Privacy Policy
Effective date: [Insert Effective Date]
This Privacy Policy explains how Bizabeza Company Limited (RC 9588954), trading as Bizabeza, collects, uses, shares, and protects your personal data when you use the Services. We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA). By using the Services you acknowledge this Policy.
1. Data we collect
We collect the following categories of personal data:
- Account data — your name, email address, phone number, and authentication identifiers (including where you sign in with Apple).
- Booking data — the stays, transport, and experiences you book, dates, party size, and any notes you provide.
- Payment data — processed by Paystack. We receive and store transaction references and status, not your full card number.
- Communications — messages you send us and records of support interactions.
- Device and usage data — app version, device identifiers, and product-analytics events (via PostHog).
- Location data — only when you grant permission, to show nearby listings and directions.
2. How and why we use your data (lawful basis)
We use your data to:
- Provide the Services and process your bookings and payments (performance of a contract).
- Send transactional messages — confirmations, reschedules, cancellations, and reminders (performance of a contract; SMS via Termii, email via Resend).
- Prevent, detect, and investigate fraud and abuse, and keep the Services secure (legitimate interest and legal obligation).
- Improve the Services through analytics (legitimate interest; you can object).
- Comply with our legal and regulatory obligations (legal obligation).
3. Sharing your data
We share personal data with: Partners, only as needed to fulfil your booking (e.g. your name and contact for a confirmed reservation); service providers who process data on our behalf under contract (Supabase for hosting and database, Paystack for payments, Termii for SMS, Resend for email, PostHog for analytics); and authorities where required by law. We do not sell your personal data.
4. International transfers
Some of our service providers store or process data outside Nigeria. Where they do, we take steps required by the NDPA to ensure your data receives an adequate level of protection.
5. Retention
We keep personal data only as long as necessary for the purposes described above or as required by law (for example, transaction records for tax and fraud-prevention purposes). When it is no longer needed, we delete or anonymise it.
6. Your rights under the NDPA
You have the right to access, correct, delete, and port your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise these rights, contact bizabeza.ng@gmail.com or use the in-app account deletion option. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
7. Security
We use technical and organisational measures — including encryption in transit, access controls, and row-level security on our database — to protect your data. No system is perfectly secure, but we work to protect your information and will notify you and the NDPC of a breach where the law requires.
8. Children
The Services are not directed at children under 18, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
Contact us
If you have questions or complaints about this document, or wish to exercise your rights, contact Bizabeza at bizabeza.ng@gmail.com or by post at [Insert Registered Business Address], Ilorin, Kwara State, Nigeria. We aim to respond within 7 business days.