Introduction
THE GUEST LIST PARTY LIMITED (“Guest List Party”, “Company”) is an
event management company that utilizes fresh ideas and unique concepts to
provide end-to-end event planning and execution.
The privacy of our customers is important to us, and we commit to
protecting and safeguarding it. This Privacy Policy explains how we collect
their data, why we collect it, what we do with it and how we protect it (as regulated by the NDPC).
This policy applies to our website, payment platforms, APIs, software applications, point of sale (PoS) terminals, tools and services (collectively known as “Our Services”).
By using the Service, or submitting information through our platforms, you agree and expressly consent to the collection, use, processing, storage, transfer and disclosure of your personal data/ information in accordance with this Privacy Policy and Terms & Conditions. If you do not consent or agree with our privacy policy, please do not use our site, platform, or services.
- Interpretation and Definitions
1.1 Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions –
For the purpose of this Privacy Policy:
“Account” means a unique account created for you to access our Service or
parts of our Service “The Guest List Party Account”;
“Affiliate” means an entity that controls, is controlled by or is under common control with a party; where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority;
“Cookies” are small files that are placed on your computer, mobile device or any other device by a website, which saves details of your browsing history on that website for ease of use and full functionality of the website;
“Country” refers to Nigeria;
“Device” means any device that can access the Service such as a computer, a mobile phone, a digital tablet, etc;
“NDPA” means Nigerian Data Protection Act, 2023;
“Personal Data” is any information that is associated or relates to a specific individual and can be used to identify that person. It means any information relating to an identified or identifiable natural person (‘Data Subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; It can be anything from a name, address, a photo, an email address, bank details, posts on social networking websites, medical information, and other unique identifier such as but not limited to MAC address, IP address, IMEI number, IMSI number, SIM, Personal Identifiable Information (PII) and others;
“Personal Data Breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Personal Data transmitted, stored or otherwise processed;
“Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
“Service” refers to the website, mobile applications, software applications (“Apps”) and/ or payment platforms offered by The Guest List Party, and all activities as it relates thereto;
“Sites” means any of The Guest List Party’s platform including but not limited to mobile applications, websites, and social media platforms;
“Service Provider” means any natural or legal person who processes the data on behalf of The Guest List Party. It refers to third-party companies or individuals employed by The Guest List Party to facilitate or provide the Service on its behalf, to perform services related to the Service or to assist The Guest List Party in analysing how the Service is used;
“Sensitive Personal Data” means data relating to religious or other beliefs, sexual orientation, health, race, ethnicity, political views, trades union membership, criminal records or any other sensitive personal information
“Third-party Social Media Service” refers to any website or any social network website through which a User can log in or create an Account to use the Service;
“The Guest List Party Platforms” refers to The Guest List Party’s website, mobile application, and other digital/ electronic device(s);
“Usage Data” refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself;
“We”, “Us” or “Our” in this Policy refers to The Guest List Party;
“Website” refers to The Guest List Party’s website – https://theguestlist.rsvp;
“You” means the individual accessing or using our Service, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable. - Scope and Consent
2.1. By signing up for the use of any of our services or accessing any of our platform, its content, features, technologies, functions, you hereby consent to this Privacy Policy. You reserve the right to exercise your data protection rights as listed under the NDPA.
2.2. This Privacy Policy governs the use of The Guest List Party’s
Services by all customers, unless otherwise agreed through written contract. - Types of Data Collected and How we collect same
3.1. Personal Data: Your data is collected electronically and manually when you visit any of our Platforms and register to use any of our services. The types of personal data collected include but not limited to:
a. Information Provided during sign-up or on-boarding: To access and use the service, you must provide certain data such as first name, last name, date of birth, email, phone number and other information that assists in providing you with access to and use of the service. This data is necessary for us to verify your identity, determine your eligibility to use and give you access to the service.
b. Payment Information: To facilitate processing payments and/or refunds, you need to provide a payment method and information such as your name, entity name, billing address, residential address, credit card or banking information, account information, date, time and amount of transaction,
and such other applicable information as requested by our third-party payment service or regulatory body.
c. Information collected with cookies: We use cookies on certain pages of
our service to allow us analyze usage, in order to improve our content and product offerings, to improve our marketing and promotional efforts, and to customize our Service’s content, layout and services.
d. Correspondence: If you correspond with us via email, phone, text, or another method, we may gather the information that you submit in a file specific to you. This can also be used for quality assurance purposes.
3.2. Usage Data
a. When you access The Guest List Party services, our servers automatically record some technical information that your browser sends whenever you visit a website, links you have clicked on, length of visit on certain pages, unique device identifier, log- in information, location and other device details.
b. When you access the Service by or through a mobile device, we may automatically collect information that your browser sends.
c. We also automatically record all information about your interactions with our website/ services. This helps us in improving our services. This information includes records of your transactions and information about your other activities related to our services, such as date and time of your sessions, the pages you view, links to/from any page, time spent in a session, etc.
d. We may also use information provided by third parties like social media sites, financial institutions, open government databases, and verification agencies. We may also infer additional personal data. Information about you which are provided by you or any person to other websites or platforms are not controlled by The Guest List Party, and we are therefore not liable for how they use it.
3.3. As a principle, we do not collect any sensitive personal data. In the event we collect same, we will ensure strict compliance with data protection and privacy laws.
3.4. This Privacy Policy applies to The Guest List Party services only. We do not exercise control over the sites displayed or linked from within our various services. These other sites may place their own cookies, plug-ins or other files on your computer, collect data or solicit personal data from you. The Guest List Party does not control these third-party websites, and we are not responsible for their privacy statements. Please consult such third parties’ privacy statements.
3.5. You reserve the right to decline provision of any personal data or restrict access to such data. However, if you choose not to provide necessary personal data or restrict access to such data, our services or features may not be fully available or functional. - Use of Your Personal Data
4.1. We may use your Personal Data for the following purposes:
a. Providing you holistic and agreed services; Verify your identity, provide our services, troubleshoot problems, and respond to your enquiries;
b. Process your payment transactions (including authorization, clearing, chargebacks and other related dispute resolution activities);
c. To monitor your usage of our services; and maintain our Service with a secure, smooth, efficient, and customized experience customer support;
d. To manage your Account, manage risk, detect, prevent, and/or remediate fraud, unauthorized transactions, violations of policies or other potentially prohibited or illegal activities;
e. To manage and protect our information technology infrastructure from cyberattacks and other forms of hacker activities;
f. Carry out due diligence and verify information provided with third parties;
g. To contact you via email, telephone calls, SMS, or other equivalent forms
of electronic communication, such as a mobile application’s push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
h. Evaluate your interest in employment and contact you regarding possible employment with The Guest List Party;
i. Use data analytics to improve our website, products or services, and use experiences; and
j. Notify you of new products, new functionalities, services and/or offerings;
or any enhancements/amendments to existing products services and/or offerings. You have the right to contact us via invite@theguestlist.rsvp, to be unsubscribed from our mailing lists at any time.
4.1. If we intend to process your personal information for any purpose other than those listed in this policy, we will seek your consent before the further processing commences. - Retention of Your Personal Data
5.1. We will retain your personal data only for as long as is necessary for the purposes set out in this privacy policy and in accordance with the provision of applicable data protection laws. We will retain and use your personal data to the extent necessary to perform our services, comply with legal obligations, resolve disputes, and enforce our legal agreements and policies.
5.2. We will also retain Usage Data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer periods.
5.3. We aim to maintain our services in a manner that protects information from accidental or malicious destruction. Thus, we reserve the right not to immediately delete residual copies from our servers and may retain such information in our backup systems, after you delete information from our services.
5.4. After it is no longer necessary for us to retain your Personal data, we may dispose of it in a secure manner in compliance with limitation periods under applicable law. - Security, Protection and Storage of Personal Data
6.1. We store and process your personal information on our computers in Nigeria, Africa and elsewhere in the world where our facilities are located. Regardless of where your information is processed, we apply the same protections described in this policy.
6.2. We have implemented additional access control measures, physical, administrative, technical, security protocols, and standards to secure and protect all information in our server. The measures include but not limited
to the use of encryption and firewall technologies. We also carry out periodical security updates to ensure that our security infrastructures are compliant with industry standards.
6.3. The security of your Personal Data is important to us, and we will always use reasonable measures and industry standards to protect your information. However, note that transmission of data over the internet or other electronic form is not 100% secure.
6.4. Furthermore, in the event of an actual or suspected breach of your personal information, we will inform you as soon as possible and use best effort to remedy the breach within one (1) month from the date we report the breach to you.
6.5. We will not be held responsible for unauthorized access to your Personal data. You have the responsibility of reporting any unusual events that may indicate a breach in your data security. We will investigate whether the security breach was related to the data transmissions from our Services and let you know what steps can be taken to rectify the problem. Further action, such as reporting incidents to the police or other relevant authorities, may also be required. - Transfer of Your Personal Data
7.1. Your information, including Personal Data, is processed at our
operating offices and in any other places where the parties involved in the
processing are located. It means that this information may be transferred to — and maintained on — computers located outside of your state, province, Country or other governmental jurisdiction. Your consent to this Privacy Policy followed by your submission of such information represents your
agreement to that transfer.
7.2. International Data Transfers: Your Personal Data may be transferred to countries which may not have the same data protection laws as the country you initially provided your Personal data, but whenever we transfer or transmit your Personal data internationally, we will ensure or take reasonable steps to ensure your Personal Information is handled securely in line with the applicable data protection laws and standard contractual clauses. You have a right (upon your request) to be informed of the appropriate safeguards for data protection in the foreign country.
7.3. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy; and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other Personal Data. - Access to Your Data
8.1. If you are a customer of The Guest List Party, you may request for your personal information by sending an email to invite@theguestlist.rsvp.
8.2. This information should only be used for your own purposes and not to circumvent the platform, or to be distributed to other parties who may use such information to jeopardize the interest of The Guest List Party or the usage of The Guest List Party’s Platform.
8.3. You have the right to request that we stop using your data or return your data to you or transmit the data directly to another data controller. The withdrawal of your consent at any time shall not affect the lawful processing based on your consent before its withdrawal. In the event you intend to exercise your right in this regard, kindly notify us through invite@theguestlist.rsvp and your request shall be treated promptly.
8.4. You can also let us know if you feel that your personal information is being processed in any way other than how you have consented to it being used. We will take reasonable steps to ensure that your personal information is processed in the manner in which you have consented to it, or we may delete it based on your instruction. However, we may not accede to your request if it is unrealistic, impractical or detrimental to our compliance with applicable regulation or laws.
8.5. If the information you have supplied to us is wrong, you can put in a request to update it quickly or to delete it – unless we have to keep that information for legitimate business or legal purposes, and when responding to a request to update your personal information, we may ask you to verify your identity before we can act on the request. We may reject requests that are unreasonably repetitive, require disproportionate technical effort (for example, developing a new system or fundamentally changing an existing practice), risk the privacy of others, or would be extremely impractical (for instance, requests concerning information residing on backup systems). Where we can provide information access and correction, we will do so for free, except where it would require a disproportionate effort. - Disclosure of your Personal Data
9.1. We will not share, sell, trade, rent or disclose your personal data with a third party without your consent except as necessary to provide the Services or as described in this Privacy Policy.
9.2. When transacting with others, we may provide those parties with information to complete the transaction, such as your name, User ID, contact details, or other information needed to promote the reliability and security of the transaction. If a transaction is held, fails, or is later invalidated, we may also provide details of the unsuccessful transaction.
9.3. We work with third parties, including but not limited to banks, to enable them to accept or send payments from or to you. In doing so, a third
party may share information about you with us, such as your email address or mobile phone number, to inform you that a payment has been sent to you
or when you attempt to pay a merchant or third party. We use this information to confirm that you are a The Guest List Party customer. We also validate your status as a The Guest List Party customer to third parties.
9.4. Law enforcement: Under certain circumstances, The Guest List Party may be required to disclose your Personal Data if required to do so by law or in response to valid requests by government authorities.
9.5. We work with third parties, including merchants, to facilitate the receipt of your payments. Kindly note that third parties, such as merchants, involved in transactions may have their own privacy policies, and The Guest List Party does not allow the other transacting party to use this information for anything other than providing agreed Services. The Guest List Party is not responsible for their actions, including their information protection practices.
9.6. We may also disclose/ share your personal data, transaction history/data, business information and any other data generated by us pursuant to your use of our services with our affiliates, parent-company, sister companies, subsidiaries, business partners and any other Company within Access Corporation, for business synergy purposes and for the provision of other services to you. In this case your personal data becomes subject to a different privacy policy. However, we will always comply with the provisions of all applicable data protection law.
9.7. In addition to the above, The Guest List Party may share your Personal Data with third parties which include our merchants, affiliates, employees, officers, service providers, suppliers, agents, sub-contractors as may be reasonably necessary only in the following circumstances:
a. Fraud prevention and risk management;
b. For customer service purposes;
c. Protecting and defending the rights of The Guest List Party;
d. For compliance with applicable laws, anti-money laundering and counter-terrorist financing verification requirements;
e. With Service Providers, to enable them monitor and analyze the use of our Service and support our business operations;
f. Prevent or investigate possible wrongdoing in connection with the Service;
g. Protect the personal safety of Users of the Service or the public;
h. Protect against legal liability.
i. Where disclosure is necessary for the performance of a contract to which you are party (such as our marketing services) or to take steps at your request prior to entering into a contract with us. Specifically, we may disclose your personal data to third parties during our verification exercise to determine your identity or eligibility to use our service
j. With Our affiliates and partners where necessary; and
k. With other users – when you share Personal Data or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside. If you interact with other users or register through a Third-Party Social Media Service, your contacts on the Third-Party social media service may see your Personal Data.
9.8. You accept that your pictures and testimonials on all social media platforms about The Guest List Party can be used for limited promotional purposes by us or our agents. This does not include your trademark or copyright protected materials.
9.9. Where your employee, as part of the process of application for a service from The Guest List Party or a third party, requires his/her data to be provided in support of such an application to The Guest List Party or a third party, we are obligated to avail such request, upon the employee giving the requisite authorisation as the Data Owner/Data Subject, in the form prescribed by us or the third party.
9.10. We may disclose personal data as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets. In this case, your Personal Data may be transferred and becomes subject to a different privacy policy - Your rights under the NDPA
You have data protection rights and are entitled to the following:
a. The right to access – You have the right to request copies of your Personal Data from us. We may charge a reasonable fee for this service, in consideration of the administrative cost that will be incurred in accomplishing the request.
b. The right to rectification – You have the right to request for the correction
of any information you believe and have proven to have been captured inaccurately. You also have the right to request for the completion of any information you believe is incomplete.
c. The right to erasure – You have the right to request to erase your Personal Data, under certain conditions some of which are listed in the NDPA, however not limited to regulatory requirements or law enforcement agencies.
d. The right to restrict processing – You have the right to request the restriction of the processing of your Personal Data, under certain conditions some of which are listed in the NDPA.
e. The right to object to processing – You have the right to object to the processing of your Personal Data, under certain conditions.
f. The right to data portability – You have the right to request the transfer of data collected to another organization, or directly to you, where technically feasible, without unnecessary hindrance.
Any requests emanating from any of the rights above shall be handled between two (2) to four (4) working weeks. - Tracking Technologies and Cookies
11.1. We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information.
11.2. When you browse our website, we use cookies to ensure a seamless user experience across all the functions you access. The contents of this page are meant to explain to you in clear terms what cookies mean and how we use them on our site. Cookies are necessary for our website to perform
its functions normally. We use them in different contexts, as some are meant to manage your session and ensure that you transition smoothly between pages when logged in with your browser kept active while others are more persistent and linger on your device for a longer period. Cookies allow a website to recognize a particular device or browser. - Marketing
12.1. You acknowledge and understand that as part of us providing our services to you we may provide you information about third party products and services and we may share limited personal data about you in connection with our services. Our lawful basis for doing this is performance of our contract with you or our legitimate business interest (or those of a third party).
12.2. Please note however that you may opt out of the marketing and promotional offers. if you opt-out of marketing content, we may still send you messages relating to transactions and our Services related to our ongoing business relationship. We may ask you for permission to send notifications to you. - Limitation of Liability
13.1. The Guest List Party will not be liable for loss of income, profits, business, opportunity, goodwill, contracts or any indirect, special, incidental or consequential damages arising out of or in connection with the Service, any computation or failed service on The Guest List Party, arising out of any breach of this Policy.
13.2. We will not be liable for any loss or damage arising as a result of unauthorized access to the Service if (a) you intentionally or negligently fail to take reasonable precautions to protect your security, access codes, login details or any device used to access the Service, (b) you failed to promptly notify us that the Service was being accessed in an unauthorised way after becoming aware of it, or (c) you acted fraudulently.
13.3. Our liability to you or any third party in any circumstance of proven liability by us, shall not exceed the fees paid to us in respect of the specific transaction that gave rise to the claim or liability, unless otherwise specified by a court of competent jurisdiction. - Providing Us with Personal Data of Another Person
If you need to provide us with personal data about another person, you must obtain that individual’s express consent to share their information. You covenant to also share this Privacy policy with those individuals as it shall also apply to them. - Remedies for Personal Data Breach
Where we notice personal data breach or where you report any personal data breach to us, we will as soon as possible investigate same and notify you of the security or correctional measures to be taken including without limitation to reporting same to relevant government authorities. - Changes to this Privacy Policy
From time to time, we may change, amend or review this Privacy Policy to reflect new services or changes in our Privacy Policy and place any updates on this page. If we make any material changes to the Privacy Policy, we will notify you by sending an e-mail to the e-mail address you most recently provided us or by posting notice of the changes on this site.
We request you to periodically review the Privacy Policy from time to time for the recent changes on our privacy practices. If you keep using our Services, you consent to all amendments of this Privacy Policy.
For Complaints
All requests, questions, comments and complaints regarding the privacy policy should be sent to invite@theguestlist.rsvp.
We may request additional details from you regarding your complaints and keep records of your requests and resolution. If you have other concerns/complaints about how we handle your request or personal data processing, you can lodge the complaint via info@ndpc.gov.ng.
