Privacy

How we handle your information.

This policy describes what Venuralink collects, why, how long we keep it, and the rights you have under Nigerian data-protection law. Written to be read, not skimmed — but skimmable if you need to.

Last updated · 2 September 2026

01 Who we are

Venuralink is a venue-sourcing and event-vendor discovery marketplace operating in Nigeria. This policy applies to www.venuralink.com and any related services we run.

For the purposes of the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act 2023, Venuralink is the data controller of the personal information described below. Our contact details are in section 12.

02 What we collect

We collect the minimum information needed to run the marketplace. The categories are:

CategoryExamplesSource
Enquiry contact Name, email, phone / WhatsApp number, event brief you submit through a venue's enquiry form You (organiser)
Host account Business name, email, phone, WhatsApp business line, listing details, uploaded photos You (host / vendor)
Organiser account (optional) Name, email, phone, shortlists, past enquiries. Only if you choose to create an account. You (organiser)
Verification evidence Utility bill scan, site-visit photos, generator invoice — from hosts during listing verification You (host)
Response-time signals Timestamp when an enquiry was sent, opened, and first replied to. Used to compute the "median response time" shown on your listing. Our platform (measured)
Technical data IP address, browser type, pages visited, referring URL — standard web-server logs Automatic (your browser)

03 Why we collect it

  • Route enquiries: to deliver your enquiry to the host, and their reply back to you.
  • Publish listings: to display verified venues and vendors, with contact details, so organisers can reach hosts directly.
  • Verify listings: to confirm addresses, contact channels, backup power, security and portfolio authenticity before publishing.
  • Measure response time: to compute and display the median-response indicator on each listing — this is a measured signal, not a claim.
  • Improve the platform: to understand which listings, cities and event types are in demand, and to fix bugs.
  • Comply with the law: to respond to lawful requests and preserve records where required.

04 Legal basis

Under NDPR we process personal data on the following lawful bases:

  • Consent — when you submit an enquiry form or create an account, you consent to us processing that information for the purpose described.
  • Contract — where processing is necessary to provide a service you've asked for (e.g. delivering an enquiry to a host you contacted).
  • Legitimate interest — running and improving the platform, preventing fraud, and moderating misleading listings.
  • Legal obligation — responding to lawful requests from Nigerian authorities.

05 Who we share with

We never sell your data. We share it only in the following circumstances:

  • Hosts you enquire with receive your name, contact details and event brief. This is the whole point of the enquiry — if you don't want the host to have your details, don't submit the enquiry.
  • Service providers we use to run the platform: our email deliverability provider (Postmark), our database host (Neon/Supabase), our image CDN (Cloudflare), and our error-reporting tool (Sentry). Each of these processes data only on our instructions.
  • Nigerian authorities where we're legally required to disclose information (e.g. under a court order).

Some of our providers may store data outside Nigeria. We only use providers with adequate technical and organisational measures, and only where NDPR permits cross-border transfers.

06 How long we keep it

  • Enquiries — retained for 24 months, then deleted from the active database. Anonymised aggregates (e.g. "42 enquiries in Lagos in Sept 2026") are kept indefinitely.
  • Host accounts & listings — retained for the life of the account plus 24 months after closure, for audit and dispute resolution.
  • Verification evidence — retained for the duration of the listing's verified status, plus 12 months.
  • Server logs — retained for 90 days.

07 Your rights

Under Nigerian data-protection law, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your data (subject to our retention obligations above).
  • Object to processing that relies on our legitimate interest.
  • Withdraw consent at any time, without affecting the lawfulness of processing that took place before.
  • Data portability — receive your data in a structured, machine-readable format.
  • Complain to the Nigeria Data Protection Commission (NDPC). Details on ndpc.gov.ng.

To exercise any of these, email privacy@venuralink.com. We respond within 30 days.

08 Cookies

We use cookies and similar technologies for a small set of purposes. When you visit the site for the first time you'll see a consent notice; you can accept, decline, or change your mind later from any page's footer.

  • Strictly necessary — keep you signed in, remember your consent choice, prevent CSRF attacks. These cannot be turned off.
  • Analytics — anonymised page-view and referral data. Helps us understand which listings are most useful.
  • Preferences — remember your city filter, shortlisted venues (if not signed in), and dashboard layout choices.

We do not use advertising or retargeting cookies.

09 Security

We use industry-standard technical and organisational measures — HTTPS throughout, at-rest encryption, principle-of-least-privilege access for staff, logging of admin actions, and regular backups. No system is impregnable; if we become aware of a breach that affects your data, we'll notify the NDPC and affected individuals in line with our legal obligations.

10 Children

Venuralink is not directed at children under 18 and we do not knowingly collect data from them. If you believe a child has provided us with personal data, please contact us and we'll delete it.

11 Changes to this policy

We may update this policy from time to time. Substantive changes will be highlighted at the top of the page and, where you have an account, notified by email at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.

12 Contact us

Questions, requests, or complaints about privacy? Reach us any of these ways:

If you're not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).