Privacy Policy

Last updated: July 5, 2026

Duffle.ng ("we", "us") respects your privacy. This policy explains what personal data we collect, why we collect it, and how you can exercise your rights.

1. Data we collect

Account data: name, email, phone (optional), profile details, and authentication tokens.
Transaction data: purchases, payouts, wallet ledger entries, and KYC documents when you withdraw funds.
Usage data: pages visited, device type, IP address, and analytics events to improve the product.
Content you publish: listings, messages, reviews, and media uploads.

2. How we use your data

Provide and secure the platform (authentication, fraud prevention).
Process payments and fulfil orders between buyers and sellers.
Send transactional emails (receipts, password resets, account alerts).
Improve features and personalise your experience where you opt in.
Comply with legal obligations, including anti-money-laundering requirements.

3. Sharing with third parties

We share data only when necessary:

Payment processors (Paystack, Stripe) to complete transactions.
Email and infrastructure providers to deliver the service.
Analytics tools to understand product usage (aggregated where possible).
Law enforcement when required by valid legal process.

We do not sell your personal data.

4. Shared ecosystem (Duffle and Tickethub.ng)

Duffle.ng and Tickethub.ng are operated by the same legal entity. When you use both platforms with the same verified email, we link your accounts behind the scenes using a shared identity reference. This is a silent connection: each site keeps its own login screen and branding.

What we share: account status (active, suspended, or banned), your verification level (not raw KYC documents), your chosen public handle, and currency display preference.
What we do not share: passwords, raw NIN, selfies, proof-of-address files, or payment card details between platforms. KYC documents stay on the platform that collected them.
Why: so you verify once, stay protected everywhere, and see consistent account security across both products.

Account-level notifications (security alerts, verification updates) follow shared preferences so you are not emailed twice for the same event. Product notifications (event updates on Tickethub.ng, marketplace activity on Duffle) stay on each platform.

Deleting your account on one platform does not automatically delete the other. Contact hello@duffle.ng to request removal across both services.

5. Data retention

We retain account and transaction records for as long as your account is active and as required for tax, accounting, and legal purposes. You may request deletion subject to obligations we cannot waive (e.g. completed transaction records).

6. Security

We use industry-standard measures including encrypted connections (HTTPS), hashed passwords, and access controls. No system is 100% secure, please use a strong, unique password and report suspicious activity promptly.

7. Your rights

Depending on applicable law (including Nigeria Data Protection Regulation), you may:

Access or export your personal data.
Correct inaccurate information in your account settings.
Request deletion of your account.
Object to certain processing or withdraw consent for marketing.

8. Cookies

We use essential cookies for authentication and session management. Analytics cookies may be used to improve the product. You can control cookies through your browser settings.

9. Children

Duffle.ng is not intended for users under 18. We do not knowingly collect data from children.

10. Changes to this policy

We may update this Privacy Policy periodically. The "Last updated" date at the top reflects the latest revision. Significant changes will be communicated via email or in-app notice.