Who We Are
Owanbe Central Ltd ("Owanbe Central", "we", "us", or "our") operates the Owanbe Central platform at https://www.owanbecentral.com. We are committed to protecting your personal data and your right to privacy. This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have in relation to it. It applies to all users of our website, mobile application, and related services. Our registered office is at: Victoria Island, Lagos, Federal Republic of Nigeria.
Data We Collect
We collect different categories of personal data depending on how you use the Platform.
Account & Identity Data
When you register, we collect your full name, email address, phone number, profile photo, and account type (Couple, Vendor, or Planner). For Vendors, we may also collect business name, CAC registration number, and bank account details.
Event & Planning Data
We collect information about your celebrations, including event dates, venues, guest lists, budget breakdowns, vendor bookings, seating plans, and related communications. This data is necessary to provide our core planning services.
Payment & Financial Data
We collect information necessary to process payments, including transaction amounts, payment method types, and payer/payee identifiers. Full card or bank account details are handled by our PCI-DSS compliant payment processors and are not stored on our servers.
Usage & Technical Data
We automatically collect information about how you interact with the Platform, including your IP address, device type, browser, operating system, pages visited, features used, and time spent. This data is collected via cookies and similar technologies.
Communications Data
We retain records of messages sent through the Platform's messaging system between Couples, Vendors, and Planners, as well as communications with our support team, to facilitate dispute resolution and improve our services.
Data You Provide About Others
If you upload guest lists or share others' contact details, you are responsible for ensuring those individuals are aware their data is being shared with us and that such sharing complies with applicable law.
How We Use Your Data
We use the personal data we collect for the following purposes:
Service Delivery
To create and manage your account, process bookings and payments, facilitate communication between users, and provide all features of the Platform.
Platform Improvement
To understand how users interact with the Platform, identify areas for improvement, troubleshoot issues, and develop new features and services.
Safety & Security
To detect, investigate, and prevent fraud, abuse, and other harmful activities; to verify vendor identities; and to enforce our Terms of Service.
Legal Compliance
To comply with applicable laws and regulations, including the Nigeria Data Protection Regulation (NDPR) 2019, the Central Bank of Nigeria (CBN) guidelines on electronic payments, anti-money laundering regulations, and other statutory obligations.
Marketing & Communications
With your consent, to send you newsletters, product updates, promotional offers, and event management tips. You may withdraw consent at any time by clicking "Unsubscribe" in any marketing email or updating your communication preferences in account settings.
Legal Basis for Processing
We process your personal data only where we have a valid legal basis to do so. Our primary legal frameworks are:
Nigeria Data Protection Regulation (NDPR) 2019
As a Nigerian company, we comply with the NDPR issued by the National Information Technology Development Agency (NITDA). Our processing is based on: (a) your contractual relationship with us; (b) your freely given, specific, and informed consent; (c) compliance with our legal obligations; and (d) our legitimate interests where they are not overridden by your rights.
GDPR (for users in the European Economic Area & UK)
If you access the Platform from within the EEA or the United Kingdom, we also comply with the requirements of the General Data Protection Regulation (GDPR) and the UK GDPR respectively. The legal bases under Article 6 GDPR applicable to our processing are the same categories as listed under NDPR above.
Consent Withdrawal
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Data Sharing & Third Parties
We do not sell your personal data. We may share it only in the following circumstances:
Other Platform Users
Your profile information and reviews are visible to other users as necessary to facilitate bookings. Messages are shared between the relevant parties to the conversation. We do not disclose financial or sensitive personal data to other users without your consent.
Service Providers
We engage reputable third-party processors for payment processing, cloud hosting, email delivery, analytics, and customer support. All processors are bound by data processing agreements that require them to protect your data to at least the standard required by the NDPR.
Regulatory & Law Enforcement
We may disclose data to Nigerian governmental bodies (including NITDA, EFCC, and the CBN), courts, or law enforcement agencies where required by law, a court order, or to protect the rights, property, or safety of Owanbe Central, our users, or the public.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. We will notify you of any such transfer and any changes to this Privacy Policy that result from it.
International Data Transfers
We are a Nigerian company and your data is primarily stored and processed in Nigeria. Some of our service providers may process data in other countries.
Safeguards for Cross-Border Transfers
Where your data is transferred outside Nigeria, we ensure appropriate safeguards are in place in compliance with NDPR Article 2.11, including Standard Contractual Clauses or adequacy decisions where applicable. We do not transfer data to jurisdictions that do not provide adequate levels of data protection without implementing appropriate supplementary measures.
African Continental Transfers
For our African users, we aim to partner with data processors that have local or regional infrastructure where possible, in support of digital sovereignty goals across the continent. We comply with applicable data protection laws in each African jurisdiction where we operate.
Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, audit, and dispute resolution requirements.
Account Data
Account and profile data is retained for as long as your account is active. After account closure, we retain minimal identifying information for up to 7 years to comply with Nigerian financial recordkeeping requirements.
Transaction Records
Financial transaction records are retained for a minimum of 7 years in compliance with the Companies and Allied Matters Act (CAMA) 2020 and CBN guidelines.
Deletion Requests
You may request deletion of your data at any time (subject to our legal retention obligations) by contacting us at legal@owanbecentral.com. We will respond within 30 days of receiving a verifiable deletion request.
Your Rights
Under the NDPR and other applicable laws, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at legal@owanbecentral.com.
Right of Access
You have the right to obtain a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to have inaccurate or incomplete personal data corrected. You can update much of your data directly through your account settings.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (and no other legal basis exists). This right is subject to our legal retention obligations.
Right to Data Portability
Where processing is based on consent or a contract and carried out by automated means, you have the right to receive your data in a structured, commonly used, and machine-readable format.
Right to Object & Restrict Processing
You have the right to object to processing based on legitimate interests and to restrict processing in certain circumstances (e.g., while the accuracy of data is being contested).
Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the National Information Technology Development Agency (NITDA) — the Nigerian supervisory authority for data protection — at nitda.gov.ng. Users in the EEA may also contact their local Data Protection Authority.
Children's Privacy
The Platform is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately at legal@owanbecentral.com and we will take steps to delete such information as soon as possible.
Security
We implement industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
Technical Measures
We use encryption in transit (TLS/HTTPS) and at rest for sensitive data, access controls, multi-factor authentication for administrative access, regular security audits, and penetration testing.
Data Breach Response
In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify the relevant supervisory authority (NITDA) within 72 hours of becoming aware of it, and will notify affected users without undue delay where required by law.
Your Responsibility
You are responsible for keeping your account password secure and for logging out of shared devices. We will never ask you for your password by email or phone.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. When we make material changes, we will notify you by email or by posting a prominent notice on the Platform at least 14 days before the changes take effect. The "Last Updated" date at the top of this page reflects when this policy was last revised. We encourage you to review this policy periodically.
Contact & Data Protection
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Owanbe Central Ltd Data Protection Office Victoria Island, Lagos, Federal Republic of Nigeria Email: legal@owanbecentral.com We are registered with the National Information Technology Development Agency (NITDA) as a data controller in Nigeria. We aim to respond to all data protection queries within 30 days.
Questions? Contact us