How we handle your information.

01 Who we are

Venuralink is a venue-sourcing and event-vendor discovery marketplace operating in Nigeria. This policy applies to www.venuralink.com and any related services we run. The platform is owned and operated by Venuralink Limited, a private company limited by shares, incorporated in Nigeria under CAMA 2020 (RC 9588411).

For the purposes of the Nigeria Data Protection Act 2023 (NDPA), Venuralink Limited is the data controller of the personal information described below. Our full legal entity details and contact are in section 12.

02 What we collect

We collect the minimum information needed to run the marketplace. The categories are:

03 Why we collect it

• Handle enquiries and booking requests: our team reviews each request, then passes your details to the host or vendor you chose.
• Publish listings: to show approved venues and vendors. Public pages only show listing details — a host's email and phone are never shown, and a venue's full address only if the host chooses.
• Review listings and IDs: our team checks each listing's details, photos and contact information by hand before it goes live, and reviews ID documents.
• Improve the platform: to understand which listings, cities and event types are in demand, and to fix bugs.
• Comply with the law: to respond to lawful requests and preserve records where required.

04 Legal basis

Under the NDPA we process personal data on the following lawful bases:

• Consent — when you submit an enquiry form or create an account, you consent to us processing that information for the purpose described.
• Contract — where processing is necessary to provide a service you've asked for (e.g. passing your booking request to the host or vendor you chose).
• Legitimate interest — running and improving the platform, preventing fraud, and moderating misleading listings.
• Legal obligation — responding to lawful requests from Nigerian authorities.

05 Who we share with

We never sell your data. We share it only in the following circumstances:

• The host or vendor you send a booking request to — after our team reviews it, they receive your first name and your event details (date, event type, guest numbers, location, budget and any notes you add). We do not give them your email address or phone number. Our team handles all contact between you and the host. Please don't include contact details in your notes.
• Our team — only Venuralink admins and reviewers can see private details such as contact details and ID documents. Reviewers can view them; only admins can delete them.
• Google — authentication provider for “Sign in with Google”. When you use this option, Google shares your name and email with us so we can create or match your account; Google's own Privacy Policy and Terms of Service apply to the sign-in transaction. Google Sign-In is optional — you can always use an email and password instead.
• Service providers we use to run the platform: Supabase (database and file storage), Vercel (website hosting), Resend (sends our emails, from hello@venuralink.com), Plausible (privacy-friendly visitor counts, no cookies) and Google (web fonts). Each of these processes data only to provide its service to us.
• Nigerian authorities where we're legally required to disclose information (e.g. under a court order).

Some of our providers may store data outside Nigeria. We only use providers with adequate technical and organisational measures, and only where the NDPA permits cross-border transfers.

06 How long we keep it

• Rejected applications — deleted automatically 30 days after rejection.
• Booking requests — declined, closed or expired requests are deleted automatically 30 days after their last update. For confirmed bookings, your name, email, phone and notes are removed 30 days after the event date.
• Contact-form enquiries and waitlist — kept until you ask us to remove you. We review and clear old entries at least once a year.
• Accounts & listings — kept while your account is open. When you ask us to close it, we delete your account and listings by hand within 30 days of your request.
• ID documents — kept until you ask us to delete them or your account closes. We delete them by hand.
• Technical logs — kept for a short time by our hosting providers (not more than 90 days).

07 Your rights

08 Cookies

We keep this small. Here is everything we store in your browser or measure:

• Strictly necessary — keeping you signed in, and remembering your cookie-banner choice.
• Visitor counts — we use Plausible, which doesn't use cookies or identify you, so it runs for all visitors. Helps us understand which pages are most useful.
• Your browser — the “recently viewed” list of listings is kept only on your device.

We do not use advertising or retargeting cookies.

09 Security

We use industry-standard technical and organisational measures — HTTPS throughout, encryption at rest by our database provider, access limited to our admin and reviewer team, a log of every deletion, and backups provided by our database host. No system is impregnable; if we become aware of a breach that affects your data, we'll notify the NDPC and affected individuals in line with our legal obligations.

10 Children

Venuralink is not directed at children under 18 and we do not knowingly collect data from them. If you believe a child has provided us with personal data, please contact us and we'll delete it.

11 Changes to this policy

We may update this policy from time to time. We'll tell you by email or on the site before important changes take effect. The "Last updated" date at the top of this page always reflects the current version.

12 Contact us

Questions, requests, or complaints about privacy? Reach us any of these ways:

• Privacy & data requests — privacy@venuralink.com
• Support & account issues — support@venuralink.com
• General enquiries — hello@venuralink.com
• WhatsApp — +234 912 869 2413

If you're not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).