Privacy Policy | EventRun

1. Who We Are

EventRun ("we", "us", or "our") is a business management platform being built for Nigerian event vendors. We operate this waitlist website at eventrun.ng.

We are the Data Controller of your personal information under this policy, meaning we determine the purposes and means by which your personal data is processed.

2. The Legal Framework That Governs This Policy

This policy is written in compliance with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Commission's General Application and Implementation Directive 2025 (GAID), which together form Nigeria's current data protection framework.

The Nigeria Data Protection Commission (NDPC) is the regulatory authority that oversees compliance with these laws.

3. What Personal Data We Collect

From all waitlist registrants:

Business name
Email address
Vendor type (e.g. decorator, caterer, MC/DJ)
How you heard about us (referral source)

Additionally, from beta applicants only:

WhatsApp phone number

We do not collect payment information, national identification numbers, passwords, location data, or any sensitive personal data at this stage.

4. Why We Collect Your Data and Our Lawful Basis

Under the NDPA 2023, we are required to identify a lawful basis for each use of your personal data.

Purpose	Data used	Lawful basis
Confirming your place on the waitlist	Email, business name	Consent — you submitted the form voluntarily
Notifying you when EventRun launches (June 2026)	Email	Consent — you agreed to hear from us at sign-up
Reviewing your beta application	All form data including WhatsApp	Consent — you ticked the beta opt-in
Contacting selected beta testers	Email, WhatsApp	Consent — given at sign-up
Understanding vendor mix for product decisions	Vendor type, referral source (aggregated)	Legitimate interest — understanding our market

We will never use your personal data for a purpose that is incompatible with the purpose for which it was collected without first seeking your consent.

5. How Long We Keep Your Data

Under the NDPA/GAID storage limitation rules, personal data must be deleted within six months of the purpose for which it was collected being fulfilled.

If EventRun launches in June 2026: We will notify you, and your waitlist data will be deleted no later than six months after your notification (i.e. by December 2026), unless you sign up to the platform.
If you unsubscribe at any time: We will delete your data within 30 days of your request.
Beta participants: We will retain your data for the duration of the programme and for up to six months after the beta ends to allow us to process feedback.

You have the right to request deletion of your data at any time (see Section 8 below).

6. Who Processes Your Data — Third-Party Processors

We use trusted third-party services to store and process your data. Under the NDPA 2023, these companies are Data Processors acting on our instructions.

Infrastructure / Data storage:

Supabase Inc. — We use Supabase to securely store waitlist form submissions. Supabase is based in the United States.

Cross-border transfer notice: The United States has not been designated as an adequate jurisdiction under the NDPA 2023. To lawfully transfer your data to these processors, we rely on Standard Contractual Clauses (SCCs) or equivalent contractual safeguards.

We do not sell your personal data to any third party. We will only disclose your personal data to a law enforcement authority or regulator if required to do so by applicable Nigerian law.

7. Communications From Us

By joining the waitlist, you agree to receive:

A confirmation of your waitlist registration.
An email when EventRun officially launches in June 2026.
If you applied for beta: WhatsApp and/or email communications regarding your application and, if selected, your beta access and onboarding.

We will not send you promotional or marketing emails outside of the above without seeking your separate consent. You can withdraw your consent and unsubscribe at any time.

8. Your Rights Under the NDPA 2023

The Nigeria Data Protection Act 2023 gives you the following rights over your personal data. We will respond within 30 days.

Right	What it means
Right of access	Request a copy of the personal data we hold about you
Right to rectification	Ask us to correct inaccurate or incomplete information
Right to erasure	Ask us to delete your personal data (“right to be forgotten”)
Right to restrict processing	Ask us to pause processing while a dispute is resolved
Right to data portability	Receive your data in a structured, machine-readable format
Right to object	Object to processing based on legitimate interest
Right to withdraw consent	Withdraw your consent to processing at any time

Right to complain: If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

9. How We Protect Your Data

We implement reasonable technical and organisational measures to protect your personal data, including:

Storing data on infrastructure with access controls and encryption at rest
Limiting access to waitlist data to only those team members who require it
Using service providers that maintain SOC 2 or equivalent security certifications

No system is entirely secure. If we become aware of a data breach that is likely to result in risk to you, we will notify you and the NDPC without undue delay.

10. Cookies

The EventRun waitlist website uses only essential cookies required for the site to function. We do not currently use advertising, analytics, or tracking cookies that require your consent.

11. Children

EventRun is intended for business owners and operators aged 18 and over. We do not knowingly collect personal data from anyone under 18.

12. Changes to This Policy

We may update this policy to reflect operational or regulatory changes. If we make material changes, we will notify waitlist members by email before the change takes effect. This policy is scoped to the waitlist and beta phase only; a full Privacy Policy will be published at app launch.

13. Contact

Data Controller: EventRun
Email: hello@eventrun.ng

Last updated: March 2026