Privacy Policy
Last Updated: 12/3/2025
1. Introduction
Alabastar ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at https://alabastar.ng (the "Platform").
This Privacy Policy complies with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023. By using our Platform, you consent to the data practices described in this policy.
2. Information We Collect
Personal Information
When you create an account or use our services, we may collect:
- Name, email address, and phone number
- Profile information and preferences
- Payment information (processed securely through third-party gateways)
- Location data for service matching
- Government-issued identification (for provider verification)
- Business registration documents (for service providers)
Usage Data
- IP address and device information
- Browser type and version
- Pages visited and time spent on the Platform
- Search queries and service bookings
- Interaction data with providers and customers
Content Data
- Reviews and ratings
- Messages between users and providers
- Uploaded photos and documents
- Service listings and descriptions
3. How We Use Your Information
We use your personal data for the following purposes:
- To provide, operate, and maintain our Platform
- To facilitate bookings and transactions between users and providers
- To verify provider identities and credentials
- To process payments and manage billing
- To send service-related notifications and updates
- To respond to your inquiries and provide customer support
- To improve our services and user experience
- To detect and prevent fraud, abuse, and security threats
- To comply with legal obligations and enforce our terms
- To send marketing communications (with your consent)
4. Data Sharing and Disclosure
Service Providers
We may share your information with third-party service providers who assist us in operating the Platform, such as payment processors, cloud hosting services, and analytics providers. These parties are contractually bound to protect your data.
Users and Providers
When you book a service, relevant information (such as your name, contact details, and service requirements) is shared with the service provider to facilitate the booking. Similarly, provider information is visible to customers on their profiles.
Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Secure payment processing through PCI-DSS compliant gateways
- Regular security assessments and vulnerability testing
- Access controls and authentication mechanisms
- Employee training on data protection
However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Your Rights (Under NDPR and NDPA)
You have the following rights regarding your personal data:
- Right to Access: Request a copy of your personal data we hold
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data (subject to legal obligations)
- Right to Restriction: Request limitation of processing in certain circumstances
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing of your data for marketing purposes
- Right to Withdraw Consent: Withdraw consent where processing is based on consent
- Right to Lodge Complaints: File complaints with the Nigeria Data Protection Commission
To exercise these rights, please contact us at privacy@alabastar.ng.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Account data is typically retained for the duration of your account and for a reasonable period thereafter as required by law.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Maintain your session and authenticate your account
- Remember your preferences and settings
- Analyze Platform usage and improve performance
- Provide personalized content and advertisements
You can control cookies through your browser settings. However, disabling cookies may limit some Platform functionality.
9. Children's Privacy
Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete such information promptly.
10. International Data Transfers
Your data may be transferred to and processed in countries outside Nigeria. When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Nigeria Data Protection Commission.
11. Updates to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the Platform after changes become effective constitutes acceptance of the revised policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer:
You also have the right to lodge a complaint with the Nigeria Data Protection Commission if you believe your data protection rights have been violated.