Who this policy covers
This Policy explains how Afrisplug processes personal information when you browse events, order tickets, operate an organizer account, contact support or use event admission tools. The legal identity and contact details of the operating entity should be confirmed and published before launch. Event organizers may independently determine how they use attendee data for event operations and should provide their own notices where required.
Information we collect
Depending on your interaction, we may collect names, email addresses, phone numbers, account details, event preferences, ticket tiers, order references, payment status and transaction identifiers, support correspondence, organizer business and payout details, device and browser information, security logs, and gate check-in records. We do not need full payment card numbers to provide ordinary ticket records; payment providers handle sensitive card information according to their arrangements.
Where information comes from
Information may come directly from forms you complete, organizers managing attendee lists, payment-provider confirmations, support conversations, and automatic security or operational logs. If another person buys a ticket for you, they may provide your contact information. We ask purchasers to share only information they are entitled to provide.
Purposes and lawful bases
We use data to provide requested ticketing and organizer services, authenticate users, confirm payment, deliver tickets and event notices, support admission, prevent fraud, answer requests, maintain records and comply with applicable obligations. Depending on the processing activity, lawful bases under the Nigeria Data Protection Act 2023 may include contractual necessity, legal obligation, legitimate interests or consent. Consent is sought where required, including for optional marketing or nonessential tracking.
Organizers and service providers
Relevant attendee information may be shared with the organizer of the event purchased so the organizer can manage admission and attendee support. We may use contracted payment processors, hosting services, email delivery providers and technical support providers. Access should be limited to what each recipient needs, subject to appropriate agreements and security measures. We do not sell personal information.
Analytics, pixels and cookies
Essential session and security technologies support sign-in and checkout. Optional analytics or advertising tools, including Google Analytics or Meta Pixel when enabled, may collect device or usage information. These tools should run only in accordance with the consent choices and legal requirements applicable to the visitor. See the Cookie Policy for categories and controls.
Notifications and Web Push
Ticket receipts, security messages and essential service notices may be delivered by email or in-app notification. Browser push requires an explicit permission action and a browser subscription; you can disable it in your device or notification settings. Push endpoints and cryptographic subscription keys are used to route notifications, not as a reason to send unrelated marketing without a suitable legal basis.
Security and access
We use access controls and other technical and organizational measures intended to protect information. No online system is completely secure, and we do not guarantee that every transmission or device is immune from attack. Report suspected unauthorized access promptly. Authorized organizer and gate staff should access only records necessary for their events and responsibilities.
Retention and deletion
We retain information for as long as reasonably necessary for tickets, event support, financial reconciliation, fraud prevention, legal obligations and legitimate disputes. Different categories may have different retention periods. We should document and publish specific schedules once verified against operational and statutory requirements. Data may be deleted or anonymized when no longer needed, subject to lawful exceptions.
International processing
Some technology providers may process data outside Nigeria. Where cross-border processing occurs, we should assess the destination and implement safeguards required by applicable Nigerian data protection law. We should not claim that all data remains in Nigeria unless verified.
Your rights
Subject to the Nigeria Data Protection Act 2023 and applicable exceptions, you may request access, correction, erasure, restriction or objection, withdraw consent where processing relies on consent, and raise concerns with the Nigeria Data Protection Commission. We may need to verify identity before fulfilling a request and may retain records required by law.
Children and updates
The platform is not intended to solicit unnecessary personal information from children. Event age restrictions remain the organizer’s responsibility. We may update this Policy as services and laws change; the published version should show the effective date. Privacy questions may be sent through the official Contact page.
Need help? Visit the Afrisplug contact page for support and current platform information.
Questions about this document
Contact support@afrisplug.com for privacy and legal enquiries.
