Privacy Policy

Effective Date: March 2026

Cliqmit is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, store, and share personal data when you use the Cliqmit platform (the "Platform"), in compliance with the Nigeria Data Protection Act 2023 (NDPA) and its implementing regulations.

By using the Platform, you consent to the practices described in this Privacy Policy.

1. Definitions

  • Personal Data: Any information relating to an identified or identifiable natural person.
  • Processing: Any operation performed on personal data, including collection, storage, use, or disclosure.
  • Data Controller: Cliqmit, which determines the purposes and means of processing your personal data.
  • Data Subject: You, the individual whose personal data is being processed.
  • Third Party: Any entity other than you and Cliqmit involved in data processing.

2. Data We Collect

2.1 Information You Provide

  • Account registration details: full name, email address, phone number, and date of birth.
  • Creator information: business name, bank account details, BVN verification data (where required).
  • Event data: event title, description, images, ticket types, pricing, and venue information.
  • Payment information: Billing details processed and stored by our payment processor. Cliqmit does not store full card details.
  • Communications: messages, support requests, and feedback you send us.

2.2 Information Collected Automatically

  • Device information: device type, operating system, and unique device identifiers.
  • Usage data: pages viewed, features used, interactions, and session duration.
  • Location data: approximate geolocation derived from IP address, and precise location if you grant permission.
  • Log data: IP address, browser type, referring URL, and access times.
  • Cookies and similar tracking technologies (see Section 8).

2.3 Information from Third Parties

  • Payment processors: transaction status, fraud signals, and payment confirmation.
  • Social login providers: where you choose to sign in via a third-party service.
  • Analytics providers: aggregated behaviour and performance data.

3. Legal Basis for Processing

Under the NDPA 2023, Cliqmit processes your personal data on the following lawful bases:

  • Contractual necessity: to provide you with the Platform's services, including processing ticket purchases and payouts.
  • Legitimate interest: to operate, improve, and secure the Platform; to prevent fraud; and to personalize your experience.
  • Legal obligation: to comply with applicable Nigerian laws, including tax and anti-money laundering obligations.
  • Consent: for marketing communications and non-essential cookies, where required.

4. How We Use Your Data

We use personal data to:

  • Create and manage your account.
  • Process ticket purchases, refunds, and Creator payouts.
  • Enable ticket scanning and validation at events.
  • Deliver event recaps and platform content.
  • Send transactional notifications such as booking confirmations, refund updates, and event changes.
  • Send marketing communications, where you have opted in.
  • Detect, prevent, and investigate fraud or abuse.
  • Comply with legal obligations.
  • Improve and develop Platform features through analytics.
  • Respond to customer support queries.

5. Data Sharing

We do not sell your personal data. We may share your data with:

5.1 Service Providers

Third-party vendors who assist us in operating the Platform, including payment processors, cloud hosting providers, analytics tools, and customer support software. These providers are contractually bound to process your data only as instructed by Cliqmit and in compliance with the NDPA.

5.2 Event Creators

When you purchase a ticket, your name, email, and ticket details are shared with the relevant Creator to fulfil the event contract and manage attendee lists.

5.3 Legal and Regulatory Authorities

We may disclose personal data to law enforcement or regulatory bodies where required by Nigerian law or a valid court order.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by law. Specifically:

  • Account data: retained for the duration of your account and up to 5 years after closure for legal and audit purposes.
  • Transaction records: retained for a minimum of 7 years in compliance with Nigerian financial regulations.
  • Marketing data: retained until you withdraw consent or unsubscribe.
  • Support communications: retained for up to 2 years.

7. Your Data Rights

As a data subject under the NDPA 2023, you have the following rights:

  • Right of Access: to obtain a copy of the personal data we hold about you.
  • Right to Rectification: to correct inaccurate or incomplete personal data.
  • Right to Erasure: to request deletion of your personal data, subject to legal retention obligations.
  • Right to Object: to object to processing based on legitimate interests or for direct marketing.
  • Right to Restriction: to request that we limit the processing of your data in certain circumstances.
  • Right to Data Portability: to receive your personal data in a structured, machine-readable format.
  • Right to Withdraw Consent: where processing is based on consent, to withdraw it at any time.

To exercise any of these rights, contact us at privacy@cliqmit.com. We will respond within 30 days as required under the NDPA. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

8. Cookies and Tracking Technologies

Cliqmit uses cookies and similar technologies to:

  • Maintain your session and remember your preferences.
  • Analyze Platform traffic and usage patterns.
  • Deliver relevant content and advertising where applicable.

You may control cookie settings through your device browser or the in-app cookie preferences. Disabling certain cookies may affect Platform functionality.

9. Data Security

We implement industry-standard technical and organizational security measures to protect your personal data, including:

  • Encryption of data in transit and at rest.
  • Access controls limit data access to authorized personnel only.
  • Regular security audits and vulnerability assessments.
  • Incident response procedures in compliance with NDPA notification requirements.

In the event of a data breach likely to cause harm to your rights or freedoms, we will notify the NDPC and affected data subjects within 72 hours of becoming aware, as required by the NDPA 2023.

10. Cross-Border Data Transfers

Where personal data is transferred outside Nigeria (for example, to cloud infrastructure providers), Cliqmit ensures that adequate safeguards are in place in accordance with Part V of the NDPA 2023, including contractual clauses approved by the NDPC or transfer to countries with an adequate level of data protection.

11. Children's Privacy

The Platform is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data without parental consent, we will promptly delete such data. If you believe a minor has registered on the Platform, please contact us at privacy@cliqmit.com.

12. Third-Party Links

The Platform may contain links to third-party websites or services. Cliqmit is not responsible for the privacy practices of such third parties. We encourage you to review the privacy policies of any third-party service you access.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or Platform features. Material changes will be communicated to you via email or in-app notification. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the changes.

14. Contact and Data Protection Officer

For privacy-related queries, complaints, or to exercise your data rights, please contact:

Data Protection Officer - Cliqmit
Email: privacy@cliqmit.com
Website: www.cliqmit.com

You may also contact the Nigeria Data Protection Commission (NDPC) if you believe your data rights have been violated: www.ndpc.gov.ng

Illustration of a person working on a laptop