Privacy Policy

1. Our Commitment

Ekovibe is committed to protecting your "Digital Vibe." We take your privacy seriously and comply fully with the Nigeria Data Protection Act (NDPA) 2023, and where applicable, the General Data Protection Regulation (GDPR). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have over your information.

2. Data We Collect

We collect the following categories of personal data:

• —Identity Data: First name, last name, username, date of birth.
• —Contact Data: Email address, phone number, billing/delivery address.
• —Transaction Data: Details of purchases, payment references, and booking history.
• —Technical Data: IP address, browser type, device information, and cookies collected during your use of our platform.
• —Profile Data: Your preferences, saved events, tier status (Standard, Gold, Black), and communication preferences.
• —Location Data: City and state, used to surface relevant events and experiences near you.
• —Verification Data: For Ekovibe Gold and Black members, additional identity verification may be requested.

3. How We Use Your Data

Your data is used strictly for the following purposes:

• —To create and manage your Ekovibe account.
• —To process your ticket purchases, reservations, and concierge requests.
• —To verify your identity at partner venues (name and booking reference only).
• —To process payments via our secure third-party payment gateway (Paystack).
• —To send booking confirmations, QR tickets, and transactional communications.
• —To send curated 'Vibe' recommendations, upcoming events, and member-exclusive offers (only with your consent).
• —To detect and prevent fraud, unauthorised ticket transfers, and platform abuse.
• —To comply with legal obligations under Nigerian law.

4. Data Sharing

• —Venues & Partners: We share only your name and booking reference with the specific partner venue relevant to your reservation or event. We never share your full profile or financial information with venues.
• —Payment Processors: Transaction data is shared with Paystack for payment processing. Ekovibe does not store your card details.
• —Legal Authorities: We may disclose your data to Nigerian law enforcement or regulatory bodies if required by a valid legal order.
• —We never sell, rent, or exchange your personal data with third-party advertisers or data brokers.

5. Data Security

• —All data at rest is protected using AES-256 encryption.
• —All data in transit between your device and our servers is protected via TLS/SSL protocols.
• —Payment processing is handled by PCI-DSS compliant infrastructure via Paystack.
• —Access to personal data within Ekovibe is restricted to authorised personnel on a need-to-know basis.
• —We conduct periodic security audits and vulnerability assessments of our platform.

6. Cookies

Ekovibe uses cookies and similar tracking technologies to improve your experience on our platform. These include:

• —Strictly Necessary Cookies: Required for authentication, session management, and security. These cannot be disabled.
• —Preference Cookies: Remember your settings and preferences (e.g., currency, city).
• —Analytics Cookies: Help us understand how our platform is used so we can improve it. These are anonymised.
• —You can manage cookie preferences in your browser settings. Disabling non-essential cookies will not affect your core Ekovibe experience.

7. Data Retention

We retain your personal data for as long as your account is active or as required to provide services to you. Transaction records are retained for a minimum of 7 years to comply with Nigerian financial regulations. Upon account deletion, all personal profile data is removed within 30 days, except where retention is required by law.

8. Your Rights Under the NDPA 2023

As a data subject, you have the following rights:

• —Right of Access: Request a copy of all personal data Ekovibe holds about you.
• —Right to Rectification: Request correction of any inaccurate or outdated data.
• —Right to Erasure: Request permanent deletion of your account and associated personal data, subject to legal retention requirements.
• —Right to Portability: Request your data in a structured, machine-readable format.
• —Right to Object: Object to processing of your data for marketing purposes at any time.
• —Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• —To exercise any of these rights, contact us at the9ineagency@gmail.com.

9. Children's Privacy

Ekovibe is not intended for children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a minor has registered on our platform, contact us immediately at the9ineagency@gmail.com and we will delete the account promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material updates will be communicated via email or in-app notification. The date at the top of this page reflects when the policy was last revised.