Data Privacy Policy

Effective Date: March 21, 2026

At Accreda, we operate a premium, technology-enabled event infrastructure platform. Our services include omnichannel ticketing, fast on-site access control, on-demand badging, secure digital voting, and payment facilitation (collectively, the “Services”).

We view data protection not just as a compliance requirement, but as a core pillar of our secure event infrastructure.

1. Scope and Applicability

This Policy applies to all users of the Accreda Platform, including Event Organisers, Attendees, Vendors, Corporate Clients, and Campus Ambassadors. It governs all personal data processed by Accreda, whether collected online during ticket purchase or on-site at the event gates.

2. Categories of Data We Collect

To provide a seamless, high-security event experience, we process the following categories of data, subject to the principles of data minimisation:

Identity & Account Data: Full name, email address, phone number, and encrypted passwords.
Ticketing & Device-Locked Data: Ticket purchase history, QR code generation logs, and device identifiers used to lock tickets to specific hardware to prevent scalping and fraud.
On-Site Access Data: Check-in timestamps and entry gate logs collected by our on-site Accreda Ambassadors to manage crowd flow.
Financial & Transactional Data: Payment references and settlement records. Note: Accreda does not store full credit card numbers or bank credentials. All payment processing and split-payment routing are handled securely via licensed third-party gateways (e.g., Paystack).
Secure Voting Data: For events utilizing our live digital voting features, we collect cryptographic voting logs to ensure tamper-proof, transparent results.
Public Trust Score Analytics: Aggregated data regarding an Organiser's event success rate, check-in speed, and attendee feedback, used to calculate and publicly display their Accreda Trust Score.

3. Lawful Bases and Purposes of Processing

We process your data under the frameworks of Contractual Necessity, Legitimate Interest, Legal Obligation, and Consent (where applicable in Nigeria). We use your data to:

Generate, secure, and authenticate digital tickets and VIP passes.
Prevent ticket scalping and unauthorized entry through device-locking technology.
Facilitate real-time access control at event venues.
Process split payments, ensuring Organisers and the Platform receive funds accurately and instantly.
Maintain the integrity of our Secure Digital Voting infrastructure via forensic-level audit logging.
Communicate transactional notices, event updates, and security alerts.

4. Data Sharing and Third-Party Disclosures

Accreda does not sell your personal data. We only share information in the following strictly controlled scenarios:

Event Organisers: When you purchase a ticket, essential identity and check-in data is shared with the specific Event Organiser to facilitate your entry and their event analytics. Organisers are bound by our Terms of Service to handle your data responsibly.
Payment Processors: Transactional data is securely transmitted to licensed financial gateways to process your payments and execute Organiser payouts.
Legal & Regulatory Authorities: We may disclose data if required by Nigerian law enforcement, regulatory bodies, or to protect the vital interests and physical security of event attendees.

5. Data Security and Retention

We implement military-grade technical and organisational measures to protect your data. This includes end-to-end encryption for digital voting and hashed credential storage.

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by financial and legal retention laws. Once data is no longer necessary, it is securely deleted or irreversibly anonymised.

6. Your Data Subject Rights

Under applicable data protection laws, you possess the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request the deletion of your data, subject to our legal and financial retention obligations (e.g., anti-fraud records).
Restriction & Objection: Limit or object to how we process your data, particularly regarding direct marketing.
Data Portability: Receive your data in a structured, commonly used format.

7. Updates and Contact Information

We may update this Policy periodically to reflect technological advancements or regulatory changes. The latest version will always be available on our Platform.

If you have questions regarding this Policy, or wish to exercise your data rights, please contact our Data Protection Office at:

Email: privacy@accerda.com