Privacy Policy

Privacy Policy for Echotitbits.com

Effective Date: September 15, 2026
Last Updated: September 15, 2026

Echotitbits.com (“Echotitbits,” “we,” “us,” or “our”) operates Echotitbits.com (the “Site”), a digital news, information, commentary, and media platform.

We respect the privacy of our readers, subscribers, contributors, and other visitors. This Privacy Policy explains what personal information we collect, how and why we use it, when we disclose it, how long we retain it, the choices available to you, and the rights you may have under applicable privacy and data-protection laws.

Depending on where you are located and the circumstances in which we process your information, these laws may include:

• the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations, directives, and guidance issued by the Nigeria Data Protection Commission (NDPC);
• the EU General Data Protection Regulation (GDPR);
• the UK GDPR, the Data Protection Act 2018, and applicable UK electronic-communications and privacy rules;
• the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), where applicable;
• other applicable U.S. state privacy laws; and
• other privacy and data-protection laws that apply to our activities.

Not every law or right described in this Policy necessarily applies to every visitor or to Echotitbits in every circumstance. Rights are available to the extent provided by applicable law.

1. Personal Information We Collect

The information we collect depends on how you interact with Echotitbits.

A. Information You Provide to Us

We may collect information that you voluntarily provide, including:

• your name, email address, telephone number, or other contact information;
• newsletter subscription information;
• account or profile information, where account functionality is offered;
• comments, feedback, letters to the editor, article submissions, tips, or other content you submit;
• information contained in communications you send to us;
• survey, contest, promotion, or event information; and
• subscription, donation, or transaction information where paid services or donations are offered.

Where payments are processed through a third-party payment provider, payment-card information may be collected directly by that provider. Echotitbits does not intend to store complete credit- or debit-card numbers unless specifically stated otherwise.

B. Information Collected Automatically

When you access or use the Site, we and our technology partners may automatically collect certain information, including:

• Internet Protocol (IP) address;
• browser type and version;
• operating system and device type;
• device and advertising identifiers, where permitted;
• referring and exit pages or URLs;
• pages and articles viewed;
• dates and times of visits;
• approximate geographic location derived from IP address;
• interactions with advertisements, links, and Site features;
• traffic-source and audience-engagement information;
• cookie identifiers and similar online identifiers; and
• diagnostic, performance, security, and error information.

We may use cookies, pixels, tags, scripts, local storage, software development kits, and similar technologies to collect some of this information.

C. Information From Third Parties

We may receive information from third parties, including:

• analytics providers;
• advertising and ad-technology providers;
• social-media platforms;
• newsletter and email-service providers;
• hosting and security providers;
• payment processors;
• content-distribution and technology partners; and
• publicly available sources.

Where social-media features, embedded posts, videos, or other third-party content appear on the Site, those providers may independently collect information in accordance with their own privacy policies.

D. Information Used for Journalism

As a news and information organization, Echotitbits may collect, receive, research, publish, or otherwise process information obtained from public records, interviews, press releases, public statements, social-media posts, news agencies, government sources, correspondents, contributors, eyewitnesses, and other journalistic sources.

Where applicable, such processing may be subject to journalistic, freedom-of-expression, public-interest, or similar exemptions and protections under applicable law.

2. Sensitive Personal Information

We do not generally seek to collect sensitive or special-category personal information from ordinary Site visitors.

However, information concerning matters such as health, political opinions, religious beliefs, ethnicity, biometric information, sexual orientation, or other sensitive subjects may appear in news reporting, public comments, correspondence, or material voluntarily submitted to us.

Where applicable, we process sensitive personal information only where permitted by law, including where necessary for legitimate journalistic activities, freedom of expression, public-interest reporting, legal claims, or with appropriate consent.

Please avoid including unnecessary sensitive personal information in public comments or submissions.

3. How We Use Personal Information

We may use personal information to:

• operate, maintain, secure, and improve Echotitbits.com;
• publish and deliver news, commentary, analysis, and other content;
• provide requested services and Site functionality;
• administer subscriptions and user accounts;
• send newsletters and editorial updates;
• communicate with readers, contributors, advertisers, and other users;
• moderate comments and prevent abuse;
• measure readership, traffic, and audience engagement;
• understand which articles and services are useful to readers;
• improve Site performance and user experience;
• personalize content where permitted;
• display, measure, and manage advertising;
• prevent fraud, spam, malicious activity, and security threats;
• troubleshoot technical problems;
• enforce our Terms of Use and other policies;
• establish, exercise, or defend legal rights;
• comply with legal and regulatory obligations;
• respond to lawful requests from courts, regulators, and government authorities; and
• conduct journalism, news gathering, editorial research, publication, archiving, and related activities.

We may also aggregate or de-identify information and use the resulting information for analytics, research, audience measurement, business planning, and other lawful purposes.

4. Legal Bases for Processing

Where laws such as the NDPA, GDPR, or UK GDPR require us to identify a lawful basis, we may rely on one or more of the following:

Consent. For example, where required for newsletters, certain marketing communications, personalized advertising, or non-essential cookies and tracking technologies.

Contract. Where processing is necessary to provide a service you have requested or to perform an agreement with you.

Legitimate Interests. Where processing is reasonably necessary for our legitimate interests or those of a third party, including Site security, fraud prevention, audience measurement, improving our services, operating our business, and supporting journalism, provided those interests are not overridden by applicable privacy rights.

Legal Obligation. Where processing is necessary to comply with applicable law, regulation, court order, or other legal requirement.

Public Interest, Journalism, and Freedom of Expression. Where applicable, information may be processed for journalism, news reporting, editorial activities, archiving, freedom of expression, or other public-interest purposes in accordance with applicable law.

Other lawful bases may apply where permitted by applicable law.

5. Advertising, Analytics, and Third-Party Technologies

Echotitbits may use third-party advertising and analytics services to support the operation of the Site.

These providers may use cookies and similar technologies to collect information about visits to the Site and, where permitted, visits to other websites or applications. This information may be used to:

• measure Site traffic and audience engagement;
• measure advertising performance;
• prevent advertising fraud;
• limit how often advertisements are displayed;
• provide contextual advertising; and
• provide personalized or interest-based advertising where permitted and where required consent has been obtained.

Our advertising and analytics providers may act as processors, service providers, contractors, or independent controllers/businesses depending on the particular service and applicable law.

Where legally required, advertising or analytics technologies that are not strictly necessary will not be activated until the appropriate consent or choice has been obtained.

Users may be provided with controls through our cookie-consent platform or Privacy Choices mechanism to manage applicable advertising and tracking preferences.

6. Cookies and Similar Technologies

Echotitbits uses cookies and similar technologies.

These technologies may fall into categories such as:

Strictly Necessary Cookies — required for security, Site functionality, consent management, or other essential functions.

Functional Cookies — used to remember preferences and enhance Site functionality.

Analytics and Performance Cookies — used to understand traffic, readership, Site performance, and audience engagement.

Advertising Cookies — used to deliver, measure, limit, or personalize advertising where permitted.

Social Media and Embedded-Content Technologies — technologies that may be placed or accessed when users interact with embedded videos, posts, sharing tools, or other third-party content.

Where applicable law requires consent, we seek consent before placing or accessing non-essential cookies or similar technologies.

You may manage your choices through the cookie banner or privacy-preference controls available on the Site. You may also be able to restrict cookies through your browser settings.

Withdrawing consent does not affect processing that lawfully occurred before withdrawal.

Additional information about specific cookies, providers, purposes, and retention periods may be provided in our Cookie Policy or cookie-preference center.

7. Disclosure of Personal Information

We may disclose personal information to:

• website hosting and infrastructure providers;
• content-delivery and cybersecurity providers;
• analytics providers;
• advertising and ad-technology providers;
• email and newsletter providers;
• payment processors;
• professional advisers, including lawyers, accountants, and auditors;
• contractors and other service providers that support our operations;
• regulators, courts, law-enforcement authorities, or government bodies where legally required; and
• parties involved in an actual or proposed merger, acquisition, financing, restructuring, sale of assets, or similar business transaction.

Service providers that process personal information on our behalf are required, where applicable, to protect the information and process it in accordance with contractual and legal requirements.

We may also disclose information where reasonably necessary to protect Echotitbits, our users, another person, or the public from fraud, abuse, security threats, or unlawful activity.

8. Sale, Sharing, and Targeted Advertising — U.S. Privacy Rights

Echotitbits does not sell personal information for money in the conventional sense.

However, some U.S. privacy laws define terms such as “sale,” “sharing,” “targeted advertising,” or “cross-context behavioral advertising” broadly enough that certain uses of advertising cookies, pixels, or similar technologies may fall within those definitions.

Where applicable, users may have the right to opt out of:

• sale of personal information;
• sharing of personal information for cross-context behavioral advertising; or
• processing of personal information for targeted advertising.

Where required, Echotitbits will provide an appropriate “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” mechanism.

Where legally required, we will also process recognized browser-based opt-out preference signals, including Global Privacy Control (GPC) signals.

We do not discriminate against users for exercising privacy rights protected by applicable law.

9. International Transfers

Because Echotitbits operates on the Internet and uses technology and service providers that may operate internationally, personal information may be processed in Nigeria, the United States, the United Kingdom, countries within the European Economic Area, or other jurisdictions.

Where required by applicable law, we use appropriate mechanisms to protect international transfers, which may include:

• adequacy decisions or regulations;
• approved Standard Contractual Clauses;
• the UK International Data Transfer Agreement or applicable UK transfer mechanisms;
• contractual safeguards;
• transfers permitted under the Nigeria Data Protection Act; or
• another legally recognized transfer mechanism.

The privacy and data-protection laws of a destination country may differ from those in your country of residence.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, security, editorial, archival, and regulatory requirements.

Retention periods vary according to the nature of the information and why it is processed.

For example:

• account and subscription information may be retained while an account or subscription remains active and for an appropriate period afterward;
• newsletter information may be retained until you unsubscribe, subject to limited suppression records needed to honor your request;
• comments may remain available while the associated article or discussion remains published;
• security and technical logs may be retained for an appropriate period for security and troubleshooting;
• financial and transaction records may be retained as required by applicable tax, accounting, or other laws; and
• journalistic and editorial records may be retained for archival, historical, evidentiary, freedom-of-expression, or public-interest purposes where permitted by law.

Where appropriate, information may instead be aggregated, anonymized, or de-identified.

11. Your Privacy Rights

Your rights depend on where you live, the laws applicable to Echotitbits, and the context in which your information is processed.

Nigeria

Subject to the Nigeria Data Protection Act 2023 and applicable exemptions, you may have rights including:

• the right to be informed about processing;
• access to personal data;
• correction of inaccurate information;
• deletion or erasure where applicable;
• restriction of processing;
• objection to certain processing;
• data portability where applicable;
• withdrawal of consent;
• rights relating to certain automated decision-making; and
• the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

European Economic Area

Subject to applicable GDPR requirements and exemptions, you may have rights to:

• access;
• rectification;
• erasure;
• restriction of processing;
• data portability;
• objection to processing;
• objection to direct marketing;
• withdrawal of consent; and
• protection concerning certain solely automated decisions.

You may also lodge a complaint with the data-protection supervisory authority in your country.

United Kingdom

Subject to the UK GDPR, Data Protection Act 2018, and applicable exemptions, UK users may have similar rights, including access, correction, erasure, restriction, portability, objection, and withdrawal of consent.

You may have the right to complain to the UK Information Commissioner’s Office (ICO).

California

Where the CCPA/CPRA applies, California residents may have rights including:

• the right to know what categories and specific pieces of personal information are collected;
• the right to know the purposes for which information is collected, used, sold, or shared;
• the right to request deletion, subject to exceptions;
• the right to correct inaccurate personal information;
• the right to opt out of sale or sharing of personal information;
• the right to limit certain uses or disclosures of sensitive personal information, where applicable;
• the right to use an authorized agent; and
• the right not to receive discriminatory treatment for exercising protected privacy rights.

Other U.S. States and Jurisdictions

Residents of certain other U.S. states or countries may have additional privacy rights under applicable local law. Where those laws apply to Echotitbits, we will honor qualifying requests as required.

12. Exercising Your Rights

To submit a privacy request, contact:

privacy@echotitbits.com

Please specify the nature of your request and the jurisdiction in which you reside.

We may request information reasonably necessary to verify your identity and determine whether a particular privacy law applies.

We will respond within the period required by applicable law. The applicable response period may vary by jurisdiction and may, where permitted, be extended in certain circumstances.

We may decline or limit a request where permitted by law, including where an applicable journalistic, freedom-of-expression, legal, security, recordkeeping, or other exemption applies.

13. Marketing Communications

You may unsubscribe from promotional or newsletter emails by using the unsubscribe mechanism provided in the communication or by contacting us.

Even if you opt out of marketing communications, we may continue to send non-promotional communications where necessary, such as security notices, privacy-request correspondence, or communications concerning a service you requested.

14. Children’s Privacy

Echotitbits is a general-audience news and information service and is not intended or designed primarily for children.

We do not knowingly solicit personal information from children in violation of applicable law.

If you believe a child has provided personal information to us in circumstances prohibited by law, please contact privacy@echotitbits.com so that we can investigate and take appropriate action.

Where applicable law establishes a different age or requires parental authorization for particular processing, we will comply with those requirements.

15. Information Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, loss, or misuse.

These measures may include access controls, security monitoring, software updates, encryption where appropriate, authentication controls, backups, and other security measures appropriate to the nature of the information.

No Internet transmission, website, or electronic storage system can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

16. Data Breaches

If a personal-data breach occurs, we will assess the incident and, where required by applicable law, notify the appropriate supervisory authority and affected individuals within applicable legal timeframes.

We may also take steps to contain, investigate, remediate, and reduce the risk of recurrence.

17. Third-Party Websites, Embedded Content, and Social Media

Articles and other Site content may contain links to external websites or embedded content from third parties, including social-media platforms, video services, advertisers, and other publishers.

Interacting with third-party content may allow those third parties to collect information about you.

Echotitbits does not control the privacy practices of independent third parties. Their collection and processing of personal information are governed by their respective privacy policies and terms.

We encourage you to review those policies before providing information or interacting with third-party services.

18. Journalism, Public Records, and Freedom of Expression

Nothing in this Privacy Policy is intended to restrict lawful journalism, news reporting, commentary, editorial activity, freedom of expression, public-interest reporting, or legitimate archival activities.

Privacy and data-protection rights may be subject to exemptions, limitations, or balancing requirements where personal information is processed for journalism, freedom of expression, public records, legal reporting, historical archives, or other purposes protected by applicable law.

Requests concerning information contained in published news articles will therefore be evaluated in accordance with applicable privacy law as well as applicable laws and principles concerning journalism, freedom of expression, public interest, accuracy, and the preservation of the historical record.

19. Changes to This Privacy Policy

We may amend this Privacy Policy periodically to reflect changes in:

• our Site or services;
• technologies we use;
• advertising or analytics practices;
• applicable laws or regulations; or
• our business and editorial operations.

The revised Privacy Policy will be posted on this page with an updated “Last Updated” date.

Where required by law, we will provide additional notice of material changes.

20. Contact Us

Questions, complaints, and privacy-rights requests may be directed to:

Echotitbits.com
Privacy Email: privacy@echotitbits.com
Website: Echotitbits.com
Postal Address: 16 Taiwo Ishola Street, Lekki Phase 1, Lagos Nigeria 

Data Protection Officer or Privacy Contact: The Publisher, Echotitbits.com

Nigeria Data Protection Contact / DPO:
The Publisher, Echotitbits.com

EEA Representative:
The Publisher  Echotitbits.com

UK Representative:
The Publisher, Echotitbits.com

If you believe that our processing of your personal information violates applicable data-protection law, you may also have the right to lodge a complaint with the relevant supervisory or regulatory authority.

Privacy Choices

Where available, you can manage cookies and advertising preferences through the Cookie Settings / Privacy Choices control displayed on Echotitbits.com.

California residents and other users with applicable statutory rights may also use our:

Do Not Sell or Share My Personal Information / Your Privacy Choices

control where required by applicable law.

Requests may also be submitted to:

privacy@echotitbits.com

A few changes are particularly important before publishing this. The biggest correction is that complaints in Nigeria should now refer to the Nigeria Data Protection Commission (NDPC), not NDPB. The NDPA established the NDPC, and the Commission identifies access, rectification, objection, restriction, portability, erasure and automated-decision rights among data-subject protections. 

I also recommend that Echotitbits implement the policy technically rather than merely publish the text. In particular, non-essential tracking should be controlled through the consent platform where consent is legally required; current UK ICO guidance requires prior consent for storage/access technologies unless an exception applies.  For California users, if Echotitbits’ ad-tech practices constitute CCPA “sale” or “sharing,” the site should provide the applicable opt-out and honor qualifying GPC signals. 

One other improvement over your draft is deliberate: I changed “usually 30 days” to “within the period required by applicable law.” That avoids incorrectly implying that GDPR, NDPA, CCPA and every U.S. state privacy statute have the same response deadline. GDPR also requires privacy notices to disclose, among other things, purposes/legal bases, recipients, international transfers, retention criteria and applicable data-subject rights, which the revised version now addresses more systematically. 

For Echotitbits specifically, the next useful step would be a matching Cookie Policy that explicitly covers your WordPress/Google stack—e.g. Google AdSense/Google advertising, Google Analytics/Site Kit, WordPress cookies, consent-management cookies, embedded YouTube/social content, and any other trackers actually installed. That policy should be based on a real cookie/plugin inventory rather than generic boilerplate.