Policies

Privacy notice

Draft of 5 October 2026

Draft for lawyer review. This text has not yet been approved by a Nigerian or an English solicitor and may change before launch.

This notice explains what personal data Chap Live collects through this website and at our venues, why, how long we keep it, and your rights. It is written to meet the Nigeria Data Protection Act 2023 and the NDPC’s GAID 2025, and the UK GDPR, the Data Protection Act 2018 and PECR. [Controller names, registration numbers, the Data Protection Officer’s name, the ICO registration number and the NDPC registration to be confirmed by counsel.]

The controller is the Chap Live company that runs the venue you book or ask about: our Nigerian company for Lagos and the coming-soon African cities, and our UK company for London. Our Data Protection Officer can be reached at the inbox below.

  • Bookings: your name, email, phone, category preferences, the year of your date of birth (we check you are 18 or over and keep only the year), the confirmations you give, and optional player names.
  • Payments: the payment provider’s reference and the amount. Card details go to Stripe or Paystack and never reach us.
  • Teams enquiries and Campus interest: the contact details and notes you give us.
  • Access needs, only if you choose to tell us: what would help you or your group take part. This can include health information.
  • Waitlists: your email address, the city, and when you consented, confirmed or unsubscribed.
  • At the venue: the participant release, your photo and the filmed session. Spoken answers are not separately recorded, transcribed or sent anywhere.
  • Abuse protection: a one-way hash of your IP address and email address, kept for at most an hour, to limit repeated form submissions.
  • To take and manage your booking, take payment and send booking emails: contract.
  • To check that every player is 18 or over: legal obligation and legitimate interests.
  • To arrange seats and ways to answer from the access needs you tell us about: your explicit consent, given in a separate tick beside the box. Only our operations team can read them, and they are never used for anything else.
  • To film and publish sessions: the contract in the participant release, and our legitimate interest in promoting Chap Live.
  • To answer enquiries and tell you when a city opens: your consent, which you can withdraw at any time from the unsubscribe link in every email.
  • To keep accounts and records of refunds and price changes: legal obligation.

We do not sell your data, and we make no decisions about you by automated means alone.

  • Stripe (London payments) and Paystack (Lagos payments).
  • Supabase, which hosts our database in London, United Kingdom.
  • Resend, which sends our emails.
  • Cloudflare, which checks that forms are sent by people.
  • Our hosting provider, Vercel.

Each acts on our instructions under a processing agreement.

Our database is hosted in the United Kingdom, and some of our processors are based in the United States. Where data about people in Nigeria leaves Nigeria, we rely on an adequacy decision or on contractual safeguards, as sections 41 to 43 of the NDPA require. [Transfer basis per processor to be confirmed by counsel.]

  • Bookings, Teams enquiries, Campus interest and waitlist sign-ups: 24 months after your last session or submission. After that the record is anonymised: your name, email, phone and notes are removed, and only figures we need for accounts remain.
  • Our audit log of price changes, refunds, overrides, erasures and setting changes: 6 years.
  • Access needs: 30 days after the session they were for (30 days after a Teams enquiry is sent), then deleted.
  • Rate-limit hashes: no more than an hour.

You can ask us to erase your data sooner. We will, except where the law requires us to keep a record.

You can ask to see, correct, port or erase your data, object to how we use it, or withdraw consent. Write to the inbox below; we acknowledge within 30 days.

You can also complain to the Nigeria Data Protection Commission (ndpc.gov.ng) or, in the UK, the Information Commissioner’s Office (ico.org.uk). We would rather hear from you first.

We use one essential cookie to remember which city you are browsing, and essential storage to remember your cookie choice. With your consent we would also use cookieless analytics to learn which pages help people book. You can accept or reject this when you first visit, and change your mind from “Cookie choices” at the foot of every page.

Chap Live is for people aged 18 and over. We do not knowingly collect data about anyone younger.

Questions about this page, or a request about your data, go to our 24/7 inbox: inbox+REPLACE_BEFORE_LAUNCH@chaplive.example

WhatsApp Lagos

Before the lights go up

We use essential storage to remember your city and this choice. With your consent we would also use cookieless analytics to learn which pages help people book. You can accept or reject it; the site works either way, and you can change your mind from “Cookie choices” at the foot of every page.

Privacy policy