Privacy Policy

1. Categories of Personal Data Collected
1.1 Information Provided Directly by You:

We may collect and process the following types of personal data that you voluntarily provide:

1. Account Registration Data: Your full name, email address, phone number, date of birth, profile image, password.
2. User Profile Data: Biographical details, interests, location, professional information, and other user-submitted content.
3. Activity Participation Data: Event registration and hosting information, reviews, RSVPs, chat messages, bookings, and other engagement metrics.
4. Transactional Data: Payment information including billing address, payment method, transaction reference, and history of purchases and bookings.
5. Verification Data: In cases where identity verification is required (e.g., for hosts or organizers), we may request a government-issued ID or conduct facial recognition processes, subject to explicit consent.

1.2 Information Collected Automatically:

Upon your interaction with the Services, we may collect the following categories of information automatically through cookies, web beacons, and similar technologies:

1. Device Information: IP address, browser type and version, device identifiers, operating system, and platform.
2. Usage Data: Dates and times of platform access, page views, navigation paths, interactions with platform content, and clickstream data.
3. Location Data: Subject to your prior consent, we may access your geolocation through GPS and other device-based technologies.

1.3 Information from Third Parties:

We may receive information about you from third parties, including:

1. Social Media Platforms: If you choose to link your account with social media platforms, we may receive personal data from those platforms.
2. Payment Processors: We may receive transaction data from third-party payment processors to facilitate your purchases.
3. Analytics Providers: We may use third-party analytics services to collect and analyze usage data.
4. Marketing Partners: We may receive information from partners to improve our marketing efforts.
5. Publicly Available Sources: We may collect information from publicly available sources to enhance our services.

2. Lawful Basis for Processing

Our legal justification for processing your personal data is determined by the nature and context of our engagement with you:

1. Consent (Article 6(1)(a) GDPR): We process certain data, including marketing preferences, cookies, and optional location data, only with your affirmative and informed consent.
2. Contractual Necessity (Article 6(1)(b) GDPR): We process personal data necessary to fulfill our contractual obligations, including account maintenance and event facilitation.
3. Legal Obligation (Article 6(1)(c) GDPR): We process data when legally mandated by regulatory frameworks applicable to our operations.
4. Legitimate Interest (Article 6(1)(f) GDPR): We may process data to ensure service integrity, prevent fraud, improve user experience, and facilitate product development, provided these interests do not override your fundamental rights.

3. Purpose of Data Processing

We process your personal data for the following purposes:

1. Account Management: To create, maintain, and manage your account, including authentication and security.
2. Service Delivery: Enable users to join or host activities and interact within communities;
3. Payment processing: Facilitate secure and efficient payment processing;
4. Communication: To send you important updates, notifications, and customer support communications.
5. Personalization: To tailor the platform experience to your preferences and interests.
6. Identification: Verify user identities for trust and safety purposes;
7. Analytics: To analyze usage patterns, improve our services, and conduct research and development.
8. Marketing: To send you promotional materials, newsletters, and other marketing communications, subject to your consent.
9. Compliance: To comply with legal obligations, resolve disputes, and enforce our terms and policies.
10. Fraud Prevention: To detect, prevent, and mitigate fraudulent activities and security breaches.
11. User Engagement: To facilitate interactions between users, including messaging, reviews, and feedback.
12. Research and Development: To conduct research and development activities to enhance our products and services.
13. Platform Compliance: Enforce our Terms of Service and protect the security and integrity of our platform;
14. Legal Compliance: To comply with applicable laws, regulations, and legal requests.

4. Data Disclosure and Sharing

We do not sell your personal data. However, we may disclose or share your data in the following circumstances:

1. Third-Party Processors: Vendors or service providers who process data on our behalf (e.g., hosting, customer support, analytics, payment processors), all of whom are contractually obligated to safeguard your data.
2. Other Users: Profile and activity data may be visible to other users in accordance with your privacy settings
3. Activity Hosts: When you join or express interest in an activity, relevant data is shared with the activity organizer.
4. Legal or Regulatory Authorities: We may disclose your data to public authorities if required to comply with applicable legal obligations or protect the rights, property, or safety of Cliqbox or its users.
5. Business Transitions: In the context of a merger, acquisition, restructuring, or asset transfer, your data may be transferred as part of the transaction.

5. International Transfers

As a global platform, your data may be processed and stored in jurisdictions outside your country of residence. Where data is transferred internationally:

1. We ensure that such transfers comply with applicable legal requirements.
2. For data transfers to countries outside the EEA, we implement Standard Contractual Clauses (SCCs) or rely on adequacy decisions where applicable.
3. We maintain technical and organizational safeguards to ensure data security and privacy integrity.

6. Cookies and Tracking Technologies

We use cookies, pixels, SDKs, and other tracking technologies to personalize content, deliver relevant ads, analyze user behavior, and improve service delivery. You can manage cookie preferences via your browser or the in-app privacy settings. See our [Cookie Policy] for further details.

7. Your Data Rights

Depending on your jurisdiction, you may exercise the following rights:

Under the GDPR (EU/EEA/UK Residents):

1. Right to Access: Request access to your personal data and obtain a copy of it.
2. Right to Rectification: Request correction of inaccurate or incomplete data.
3. Right to Erasure: Request deletion of your personal data under certain conditions.
4. Right to Restrict Processing: Request restriction of processing under certain conditions.
5. Right to Data Portability: Request transfer of your personal data in a structured, commonly used, and machine-readable format.
6. Right to Object: Object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
7. Right to Lodge a Complaint with a Data Protection Authority

Under the CCPA (California Residents):

1. Right to Know: Request disclosure of the categories and specific pieces of personal data we collect about you.
2. Right to Delete: Request deletion of your personal data, subject to certain exceptions.
3. Right to Opt-Out: Opt-out of the sale of your personal data.
4. Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA rights.

Under Africa Regulations (NDPR, POPIA):

1. Right to Access
2. Right to correction
3. Right to deletion
4. Right to data Portability

To exercise any of these rights, please submit a request to privacy@cliqbox.co with sufficient identification and a description of your request.

8. Data Retention and Storage

We retain personal data for only as long as is necessary to:

1. Deliver the Services to you;
2. Fulfill contractual and legal obligations;
3. Protect against fraud and abuse;
4. Comply with audit and accounting requirements.

Retention periods vary based on the type of data and applicable legal requirements. Where retention is no longer justified, data will be securely deleted or anonymized.

9. Data Security and Safeguards

We implement a range of administrative, technical, and physical security measures to protect your personal data, including:

1. Encryption in transit and at rest (where applicable);
2. Multi-factor authentication and secure credential storage;
3. Role-based access controls;
4. Regular penetration testing and vulnerability scanning;
5. Incident response protocols.

While we endeavor to ensure maximum security, no system can be guaranteed to be 100% secure. Users are advised to safeguard their login credentials and report suspicious activity immediately.

10. Children's Data Protection (COPPA Compliance)

Cliqbox does not knowingly collect or solicit personal information from children under the age of 13 (or applicable age threshold in your jurisdiction). If we become aware that we have inadvertently collected personal information from a child without verifiable parental consent, we will take appropriate steps to delete such data.

11. Changes to This Policy

We reserve the right to amend this Privacy Policy at our discretion and at any time. When changes are made, we will notify you via email and/or in-app notifications. Continued use of the Services following such changes constitutes your acknowledgment and acceptance of the updated terms.

12. Contact Information

If you have any questions or concerns regarding this Privacy Policy or the handling of your personal data, please contact us using the following details:

1. 📧 Email: hello@cliqbox.co