Privacy policy

1. Who this applies to

This policy describes how we process personal data about individuals who use the Services, including guests and customers, venue staff, and administrators who access our web tools. If you use Dash on behalf of a business, that business may also impose its own notices or rules; this policy covers DashPay's processing as the platform provider.

2. Data controller

The data controller responsible for personal data processed through the Services is DashPay Nigeria Ltd. For privacy requests, use the contact details in Section 12.

3. Information we collect

We collect and process categories of information that include:

• Account and profile: phone number, one-time authentication codes or equivalent verification signals, and profile details you provide (such as name) so others can recognise you in payment and tipping flows.
• Transactions and balances: records of payments, tips, and related ledger activity required to operate wallets and venue programmes.
• Support and communications: messages and attachments you submit through help or support channels.
• Device and technical data: push notification tokens when you enable notifications, basic device or app diagnostics we use to maintain reliability and security (for example error reports or usage telemetry you permit), and information needed to deliver proximity or device-assisted features only when you use those features.
• Permissions-based features: camera access to scan QR codes where you choose to use that flow; Bluetooth or related device capabilities for nearby payment features where offered and only as permitted by your device settings.

We do not require access to your contacts, photo library, or precise location for unrelated advertising. Features that use sensitive permissions are invoked when you take an action that needs them.

4. Why we use personal data

We process personal data to:

• create and secure your account, verify your identity at signup and sign-in;
• authorise, execute, record, and reconcile payments, tips, and related settlement as configured;
• operate customer support, investigate reports, and protect users from fraud or abuse;
• send service and security notifications (for example payment confirmations) using the channels you enable;
• meet legal, regulatory, and tax obligations, and respond to lawful requests;
• improve stability, performance, and security of the Services (including diagnostics that do not sell your data to advertisers).

Where Nigerian law applies, we rely on appropriate lawful bases such as performance of a contract with you, compliance with law, your consent where required (for example for certain notifications or optional features), and legitimate interests that are not overridden by your rights (for example fraud prevention and service integrity).

5. Sharing and processors

We share personal data with service providers that help us host infrastructure, deliver messages, analyse reliability, or process payments as part of operating the Services. They process data on our instructions and under contractual safeguards. We may disclose information if required by law, court order, or competent authority, or to protect the rights, safety, or property of DashPay, our users, or the public. We do not sell personal data and we do not share personal data with third parties for their independent advertising purposes as described in typical "tracking" or broker arrangements.

6. International transfers

Our systems or subprocessors may be located outside Nigeria. Where personal data is transferred across borders, we implement appropriate safeguards consistent with applicable law, such as contractual clauses or equivalent measures, and we assess the risks of each transfer.

7. Retention

We keep personal data only as long as needed for the purposes above, including to meet legal, regulatory, accounting, and dispute-resolution requirements. Retention periods depend on the type of data (for example transaction records may be kept longer than transient logs). When data is no longer required, we delete or anonymise it subject to backup and archival practices.

8. Security

We use administrative, technical, and organisational measures designed to protect personal data, including encryption in transit where appropriate, access controls, and secure handling of credentials on devices. No method of transmission or storage is completely secure; we work to reduce risk in line with industry practice.

9. Your rights

Subject to applicable law (including the Nigeria Data Protection Act and related regulations), you may have rights to access, rectify, erase, restrict processing of, or object to certain processing of your personal data, and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with the Nigeria Data Protection Commission or another competent supervisory authority. To exercise rights, contact us using Section 12. We may need to verify your identity before fulfilling a request.

10. Children

The Services are not directed at children below the age at which they may lawfully enter into contracts in their jurisdiction. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us and we will take appropriate steps.

11. Changes

We may change this policy from time to time. We will post the updated version on this page and adjust the effective date. Where required by law, we will notify you through the app or by other appropriate means. Continued use of the Services after an update constitutes acceptance of the revised policy where permitted by law.

12. Contact

Privacy questions or requests: support@dashpay.com.ng. You may also reach us through our Help page. For Apple App Store purposes, this document is the Privacy Policy for the Dash application offered by DashPay Nigeria Ltd.