Privacy Policy

1. Who we are

Fazeelity is operated from Nigeria by Marush Project's Limited (RC number 7059270), with a registered business address at 41 Accra Street, Wuse Zone 5, FCT, Abuja, Nigeria.

For personal data about your own customers that you upload or generate while using Fazeelity, the business using Fazeelity is the data controller and Fazeelity acts as a data processor. For account, billing and support data, Fazeelity is the controller.

2. Data we collect

Venue and business owners

• Name, email address, phone number, and role
• Business name, facility and venue details, operating hours, pricing configuration
• Business logo and other uploaded assets
• Billing and subscription records

Staff and team members

• Name, email address, phone number, assigned role and permissions
• Activity records such as bookings created, approvals, and requisitions raised

Customers and clients of a venue

• Name, contact details, and organisation or team name
• Booking history, session times, activity or purpose, and notes

Bookings, payments and financial records

• Booking amounts, additional charges, invoices, receipts, and refunds
• Payment amounts, dates, methods, account allocation, and installment records
• We do not store full card numbers and we do not process card payments inside Fazeelity. Payments taken by a venue are recorded manually as amounts, dates and methods for bookkeeping only.

Technical and usage data

• Device and browser type, IP address, and approximate location derived from it
• Log data, error reports, feature usage, and session timestamps

3. How and why we use data

• Service provision — creating accounts, managing venues, bookings, invoices, receipts, reports, and maintenance records.
• Billing — subscription charges, invoicing, and payment reconciliation.
• Support — responding to enquiries, diagnosing faults, and restoring data.
• Analytics and improvement — understanding how features are used so we can improve reliability and usability.
• Fraud prevention and security — detecting abuse, unauthorised access, and suspicious financial activity.
• Legal and accounting obligations — retaining records we are required to keep.
• Service communications — notifications, changes to the service, and security alerts.

We do not sell personal data, and we do not use your customer data to train AI models.

4. Legal basis under NDPA 2023 and GDPR

Where the Nigeria Data Protection Act 2023 (NDPA) applies, we process data on the equivalent lawful bases it recognises.

5. Data sharing and subprocessors

We share personal data only with providers that help us run the service:

We may also disclose data where required by law, to enforce our Terms of Service, or in connection with a merger or acquisition, in which case we will notify affected customers.

6. International transfers

Some of our providers process data outside Nigeria. Where that happens we rely on the standard contractual clauses in our agreements with those providers, together with an adequacy assessment of the destination country as contemplated by the NDPA 2023, and take reasonable steps to ensure comparable protection. Current processing locations are listed in the table above.

7. Your rights

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — ask us to erase data where we have no overriding obligation to keep it.
• Portability — receive your data in a structured, machine-readable format.
• Restriction — ask us to limit processing while a dispute is resolved.
• Objection — object to processing based on legitimate interest, and to marketing at any time.
• Withdraw consent — where processing relies on consent.

If you are a customer of a venue that uses Fazeelity, please contact that venue first, as they control your booking data. To exercise a right with us, use the contact details below. We respond within 30 days of a verified request. You may also complain to the Nigeria Data Protection Commission or, in the EU/UK, your local supervisory authority.

8. Data retention

After an account is closed we delete or anonymise data once the periods above expire, unless the law requires us to keep it longer.

9. Security

• Encryption in transit (HTTPS/TLS) and encryption at rest at our hosting provider
• Role-based access control, so staff only see the venues and records assigned to them
• Row-level database access rules scoped to each business
• Authentication with password or federated sign-in, and session management
• Least-privilege internal access, audit logging, and regular backups

No system is perfectly secure. If a breach affects your personal data we will notify you and the relevant regulator as required — within 72 hours of becoming aware of the breach, and without undue delay to affected individuals where the risk to them is high.

10. Cookies and tracking

We use cookies and similar technologies for sign-in, preferences, and analytics. Details of each category, and how to refuse them, are in our Cookie Policy.

11. Children's data

Fazeelity is a business tool and is not directed at children. We do not knowingly collect personal data from minors. Where a venue books sessions for youth teams, the venue is responsible for obtaining any parental or guardian consent required, and should keep children's data to the minimum needed for the booking. If you believe a minor's data has been provided to us in error, contact us and we will delete it. For this policy, anyone under 18 is treated as a minor.

12. Changes to this policy

We may update this policy as the service changes. We will revise the "last updated" date and, for material changes, notify account owners by email or in-app notice.

13. Contact us

• Support email: support@fazeelity.com
• Data protection contact: the Data Protection Officer, Marush Project's Limited — privacy@fazeelity.com
• Postal address: 41 Accra Street, Wuse Zone 5, FCT, Abuja, Nigeria