Last updated: 28 October 2026
[placeholder] below needs a real value. Have a qualified lawyer confirm NDPR (Nigeria) and UK GDPR compliance before this governs real user data.
This Privacy Policy explains what personal data [Legal entity name, e.g. "BookAVendor Technologies Ltd"] ("BookAVendor", "we", "us") collects through the BookAVendor mobile app, website, and admin systems (together, the "Platform"), why we collect it, and the choices you have. It applies to Bookers and Vendors alike, with extra detail where the two differ.
Name, email address, phone number, password (stored hashed, never in plain text), country, state/location, date of birth where collected, bio, and profile photo.
If you grant permission, we collect your location (or a location you type in) to show nearby Vendors and to power address autocomplete for bookings.
To accept payment and withdraw funds, Vendors must complete identity verification through our verification partner, Sumsub. This involves submitting a government-issued ID and a live selfie directly to Sumsub. We receive and store the outcome of that check (approved/rejected, and Sumsub's applicant reference); the underlying documents and biometric data are held by Sumsub under its own privacy policy, not by us, except where an admin needs to review a specific document for a verification decision.
Wallet balances and transaction history within the Platform; for Vendors, payout destination details (bank account number, bank name, and account name for Nigerian payouts via Paystack, or a connected account reference for Stripe payouts). We do not collect or store your full card number — card payments are entered directly into Paystack's or Stripe's own secure payment forms.
Details of booking requests, quotes, invoices, in-app chat messages between a Booker and Vendor, and reviews/ratings you submit or receive.
Device push-notification token (to deliver notifications), app version, and basic usage/log data (e.g. sign-in times, error logs) used to keep the Platform working and secure.
Because you can be signed in on several devices at once, we also keep a record of each device signed in to your account: an identifier generated by the app, the device name your phone reports (for example "Damilola's iPhone"), the IP address used at sign-in, an approximate location derived from that IP address (city and country level — not precise location), and when that device was last active.
We use this to show you where your account is signed in, so you can recognise and remotely sign out a device you do not recognise, and to detect unauthorised access. Signing a device out deletes its record. We also email you when a new device signs in.
When a Booker opens a Vendor's profile, we record that a view took place — counted once per Booker per day, not once per tap.
Vendors are shown how many people viewed their profile and over what period. Vendors are never told who viewed their profile. We do not disclose Booker identities in these statistics, and a Vendor cannot use them to identify an individual.
If you use the support chat on our website without an account, we record the messages you send, your IP address, and — only if you choose to give them — your name and email address so that we can reply. Providing contact details is optional; without them we can only reply for as long as your browser session lasts. See Section 3 for how these messages are processed.
We do not sell your personal data. We share it only where necessary to run the Platform:
Because the Platform serves users in both Nigeria and the United Kingdom, and uses processors based outside your own country, your data may be transferred to and processed in other countries, including outside the Nigerian Data Protection Act's or UK GDPR's home jurisdiction. [Placeholder — confirm with legal counsel:] where that happens, we rely on appropriate safeguards (such as standard contractual clauses, or an adequacy finding) — the specific safeguard used depends on the receiving country and needs to be confirmed and listed here.
We keep account and transaction data for as long as your account is active, and for a period afterward as needed to meet our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. [Placeholder — confirm exact retention periods with legal/finance counsel, e.g. financial records for [X] years after account closure.]
Subject to applicable law — the Nigeria Data Protection Act 2023 if you are in Nigeria, and UK GDPR/the Data Protection Act 2018 if you are in the UK — you have the right to:
To exercise any of these rights, contact us at hello@bookavendor.com. We may need to verify your identity before actioning a request.
The Platform is not intended for anyone under 18, and we do not knowingly collect data from children. If we learn that we have collected data from someone under 18, we will delete it.
We use technical and organizational measures — including encrypted connections, hashed passwords, and access controls on our admin systems — to protect your data.
Our website uses cookies and similar technologies necessary for the site to function, and, where you consent, for basic analytics. [Placeholder — add a cookie table/consent banner here if analytics or advertising cookies are actually in use.]
We may update this Privacy Policy from time to time. Where a change is material, we will make reasonable efforts to notify you in the app before it takes effect.
For any privacy question or to exercise your rights, contact us at hello@bookavendor.com, or by post at [registered business address].