Privacy Policy

Last updated: 15 May 2026

This policy explains how Epulse Events collects, uses, and protects personal data, in line with the Nigeria Data Protection Act 2023 (NDPA). It applies to organisers, attendees, and guest buyers.

1. Data we collect

• Account data: name, email, phone number, password (hashed), role.
• Guest checkout data: name, email and phone supplied to receive tickets.
• Transaction data: orders, tickets, refunds, payout and wallet records.
• Event data: details organisers publish, attendee check-in records.
• Technical data: IP address, browser type, and cookies used to keep you signed in.

We do not store card or bank-card details — payments are handled by Flutterwave.

2. How we use it

• To create and deliver tickets, send confirmations, reminders and receipts by email.
• To process payments, refunds and organiser payouts.
• To give organisers attendance and sales data for their own events.
• To detect fraud, secure accounts, and meet legal obligations.

3. Legal basis

We process data to perform our contract with you (delivering tickets and events), to comply with the law, and for legitimate interests such as fraud prevention. Marketing emails, where sent, are based on consent you can withdraw at any time.

4. Sharing

We share data only as needed: with the organiser of an event you attend (your name, email and ticket type, so they can run the event), with Flutterwave to process payments, and with infrastructure providers that host the platform. We do not sell personal data.

5. Cookies

We use a session cookie to keep you signed in and a guest cookie so guest buyers can see their tickets without an account. These are essential to the service.

6. Retention

We keep transaction and event records for as long as needed for accounting, tax and dispute-resolution purposes. You may request deletion of your account; we will remove or anonymise data we are not legally required to keep.

7. Your rights

Under the NDPA you may request access to, correction of, or deletion of your personal data, and may object to certain processing. To exercise these rights, contact our Data Protection Officer at support@epulse.ng. You may also lodge a complaint with the Nigeria Data Protection Commission.

8. Security

Passwords are hashed, transport is encrypted over HTTPS, and access to personal data is restricted. If a breach affecting your data occurs, we will notify you and the Commission as required by law.

9. Contact

Data Protection Officer — support@epulse.ng. See also our Terms of Service.