Your information, handled carefully.

This policy explains what WapGate needs to run ticket sales and event entry, why we need it, and the choices you have under the Nigeria Data Protection Act.

Who we are

WapGate is an event ticketing service based in Awka, Anambra, Nigeria. When you buy, sell, promote, or check in tickets through WapGate, we are the party responsible for the personal information described here.

This policy is written under the Nigeria Data Protection Act 2023 (NDPA). Privacy questions can be sent to [email protected].

Who this policy covers

This policy applies to everyone who uses WapGate: ticket buyers, event organisers, promoters, and the door crew who scan tickets at events. It covers the WapGate website and the pages you open from a ticket, event, gate, or promoter link.

What we collect

We collect only what is needed to sell and verify tickets and to run payouts. What that is depends on how you use WapGate.

  • Buyers: your email, the name you provide, the event and tickets you buy, payment references, and check-in records.
  • Organisers: your account email, business and event details, bank-account details used for payouts, and your team and gate setup.
  • Promoters: your account email, the events you promote, referral links, tracked sales, and bank-account details used for payouts.
  • Automatically: basic device and connection information and security logs, such as the time of a request and the network address it came from, used to keep the service safe.

How we use it

We use your information to run ticket sales and event entry, and for nothing unrelated to that.

  • Show event details and sell tickets.
  • Process payments and payouts through Paystack.
  • Deliver tickets and let you recover them.
  • Verify entry at the door and prevent duplicate or invalid tickets.
  • Track promoter referrals and calculate commission.
  • Support buyers, organisers, and promoters, and resolve disputes.
  • Protect the service from fraud and abuse, and meet our legal obligations.

Our legal basis

Under the NDPA, we rely on: performance of a contract, to give you the ticket, event, or payout you asked for; our legitimate interest, to keep the service secure and prevent abuse; your consent, for optional things such as sharing your location to find nearby events; and legal obligation, where the law requires us to keep certain records.

Payments

Payments and payouts are processed by Paystack under its own terms and privacy notice. WapGate receives the payment reference and status needed to confirm an order or a payout. We do not ask for or store your card PIN, online banking password, or full card number.

Maps and location

Venue maps and address lookups use map data from OpenStreetMap contributors through our maps provider. If you choose "Find events near me", your browser asks your permission first, and we use a rounded, approximate location in the search request only. We do not save that location to your account.

Tickets on your device

When you open a ticket, the ticket information may be saved on that phone so it can still show at the venue when the connection is weak. That copy stays on your phone. Do not share a ticket link with anyone who should not use the ticket.

When we share information

We share personal information only where it is needed to run an event, and we do not sell it.

  • With the organiser of an event you buy for, so they can run the event and its guest list.
  • With the door crew at that event, who see the guest list needed to admit you.
  • With service providers who work for us, such as Paystack for payments, our email provider for ticket delivery, and our maps provider for venue maps.
  • Where the law requires it, or to protect buyers, organisers, venues, or the service from harm.

How long we keep it

We keep records only as long as needed to run events, resolve payment and entry disputes, and meet accounting and legal duties. Some data has a fixed limit: raw payment-provider records are cleared after 90 days, the keys that bind a ticket to a phone are cleared about 30 days after an event ends, and attendance records are kept for up to 24 months before the parts that could identify a person are removed and only headcounts and totals remain.

How we protect it

Access to personal information is limited and logged. Sensitive event data is protected in storage and in transit, and privileged access such as guest-list downloads and exports is recorded. If a security breach affects your information, we act to contain it and report it to the authorities within the timeframe the NDPA requires.

Your rights

Under the NDPA you can ask to see the information we hold about you, correct it if it is wrong, ask us to delete it, object to or restrict certain uses, and withdraw a consent you gave. To make a request, email [email protected] from the address on your account so we can verify it is you. We respond within the time the law allows.

Some records may need to be kept when the law or an unresolved payment dispute requires it. If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission.

Children

WapGate is intended for adults buying and running events. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has provided information, contact us and we will remove it.

Changes to this policy

We may update this policy as the service changes or the law requires. When we make a significant change, we update this page. Continuing to use WapGate after a change means the updated policy applies.

Contact

Privacy questions can be sent to [email protected] or WhatsApp +234 813 886 0045. WapGate is based in Awka, Anambra, Nigeria.