PARTYVERSE DATA POLICY

PartyVerse (“PartyVerse”, “we”, “our”, or “us”) operates a technology-enabled digital platform that facilitates event creation, planning, promotion, ticketing, vendor engagement, attendee management, and payment facilitation through licensed third-party payment processors (collectively, the “Services”).

This Data Policy sets out how PartyVerse collects, uses, stores, shares, transfers, retains, and protects personal data when individuals access or use the PartyVerse website, mobile applications, APIs, customer support channels, and related digital services (together, the “Platform”).

This Policy is issued in accordance with applicable data protection and privacy laws in force in Nigeria and reflects internationally recognised principles relating to the lawful, fair, transparent, and secure processing of personal data.

We recognise personal data protection as a fundamental right and is committed to processing personal data lawfully, fairly, transparently, securely, and in a manner that respects the rights and freedoms of Data Subjects.

1. Introduction and Regulatory Background

This Data Policy explains in detail how PartyVerse collects, uses, stores, shares, transfers, retains, and protects personal data when individuals access or use the Platform. It is grounded in applicable data protection and privacy laws in force in Nigeria and aligned with internationally recognised principles of lawful, fair, transparent, and secure processing.

2. Definitions and Interpretation

Personal Data

Any information relating to an identified or identifiable natural person.

Data Subject

Any individual whose Personal Data is processed by PartyVerse.

Processing

Any operation performed on Personal Data, including collection, recording, organisation, storage, use, disclosure, transmission, alignment, restriction, erasure, or destruction.

Controller:

The entity that determines the purposes and means of the processing of Personal Data.

Processor

Any person or entity that processes Personal Data on behalf of a Controller.

3. Scope and Applicability

This Data Policy applies to all Users of the Platform, including Event Organisers, Planners, Vendors, Ticket Buyers, Attendees, and Platform Visitors.

It applies to all Personal Data processed by PartyVerse, whether collected directly from Data Subjects or generated through use of the Platform, and to all Processing activities carried out by PartyVerse as a Data Controller and, where applicable, as a Data Processor.

This Policy applies regardless of whether Personal Data is processed electronically, manually, or by automated means.

4. Data Protection Principles and Risk Allocation

PartyVerse processes Personal Data in accordance with recognised data protection and privacy principles. Nothing in this Data Policy shall be construed as creating an absolute or non-excludable obligation on PartyVerse beyond what is required by applicable law.

Accordingly, Personal Data shall be:

• Processed lawfully, fairly, and transparently;
• Collected for specified, explicit, and legitimate purposes;
• Adequate, relevant, and limited to what is necessary;
• Reasonably accurate and kept up to date where required;
• Retained only for as long as reasonably necessary;
• Processed with appropriate technical and organisational safeguards.

We do not warrant that Personal Data processing will be error-free, uninterrupted, or immune from external threats, provided that reasonable safeguards are maintained.

5. Categories of Personal Data Processed

Subject to the principles of necessity and proportionality, PartyVerse may process the following categories of Personal Data:

5.1 Identity and Account Data

Includes full legal name, email address, telephone number, username, password (hashed), authentication credentials, profile photographs, and biographical details where voluntarily provided.

5.2 Event, Participation, and Interaction Data

Includes event listings, schedules, attendance records, ticket purchase history, vendor service listings and engagement records, and messages, comments, and interactions between Users on the Platform.

5.3 Financial and Transactional Data

Includes payment transaction references, settlement, payout, and wallet balance records. PartyVerse does not store card numbers, CVV codes, PINs, or bank login credentials. Such information is processed exclusively by licensed third-party payment service providers.

5.4 Technical, Device, and Usage Data

Includes IP addresses, device identifiers and operating systems, browser types and application versions, log files, timestamps, and usage analytics.

5.5 Support, Communication, and Compliance Data

Includes communications with customer support, feedback, complaints, dispute records, and investigation materials.

6. Sources of Personal Data

Personal Data may be collected directly from Data Subjects during registration, event creation, ticket purchase, or other platform interactions; automatically through cookies, logs, and similar technologies; from third-party service providers acting on PartyVerse’s instructions; and from lawful public or regulatory sources where permitted by law.

7. Purposes of Processing

PartyVerse processes Personal Data only for legitimate and clearly defined purposes, including:

• Account creation, verification, authentication, and administration;
• Event hosting, ticketing, attendance management, and vendor coordination;
• Payment facilitation, settlements, reconciliations, and financial reporting;
• Communication of transactional notices, security alerts, updates, and support responses;
• Fraud detection, prevention, platform integrity, and risk management;
• Compliance with legal obligations, regulatory requirements, and law enforcement requests;
• Analytics, research, and service improvement, subject to data minimisation and aggregation where feasible.

8. Lawful Bases for Processing and Platform Necessity

PartyVerse relies on one or more lawful bases when processing Personal Data, including:

• Performance of a Contract: processing that is strictly necessary to provide core Platform functionality. Certain processing activities are mandatory, and Users who do not agree may be unable to access some or all Services;
• Legal and Regulatory Obligations: processing required to comply with applicable laws, lawful requests, or regulatory requirements;
• Legitimate Interests: processing necessary for security, fraud prevention, system integrity, analytics, business continuity, and enforcement of PartyVerse’s rights, provided such interests are not overridden by Data Subject rights;
• Consent: processing based on freely given consent, where required. Withdrawal of consent shall not affect processing carried out on other lawful bases or processing already lawfully undertaken.

9. Automated Decision-Making and Profiling

PartyVerse does not engage in automated decision-making or profiling that produces legal or similarly significant effects on Data Subjects. Where this changes, Data Subjects will be informed and provided with appropriate safeguards.

10. Data Sharing, User Responsibility, and Third-Party Limitations

10.1 User-to-User Disclosure

Certain Platform features require the controlled sharing of Personal Data between Users (including Event Organisers, Vendors, and Attendees). Such disclosures are inherent to the Services. PartyVerse does not control or assume liability for independent actions taken by other Users once data is lawfully disclosed, and Users remain responsible for complying with applicable data protection obligations in respect of Personal Data received through the Platform.

10.2 Third-Party Service Providers

PartyVerse engages third-party service providers to support Platform operations. While reasonable due diligence and contractual safeguards are applied, PartyVerse is not responsible for failures, breaches, or acts beyond its reasonable control attributable solely to such third parties acting independently or contrary to instructions.

10.3 Legal Disclosure

PartyVerse may disclose Personal Data where required or permitted by law and shall not be liable for disclosures made in good-faith compliance with legal obligations.

11. Cross-Border Transfers and Infrastructure Dependency

Personal Data may be processed or stored on infrastructure located outside Nigeria, including cloud-based systems. PartyVerse takes reasonable steps to ensure appropriate safeguards are applied. However, Users acknowledge that global internet infrastructure and third-party hosting environments are subject to varying legal and technical risks beyond PartyVerse’s direct control.

12. Data Retention, Archiving, and Legal Hold

Personal Data is retained only for as long as reasonably necessary, taking into account operational requirements such as legal, accounting, and regulatory obligations, dispute resolution, investigations, or enforcement of rights.

PartyVerse may retain, archive, or restrict access to Personal Data where deletion would impair legal claims, compliance obligations, or platform integrity. Such retention shall not constitute unlawful processing.

13. Data Subject Rights and Limitations

Data Subjects may exercise rights in relation to their Personal Data, subject to legal limitations and PartyVerse’s legitimate interests.

PartyVerse reserves the right to refuse manifestly unfounded, excessive, or abusive requests and may require reasonable verification of identity.

Rights may be restricted where necessary for security, fraud prevention, legal compliance, or protection of other Users’ rights. Nothing in this Policy obliges PartyVerse to delete or restrict processing where retention is legally or operationally justified.

14. Security Measures

PartyVerse implements layered technical and organisational measures including access controls, encryption, monitoring, staff training, and vendor due diligence to help protect Personal Data.

15. Personal Data Breach Management and Liability Limitation

PartyVerse maintains procedures to detect, assess, and respond to data incidents. Notification obligations apply only where legally required and where a breach presents a material risk to Data Subject rights.

PartyVerse shall not be liable for breaches arising from force majeure events, acts of third parties beyond reasonable control, or security failures attributable to User negligence.

16. Governance, Accountability, and DPO

PartyVerse maintains internal governance frameworks, records of processing activities, and appoints a data protection or privacy contact where required by law.

17. Policy Updates and Review

This Data Policy may be reviewed and updated periodically to reflect legal, operational, or technological changes.

18. Contact Information

If you have any questions, comments, or concerns regarding this Data Policy or PartyVerse’s data protection practices, please contact us at contact@PartyVerse.com.

Data Protection Office: Planaparty Global Limited.

This Data Policy forms an integral part of the PartyVerse Terms of Use.