Accounts are for people aged eighteen and above. If we learn that someone younger has created an account, we will close it and delete the data.

10If you move countries

CelebrateThem is a Nigerian service but our storage providers operate servers in other countries. By using the service you consent to your data being transferred and stored outside Nigeria, with the protections listed above.

Questions about your data?

Write to our data protection contact at privacy@celebratethem.ng. You also have the right to complain to the Nigeria Data Protection Commission.