Policies
Privacy policy
Who we are
Tech Ember Fest is organised by Nexprove, [Registered address], Lagos, Nigeria (“we”, “us”). We decide how your data is used, which makes us the data controller. For anything about your data, email techemberfest@gmail.com.
What we collect
- Ticket orders: your name, email, phone number, organisation or community, the package you chose, the amount, and a payment reference.
- Forms: what you type into our forms, such as showcase entries, community and partner applications, volunteer sign-ups, questions and newsletter sign-ups.
- Payments: handled on our payment provider's page. We receive the payment status, amount, channel (card, transfer, USSD) and reference. We never see or store your card details.
- Site usage: anonymous page views and performance data, plus Google Analytics data if you allow it (see “Cookies and analytics”).
- At the event: your ticket QR code is scanned at entry. Photos and video may be taken (see “Photos and filming”).
We don't collect sensitive personal data (such as health, religion or biometrics) unless you choose to tell us about an access or medical need so we can help you on the day.
How we use it, and why we're allowed to
| Purpose | Lawful basis (NDPA s.25) |
|---|---|
| Selling you tickets, sending your ticket and admitting your group | Performance of a contract |
| Reviewing showcase, community, partner and volunteer applications | Steps you asked us to take before a contract, or legitimate interest |
| Answering your questions | Legitimate interest |
| Newsletter and line-up announcements | Consent (unsubscribe any time) |
| Keeping payment and tax records; preventing fraud | Legal obligation and legitimate interest |
| Safety and security at the venue | Legitimate interest and vital interests |
Who we share it with
We don't sell your data. We share it only with service providers who process it for us under contract:
- Paystack or OPay: to take your payment.
- Google (Google Sheets and Gmail): to store orders and form entries and send your ticket email.
- Vercel: to host this website and measure anonymous traffic.
- Google Analytics: only if you allow it, to understand how visitors use the site.
- Partners and sponsors: only if you opt in, for example by asking a partner to follow up at their stand.
We may disclose data where the law requires it, for example to law enforcement with a valid request.
Transfers outside Nigeria
Some providers above store data on servers outside Nigeria (for example in the EU or US). Where that happens we rely on the safeguards the NDPA allows, such as the provider's contractual data-protection commitments, and we only transfer what's needed.
How long we keep it
- Ticket orders and payment records: 6 years, for tax and accounting.
- Applications and questions: 12 months after the event, then deleted.
- Newsletter: until you unsubscribe.
- Event photos used in our publicity: as long as the publicity is live.
Security
Payments run on PCI-DSS certified providers. Our spreadsheet is private to the organising team, the website only talks to it with a secret key, and ticket references are random so they can't be guessed. No system is perfectly secure; if we ever have a breach that puts you at risk, we'll tell you and the NDPC as the law requires.
Your rights
Under the NDPA you can ask us to:
- tell you what data we hold about you and give you a copy;
- correct it, or delete it where we no longer need it;
- stop or limit using it, including for marketing;
- send it to you or another organisation in a portable format;
- withdraw consent you gave earlier.
Email techemberfest@gmail.com. We'll reply within 30 days. If you're unhappy with our answer you can complain to the Nigeria Data Protection Commission.
Cookies and analytics
We use two kinds of analytics. Vercel Web Analytics and Speed Insights count page views and measure loading speed without cookies and without identifying you, so they run for everyone. Google Analytics gives us more detail (for example, how people found us) but sets cookies, so it only runs if you click “Allow” on the banner. You can change your mind any time with “Cookie settings” in the footer; saying no clears Google's cookies. We strip ticket references from every address we record. Your browser also stores your cookie choice and a small flag so the opening animation plays once per visit. Our payment provider's checkout page sets its own cookies to process your payment securely.
Photos and filming
We photograph and film the fest to share and promote it. If you'd rather not appear, tell a crew member on the day and we'll avoid you where we can, or email us afterwards and we'll take down images where you're the main subject. See also our terms.
Children
Our tickets and forms are for adults. We don't knowingly collect data from anyone under 18 without a parent or guardian's consent.
Changes to this policy
We'll update this page if our practices change and change the date at the top. Significant changes will be emailed to ticket holders.