Privacy Policy

Last Updated: July 2026

1. Introduction

Odufa Technologies Ltd. ("Odufa", "we", "our", or "us"), owner and operator of the Ochuwa platform, is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process your personal data when you access or use the Ochuwa platform, including our websites, mobile applications, APIs, ticketing services, contest and voting systems, registration forms, fundraising campaigns, merchandise marketplace, payment services, and related products (collectively, the "Services").

By using our Services, you acknowledge that your personal data will be processed in accordance with this Privacy Policy.

2. Data Controller

Unless otherwise stated, Odufa Technologies Ltd. acts as the data controller for personal information processed through the Ochuwa platform. For certain services, event organizers may also act as independent data controllers for information they collect through their events.

3. Information We Collect

Depending on how you use the platform, we may collect:

  • Identity Information: Full name, username, date of birth (where required), gender (optional), and profile photograph.
  • Contact Information: Email address, telephone number, and mailing address (where applicable).
  • Account Information: Login credentials, account preferences, account activity, and verification status.
  • Payment Information: We do not store your complete debit or credit card details. Payments are securely processed by our licensed payment partners. We may collect: transaction reference, payment status, payment amount, currency, payment method, and settlement records.
  • Identity Verification (KYC): Where required for organizer verification or regulatory compliance, we may collect BVN, NIN, government-issued identification, selfie or liveness verification, business information, and supporting verification documents. Sensitive identity information is encrypted both in transit and at rest.
  • Event Information: When using Ochuwa, we may collect information relating to ticket purchases, event registrations, contest entries, public votes, donations, merchandise purchases, check-in history, and attendance records.
  • Technical Information: Automatically collected information includes IP address, browser type, device type, operating system, device identifiers, network information, time zone, and language preferences.
  • Usage Information: We collect information regarding how you interact with the platform, including pages visited, features used, search activity, session duration, error reports, and clickstream data.

4. How We Use Your Information

We process personal information to: create and manage user accounts, process ticket purchases, facilitate public voting, manage registrations and applications, process donations and merchandise purchases, verify organizer identities, prevent fraud and abuse, detect suspicious transactions, process organizer settlements, communicate with users, provide customer support, improve our Services, comply with legal and regulatory obligations, and maintain platform security.

We only process personal data where there is a lawful basis under the Nigeria Data Protection Act (NDPA).

5. Lawful Basis for Processing

Depending on the circumstances, we process personal information based on: your consent, performance of a contract, compliance with legal obligations, protection of vital interests, or legitimate business interests that do not override your rights.

6. Information Sharing

We do not sell personal information. We may share information with:

  • Event Organizers: Information necessary for ticket validation, attendee management, registrations, contestant administration, and customer communication.
  • Payment Partners: Licensed payment processors for payment processing, settlements, and fraud prevention.
  • Service Providers: Trusted vendors providing cloud hosting, email delivery, analytics, customer support, and security monitoring.
  • Regulatory Authorities: Where required by law, we may disclose information to courts, law enforcement agencies, financial regulators, tax authorities, the Nigeria Data Protection Commission (NDPC), and anti-money laundering authorities.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain login sessions, remember preferences, improve website performance, analyze platform usage, prevent fraud, and secure user sessions. You may control cookies through your browser settings, although disabling certain cookies may affect platform functionality.

8. Data Security

We employ appropriate technical and organizational measures to protect personal information, including encryption in transit (TLS/SSL), encryption at rest, role-based access controls, audit logging, continuous security monitoring, vulnerability assessments, fraud detection systems, secure backups, and multi-factor authentication for administrative access. No online service can guarantee absolute security, but we continuously work to safeguard your information.

9. Data Retention

We retain personal information only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and satisfy accounting and regulatory requirements. Retention periods may vary depending on the type of data and applicable law.

10. International Data Transfers

Where personal information is transferred outside Nigeria, we take reasonable steps to ensure that appropriate safeguards are in place in accordance with applicable data protection laws.

11. Your Privacy Rights

Subject to applicable law, you may have the right to request access to your personal information, request correction of inaccurate information, request deletion of personal information, request restriction of processing, object to certain processing activities, withdraw consent where processing is based on consent, request data portability where applicable, and lodge a complaint with the Nigeria Data Protection Commission (NDPC). We may require identity verification before fulfilling certain requests.

12. Children's Privacy

Our Services are not intended for children under the age required to lawfully use the Services without appropriate consent. Where participation by minors is permitted (for example, youth competitions), organizers are responsible for obtaining any required parental or guardian consent, and Ochuwa may require evidence of such consent.

13. Third-Party Services

Our platform may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of those third parties. Users should review the privacy policies of those services independently.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Where changes are material, we will provide notice through the platform or by other reasonable means before the updated policy takes effect.

15. Contact Us

If you have questions, concerns, or wish to exercise your privacy rights, please contact Odufa Technologies Ltd:
Email: privacy@ochuwa.com.ng
Support: support@ochuwa.com.ng
Website: ochuwa.com.ng

16. Regulatory Compliance

Ochuwa is committed to processing personal data in accordance with applicable Nigerian data protection laws, including the Nigeria Data Protection Act, 2023 (NDPA), and cooperates with the Nigeria Data Protection Commission (NDPC) where required by law.