Privacy Policy

1. Who we are

XperienceLSP (“we”, “us”, “our”) runs sports and leisure facilities across Lagos and Enugu, and this website, XperienceLSP.com. We decide how and why your personal data is used, which makes us the data controller under the Nigeria Data Protection Act 2023 (“the Act”).

2. What this policy covers

This policy covers personal data we collect through this website and when you contact us by WhatsApp, phone or email. When you book or visit one of our facilities, you may be given further information about how your data is used there, for example on a booking or participation form.

3. What we collect

• When you send an enquiry: your name, email address and, if you give it, your phone number; how you would like us to reply; the details of your enquiry, such as the facility, date, number of people, company name, group size, program or experience level; your message; and, if you tell us, how you heard about us.
• When you join our newsletter: your email address and a record that you agreed to receive it.
• When you contact us on WhatsApp, by phone or by email: your number or email address and whatever you choose to tell us.
• When you visit the website: like almost every website, our hosting provider records basic technical information, such as your IP address, browser type, the pages requested and the time, to keep the site secure and working.

We do not ask for sensitive personal data through this website, and we ask that you don’t include any, such as health or financial details, in your messages.

4. Why we use it, and our lawful basis

The Act requires a lawful basis for each use of personal data. Ours are:

• To answer your enquiry and arrange bookings, coaching, events or corporate days, because you have asked us to take these steps before entering into an agreement with us, or to perform that agreement.
• To send you our newsletter about packages, offers and what’s on, because you have given your consent. You can withdraw it at any time (see section 8).
• To keep the website secure, stop spam and fix problems, because it is in our legitimate interests to run a safe, working website, and this does not override your rights.
• To keep records we are required to keep, where we have a legal obligation to do so.

We do not sell your personal data, and we do not use it to make decisions about you by automated means alone, or to build profiles for advertising.

5. Who we share it with

We share personal data only with the services that help us run the website and reply to you, and only as far as they need it:

• Web3Forms, which delivers the enquiry form and newsletter sign-ups to our inbox. It stores submissions on encrypted servers provided by Amazon Web Services and may check the sender’s IP address and email address with CleanTalk, a spam-protection service.
• Our email provider, which holds the messages in our inbox.
• WhatsApp (Meta), if you choose to message us there. WhatsApp’s own privacy policy applies to your use of WhatsApp.
• Bluehost, our web host, which stores the website and the technical records described in section 3.
• Google Fonts, which supplies the typefaces on this website. When a page loads, your browser requests them from Google, which receives your IP address and browser details.
• Professional advisers and public authorities, where the law requires it or where it is needed to establish, exercise or defend legal claims.

If we move our newsletter to a dedicated mailing service, or add another service that handles your data, we will name it here and update the date at the top.

6. Transfers outside Nigeria

Some of the services above store or process data outside Nigeria, including in India and the United States. Where your personal data leaves Nigeria, we rely on the grounds the Act allows. These include a transfer being necessary to carry out steps you have asked us to take, and using providers that are bound to protect personal data to an adequate standard.

7. How long we keep it

• Enquiries, including copies held by Web3Forms: for up to three years after our last contact with you, unless you become a customer and we need to keep some details longer for our business or legal records.
• Newsletter sign-ups: until you unsubscribe. After that we keep only a record that you opted out, so that we don’t email you again.
• Technical records: for the short period our hosting provider keeps them for security and troubleshooting.

8. Your rights

Under the Act, you have the right to:

• be told how your personal data is used, which is what this policy is for;
• get a copy of the personal data we hold about you, including in a common electronic format;
• have inaccurate or out-of-date data corrected;
• have your data deleted when we no longer need it or have no lawful basis to keep it;
• ask us to restrict how we use your data while a request or objection is being looked at;
• object to our use of your data, including at any time to direct marketing such as our newsletter;
• receive your data in a form you can take to another organisation;
• withdraw your consent at any time. It is as easy to withdraw as it was to give, and it does not affect anything we did before you withdrew it;
• not be subject to decisions made solely by automated means that significantly affect you; we don’t make any; and
• complain to the Nigeria Data Protection Commission (see section 12).

To use any of these rights, including to unsubscribe from the newsletter, email admin@leisuresportspark.com. We may need to confirm your identity first. We aim to respond within 30 days.

9. Cookies and browser storage

This website does not use advertising or analytics cookies, and it does not track you across other websites. To work properly, it stores a few small settings in your own browser, which are not sent to us:

• whether you chose the light or dark theme;
• whether you have already seen the opening animation during this visit; and
• short-lived notes that make page transitions and facility filters work as you move between pages.

These are strictly necessary for the features you use, so they don’t need your consent. You can clear them at any time in your browser settings. If we ever add cookies that are not strictly necessary, we will ask for your consent first.

10. Children

This website is meant for adults. If you are under 18, please ask a parent or guardian to contact us for you, for example about our Kids to Pro program. We don’t knowingly collect personal data from children through this website. If we learn that we have, we will delete it or ask a parent or guardian for consent.

11. How we protect your data

This website uses an encrypted (HTTPS) connection. Access to enquiries is limited to the people on our team who need it to reply to you, and our providers keep data on encrypted, access-controlled systems. If a personal data breach puts your rights at risk, we will report it to the Nigeria Data Protection Commission within 72 hours of becoming aware of it, as the Act requires, and tell you without undue delay where the risk to you is high.

12. Complaints

If you have a concern about how we use your personal data, please contact us first at admin@leisuresportspark.com and we will do our best to put it right. You also have the right to complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

13. Links to other websites

This website links to other websites and services, such as our facilities’ own websites and Instagram pages, and WhatsApp. Their own privacy policies apply when you use them.

14. Changes to this policy

We may update this policy, for example when we add a new service. The date at the top shows when it last changed. If a change significantly affects how we use your personal data, we will make it clear on this website.