Privacy Policy

Who we are

Leviticks is an event ticketing platform for Nigeria. Organizers use it to create events, sell tickets, run private invitation-only events and check guests in; attendees use it to find events, buy and resell tickets and RSVP to invitations.

For the data you give us to use Leviticks, we are the data controller. When an organizer uploads a guest list for a private event, the organizer decides whose details are on it and why, and we process those details on the organizer's behalf.

What we collect

Information you give us

• Account details: your name, email address, phone number, password (stored only in a securely hashed form), profile photo and display preferences.
• Tickets and orders: the events and tickets you buy, the amounts paid, and the name and email of anyone you buy a ticket for as a gift. If you check out without an account, we collect the name and email you enter so we can send you your tickets.
• Organizer details: your organizer name and logo, the social links and public contact details you choose to add, your events and their content, and your team members.
• Payout details: if you receive payouts as an organizer or from reselling a ticket, your bank, account number and the account name confirmed by your bank.
• Identity verification: organizers who verify their identity give us their National Identification Number (NIN), and optionally their date of birth. We receive the identity details that the National Identity Management Commission (NIMC) holds for that NIN, such as name and date of birth, and keep a record of the check. Your NIN is shown back to you masked.
• Private event guests: if you are invited to a private event, we hold the details the host added for you (such as your name, email, phone number, group and seating), your RSVP, how many people are coming with you, and your answers to any questions the host asked.
• Messages to us: anything you send when you contact our support team.

Information we collect automatically

• Activity on Leviticks: events you save, like or follow, ticket scans at check-in, and the notifications we send you.
• Technical data: your IP address and basic device and browser information, which we use to keep you signed in securely, prevent abuse (for example by limiting repeated attempts) and fix problems.

Payment card details

Card and bank payments are handled by Paystack. We do not receive or store your full card number; we only receive confirmation of whether a payment succeeded and a reference for it.

How we use it

• To provide the service - creating your account, processing orders, issuing QR tickets, checking guests in, running resale and sending invitations. We rely on the contract between us to do this.
• To pay organizers and sellers, and to meet our legal and financial record-keeping obligations.
• To verify organizers before they can receive payouts, to help prevent fraud. We rely on your consent, which you give when you submit your NIN, and on our legitimate interest in keeping the platform safe.
• To keep Leviticks secure - detecting fraud and abuse, protecting accounts and enforcing our terms.
• To communicate with you - order confirmations, tickets, account and security emails, event updates and in-app notifications.
• To send news and offers about Leviticks and events. Every one of these emails has an unsubscribe link, and unsubscribing doesn't affect emails about your tickets, orders or account. We may still send important service announcements, such as changes to these policies.
• To improve Leviticks, using information about how the service is used.

We do not sell your personal data, and we do not use it for third-party advertising.

Who can see your data

• Event organizers. When you buy a ticket or register for an event, the organizer (and team members they authorize) can see your name, email address and order details so they can run the event and contact you about it.
• Private event hosts. Hosts and their co-hosts see their guests' RSVPs and answers. A host can share a read-only guest list with others helping with the event, such as a planner or caterer.
• The public. Event pages, organizer names and logos, social links and any contact details an organizer chooses to publish are visible to anyone.
• Service providers who help us run Leviticks, listed below.
• Authorities, where we are required to by law or to protect the rights and safety of our users and others.
• A new owner, if Leviticks is involved in a merger, acquisition or sale of assets, in which case this policy will continue to apply to your data.

Service providers

We share only what each provider needs to do its job for us:

• Paystack - processing payments, verifying bank accounts and paying out to organizers and sellers.
• QoreID - checking an organizer's NIN against NIMC's records.
• Brevo - sending emails, such as tickets, verification links and invitations.
• EBulkSMS - sending text messages, such as private event invitations sent by SMS.
• Cloudinary - storing and serving images, such as event covers and profile photos.
• Hosting providers that run our servers and databases.

Event pages show maps from OpenStreetMap; loading a map sends your IP address to OpenStreetMap, as with any website you visit.

Some providers may process data outside Nigeria. Where they do, we take steps required by the Nigeria Data Protection Act 2023 to make sure your data remains adequately protected.

Cookies and browser storage

We use your browser's local storage to keep you signed in and to remember preferences such as which workspace you last used. We do not use advertising or third-party tracking cookies. If you clear your browser's storage, you will be signed out.

How long we keep it

• Account details, for as long as your account is open.
• Orders, payments, payouts and identity verification records, for as long as we need them to meet financial, tax and legal obligations, even after an account is closed.
• In-app notifications, for 90 days.
• If you unsubscribe from our news and offers, we keep your email address on our opt-out list so we don't email you again.
• Private event guest lists, for as long as the host keeps the event on Leviticks or until they remove the guest.

When we no longer need personal data, we delete it or make it anonymous.

Security

We protect your data with measures including encrypted connections, hashed passwords, optional two-factor sign-in, short-lived sign-in tokens and access controls that limit who can see what. No system is completely secure, so please use a strong, unique password and tell us straight away if you think your account has been compromised.

Your rights

Under the Nigeria Data Protection Act 2023, you have the right to:

• be told how your personal data is used, which is what this policy is for;
• get a copy of the personal data we hold about you;
• have inaccurate data corrected - much of it you can update yourself in your account settings;
• have your data deleted, where we don't need to keep it for a legal reason;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent where we rely on it, without affecting what was done before; and
• complain to the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, email us at support@leviticks.com. We may need to confirm your identity first. If you are a guest on a private event, you can also ask the host directly.

Children

Leviticks is not intended for children under 18 to use on their own. A parent or guardian can buy tickets for a child. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy as Leviticks changes. We will change the date at the top when we do, and tell you by email or in the app before significant changes take effect.

Contact us

Questions about this policy or your personal data? Email support@leviticks.com.

Back to Leviticks