EventRun Privacy Policy

Introduction

EventRun ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our business management platform at eventrun.ng (the "Service").

This policy complies with the Nigeria Data Protection Regulation (NDPR) 2019 and other applicable Nigerian laws.

By using EventRun, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account or use EventRun, we collect:

• Account Information: Name, email address, phone number, business name, business type
• Business Data: Event details, client information, team member details, inventory lists, invoice data
• Payment Information: We do NOT store credit/debit card details. Payment processing is handled by third-party providers (Paystack/Flutterwave) who maintain their own security standards
• Communications: Messages you send to our support team, feedback, or survey responses

1.2 Information Collected Automatically

When you access the Service, we automatically collect:

• Usage Data: Pages visited, features used, time spent on platform, click patterns
• Device Information: IP address, browser type, device type, operating system
• Cookies and Tracking: We use cookies and similar technologies (see Section 8)

1.3 Information from Third Parties

We may receive information from payment processors (transaction status) and analytics providers.

2. How We Use Your Information

We use collected information for the following purposes:

• To Provide the Service: Create/manage accounts, enable event management/invoicing, process payments, provide support.
• To Improve Our Service: Analyze usage patterns, develop new features, conduct research.
• To Communicate with You: Send notifications/updates, respond to inquiries, send marketing communications (opt-out available).
• To Ensure Security: Detect/prevent fraud, monitor threats, enforce Terms of Service.
• Legal Compliance: Comply with Nigerian laws, respond to legal requests.

3. Legal Basis for Processing (NDPR Compliance)

Under the Nigeria Data Protection Regulation, we process your personal data based on:

1. Consent: You have given clear consent for specific purposes.
2. Contract: Processing is necessary to fulfill our service agreement.
3. Legal Obligation: Processing is required to comply with Nigerian law.
4. Legitimate Interest: Processing is necessary for our legitimate business interests (security, improvement).

4. How We Share Your Information

We do NOT sell your personal information. We may share your information with:

4.1 Service Providers

We share data with third parties who help us operate (Paystack/Flutterwave for payments, Supabase for hosting, Google Analytics). They are contractually obligated to protect your data.

4.2 Business Transfers

If EventRun is acquired or merged, your information may be transferred. You will be notified.

4.3 Legal Requirements

We may disclose information if required by law, court order, or to protect our rights and safety.

4.4 With Your Consent

We may share information with third parties when you explicitly consent.

5. Data Retention

We retain your information while your account is active, to provide services, and to comply with legal obligations (e.g., tax records for 6 years).

Account Deletion: Upon deletion, we delete or anonymize personal data within 30 days, except where retention is legally required.

Business Records: Invoice data may be retained for up to 7 years for tax compliance.

6. Your Data Protection Rights (NDPR Rights)

You have the right to:

• Access: Request a copy of your data.
• Rectification: Correct inaccurate information.
• Erasure: Request deletion of your data (Right to be Forgotten).
• Data Portability: Export your data in CSV/PDF format.
• Object: Object to marketing processing.
• Withdraw Consent: Withdraw consent at any time.
• Lodge a Complaint: File a complaint with the NDPC.

To exercise these rights, contact us at: [email protected]

7. Data Security

We implement reasonable, industry-standard technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

8. Cookies and Tracking Technologies

We use essential cookies (login), analytics cookies, and preference cookies. You can control cookies via browser settings.

9. Third-Party Links

Our Service may contain links to third-party sites. We are not responsible for their privacy practices.

10. Children's Privacy

EventRun is for business use by individuals 18+. We do not knowingly collect data from children under 18.

11. International Data Transfers

Data is primarily stored in Nigeria or Africa. If transferred internationally, we ensure safeguards required by NDPR.

12. Marketing Communications

We may send promotional emails. You can opt-out via "Unsubscribe" links or settings. Transactional emails cannot be opted out of.

13. Changes to This Policy

We may update this policy. Significant changes will be notified via email or platform notice. Continued use constitutes acceptance.

14. Data Protection Officer

Email: [email protected]

15. Contact Us

EventRun Privacy Team
Email: [email protected]
Support: [email protected]
Website: https://eventrun.ng

16. Complaints and Regulatory Authority

Nigeria Data Protection Commission (NDPC)
Website: https://ndpc.gov.ng
Email: [email protected]