Privacy notice

Version 2026-10-01

Draft: awaiting legal review. Details in [brackets] will be completed before launch.

This notice explains how [Company name] Ltd ("Eventilize") handles personal data under the Nigeria Data Protection Act 2023.

Who is responsible

When you register for an event, the event organizer decides why and how your data is used: they are the data controller. Eventilize runs the guest list, passes and check-in for them as a data processor, under a data processing agreement. For questions about an event, contact its organizer; you can also write to us and we will pass your request on.

For organizer accounts (name, email, password, payments), Eventilize is the controller.

What we hold about guests

• Your name, email address, and phone number if you give one.
• What the organizer records: party size, pass type, table, dietary needs, notes.
• Check-in time and which entrance admitted you.
• Your messaging choices (WhatsApp, SMS), when you made them and the notice version you saw; delivery status of messages sent to you.
• Your approximate country, from your connection, only to preselect your phone number's country code. It isn't stored.

Why

To register you, send your pass and event updates, seat you, and check you in. The legal basis is the organizer's legitimate interest in running their event, or your consent where we ask for it: WhatsApp and SMS messages are sent only if you opt in, and you can stop them at any time.

Who else sees it

The organizer and the team they invite. Our service providers (sub-processors) handle it on our behalf: see the list of sub-processors and where data is stored. Some are outside Nigeria; transfers are covered by contracts with them. We never sell personal data or use it for advertising.

How long

Your data is never deleted automatically without the organizer deciding: after the event, the organizer is asked whether to keep or delete the guest list. You can ask for your own data to be deleted at any time (below).

Your rights

• See what is held about you: open the link in your confirmation email.
• Stop messages: reply STOP on WhatsApp, or use "Stop WhatsApp and SMS messages" on that page.
• Delete your registration and details: "Delete my details" on that page.
• Correct your details, or object to their use: ask the organizer, or write to us.
• Complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

Security

Data is encrypted in transit, access is limited by role, and passes carry no personal details. If a breach affects your data, we notify the organizer and the Commission as the law requires.

[Company name] Ltd, RC [number], [Registered address], Nigeria. Privacy questions and requests: privacy@[your-domain].