GDPR & NDPR
Compliance

1. Applicable Regulations

EventVault is committed to compliance with:

• NDPR — Nigeria Data Protection Regulation 2019 (NITDA)
• GDPR — EU General Data Protection Regulation 2016/679 for EU-resident users

2. Data Controller Information

EventVault Ltd is the data controller for all personal data processed through the Platform. Our Data Protection Officer can be contacted at dpo@eventvault.com.

3. Lawful Basis for Processing (GDPR Article 6)

• Article 6(1)(b) — Contract: Processing necessary to deliver the service
• Article 6(1)(c) — Legal obligation: Financial record-keeping and anti-money laundering compliance
• Article 6(1)(f) — Legitimate interests: Fraud detection, platform security, and product analytics

4. NDPR Compliance

In accordance with the NDPR 2019:

• We have registered as a data controller with NITDA
• We conduct Data Protection Impact Assessments for high-risk processing activities
• We appoint a Data Protection Compliance Organisation for annual audits
• We honour data subject access requests within 30 days

5. International Data Transfers

Data may be transferred to AWS infrastructure in Ireland and the US under Standard Contractual Clauses. All transfers are governed by data processing agreements meeting GDPR Chapter V requirements.

6. Data Subject Rights

Under both GDPR and NDPR, you have the right to access, rectify, erase, restrict, and port your data; object to processing; and withdraw consent at any time. Submit requests to privacy@eventvault.com. We respond within 30 days.

7. Data Breach Notification

In the event of a data breach affecting your personal data, we will notify the relevant supervisory authority within 72 hours of becoming aware, and affected individuals without undue delay.

8. Children's Data

EventVault does not knowingly collect personal data from individuals under 18. If we become aware that a minor has registered, we will delete the account promptly.

9. Contact

Data protection queries: dpo@eventvault.com
NITDA-registered DPO: Available upon request