Website Privacy Policy.

Magic Carpet Studios ("Magic Carpet Studios", "we", "us" or "our") is committed to protecting the privacy and personal data of individuals who interact with us through our website, digital platforms and related services.

This Website Privacy Policy ("Privacy Policy") explains how we collect, use, disclose, store and protect personal data obtained through our website at https://magiccarpet.studio/ (the "Website").

This Privacy Policy applies to personal data collected through the Website, including information submitted through our Create with Us and Join Our Team pages, newsletter subscriptions, meeting-booking arrangements and other interactions with the Website.

We process personal data in accordance with the Nigeria Data Protection Act 2023 ("NDPA"), applicable regulations and guidance issued by the Nigeria Data Protection Commission ("NDPC"), and other applicable laws.

Magic Carpet Studios is an animation, VFX and motion design studio. This policy explains how we handle personal data, in compliance with the UK GDPR and the Data Protection Act 2018.

For privacy and data-protection enquiries, please contact us at: hello@magiccarpet.studio

Where Magic Carpet Studios appoints a designated Data Protection Officer or dedicated privacy contact, the relevant contact details may be added to this Privacy Policy.

The type of personal data we collect depends on how you interact with the Website.

We may collect personal data:

• directly from you through Website forms;
• when you contact us by email;
• when you subscribe to our communications;
• when you submit an employment or collaboration enquiry;
• when you interact with the Website;
• when you book a meeting through an integrated third-party service;
• through cookies and similar technologies; and
• from third parties where such collection is lawful and appropriate.

We may process personal data for purposes including:

1. responding to enquiries and requests;
2. evaluating potential projects, partnerships and business opportunities;
3. communicating with prospective and existing clients, collaborators and partners;
4. considering employment and talent applications;
5. managing recruitment and selection processes;
6. providing requested information and services;
7. arranging meetings and consultations;
8. managing newsletter and other communications;
9. maintaining and improving the Website;
10. monitoring Website performance and security;
11. protecting our intellectual property, confidential information and other rights;
12. preventing fraud, misuse or unauthorised access;
13. complying with applicable legal and regulatory obligations;
14. establishing, exercising or defending legal claims; and
15. carrying out other purposes disclosed at the point of collection or otherwise permitted by law.

We will not use personal data for purposes incompatible with the purpose for which it was collected unless such processing is permitted or required by law.

Depending on the circumstances, we may process personal data on the basis of:

• your consent;
• steps taken at your request before entering into a contract;
• performance of a contract;
• compliance with a legal obligation;
• protection of vital interests where applicable;
• performance of a task carried out in the public interest where applicable; or
• our legitimate interests, where permitted by law and where those interests are not overridden by your rights and freedoms.

Where we rely on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Magic Carpet Studios operates in the creative and entertainment industry and may receive project-related information through the Website.

Unless expressly agreed otherwise in writing, submission of information through the Website does not create an obligation on Magic Carpet Studios to:

• maintain confidentiality beyond any obligation imposed by law;
• develop or produce the submitted material;
• enter into a commercial relationship;
• pay compensation;
• license or acquire rights in the material; or
• return submitted materials.

Any specific confidentiality, intellectual-property, production, licensing or commercial arrangement will be governed by the applicable written agreement.

We may disclose personal data where reasonably necessary to:

• authorised employees and representatives;
• professional advisers, including legal and financial advisers;
• recruitment and human-resources service providers;
• hosting, cloud-storage and technology providers;
• Website developers and technical service providers;
• communications and newsletter providers;
• analytics and security providers, where applicable;
• meeting and scheduling service providers;
• business partners and contractors where necessary for an identified purpose;
• regulators and government authorities where legally required;
• courts or other competent authorities; and
• prospective investors, purchasers or transaction counterparties where reasonably necessary in connection with a corporate transaction.

Where a third party processes personal data on our behalf, we will take reasonable steps to ensure appropriate data-protection obligations and safeguards are in place.

The Website may link to or integrate third-party services, platforms and websites, including meeting-booking services, social-media platforms and the Magic Lab Academy website.

Third-party providers operate under their own privacy policies and terms.

We are not responsible for the privacy practices of third-party websites or platforms that we do not control.

Some of our service providers may process personal data outside Nigeria.

Where personal data is transferred outside Nigeria, Magic Carpet Studios will take appropriate steps to ensure that the transfer complies with applicable Nigerian data-protection requirements.

We take reasonable technical and organisational measures to protect personal data against:

• unauthorised access;
• unlawful processing;
• accidental loss;
• destruction;
• alteration;
• unauthorised disclosure; and
• other unauthorised or unlawful processing.

No electronic transmission or storage system can be guaranteed to be completely secure. Where a personal-data breach occurs, we will take appropriate steps in accordance with applicable law.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to comply with legal and regulatory obligations, resolve disputes, enforce agreements and protect our legitimate interests.

Retention periods may vary depending on the type of information and the circumstances in which it was collected. For example:

• recruitment/application information: may be retained for a reasonable period after the relevant recruitment process;
• business enquiry information: may be retained for as long as reasonably necessary to manage the relevant relationship or potential relationship;
• contractual records: may be retained for the applicable contractual, legal and limitation periods; and
• newsletter information: may be retained while a subscription remains active, subject to applicable requirements.

When information is no longer required, we will take reasonable steps to delete, destroy or anonymise it, subject to applicable legal obligations.

Subject to applicable law and relevant limitations, you may have the right to:

• request information about how your personal data is processed;
• request access to personal data we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion or erasure in appropriate circumstances;
• request restriction of certain processing;
• object to certain processing;
• withdraw consent where processing is based on consent;
• request portability of personal data where applicable;
• object to direct marketing;
• exercise rights relating to applicable automated decision-making; and
• lodge a complaint with the NDPC.

These rights are subject to the conditions and exemptions provided by applicable law.

To exercise a data-protection right or raise a privacy concern, contact:

We may request reasonable information to verify your identity before processing a request. We will respond to valid requests within the timeframe prescribed by applicable law.

The Website is not intended to knowingly collect personal data from children in circumstances where applicable law requires additional safeguards or consent.

Where we become aware that personal data has been collected contrary to applicable legal requirements, we will take reasonable steps to address the situation.

The Website may use cookies and similar technologies for essential functionality, security, preferences, analytics and other purposes.

Where applicable law requires consent for non-essential cookies or tracking technologies, appropriate consent mechanisms will be provided.

Further information is contained in our Cookie Policy.

The Website contains links to Magic Carpet Studios' social-media channels and may contain embedded or linked social-media content.

Interaction with third-party social-media platforms is governed by the relevant platform's own terms and privacy policy.

We may update this Privacy Policy from time to time to reflect changes in our operations, Website functionality, technology, legal requirements or data-protection practices.

The updated version will be published on the Website with a revised "Last Updated" date.

If you have concerns about how we process your personal data, please contact us first at hello@magiccarpet.studio.

You may also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or another competent supervisory authority.

This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Federal Republic of Nigeria.