Privacy Policy
Last updated: December 20, 2024
Introduction
At eventtally ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
Information We Collect
Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Sign up for our waitlist or newsletter
- Submit an inquiry about a venue
- Register as a venue owner or vendor
- Contact us through our contact form
- Communicate with us via email or other channels
This information may include: name, email address, phone number, company name, event details, and any other information you choose to provide.
Automatically Collected Information
When you access our website, we may automatically collect certain information, including:
- IP address and browser type
- Device information and operating system
- Pages visited and time spent on our site
- Referring website and search terms
How We Use Your Information
We use the information we collect to:
- Provide and maintain our services
- Process and respond to your inquiries
- Send you updates, marketing communications, and promotional materials
- Improve and personalize your experience on our platform
- Analyze usage patterns and trends to enhance our services
- Detect, prevent, and address technical issues or fraudulent activity
- Comply with legal obligations
Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following situations:
- With EventCenter Partners: When you inquire about a venue, we share necessary information with that venue to facilitate your request
- Service Providers: We may share information with third-party service providers who assist us in operating our platform
- Legal Requirements: We may disclose information if required by law or in response to valid legal requests
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred
Pending legal review
Payments data and sub-processors
When you make or receive a payment through eventtally, we and our sub-processors handle additional categories of personal and financial data. This section is required for our compliance with the Nigeria Data Protection Act 2023 (NDPA).
- Payment data we hold: order amounts, currency, status, timestamps, refund history, and the buyer/vendor identifiers tied to each order. We do not store raw card numbers, CVVs, or full bank credentials — those flow directly to our payment processor.
- Vendor KYC data: business name, contact name, settlement bank code, masked bank account reference, and the verification status reported by our payment processor. Where additional documents are uploaded for higher-tier verification, those documents are retained for audit purposes.
- Sub-processors: Paystack (payment processing, card data, settlement), AWS in the eu-central-1 region (hosting and storage — note this is a cross-border transfer outside Nigeria), and our transactional email provider. We rely on these providers' own GDPR/NDPA compliance posture and update this list when material changes occur.
- Retention: order and webhook records are retained for a minimum of 5 years to meet AML and tax record-keeping obligations under Nigerian law. KYC supporting documents are retained for the duration of the vendor relationship plus 5 years. Aggregated, non-identifiable analytics may be retained longer.
- Your rights under NDPA: you have the right to access, rectify, erase, and port your personal data, subject to lawful exceptions (e.g., AML record-keeping). To exercise these rights or submit a complaint, contact our Data Protection Officer at the address in the Contact Us section below.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.
Your Rights
Depending on your location, you may have certain rights regarding your personal information, including:
- Access to your personal information
- Correction of inaccurate data
- Deletion of your personal information
- Objection to or restriction of processing
- Data portability
- Withdrawal of consent
To exercise these rights, please contact us at privacy@notifications.eventtally.com.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our website and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have questions or concerns about this Privacy Policy, please contact us:
- Email: privacy@notifications.eventtally.com
- Website: eventtally.com/contact