ITALEWA

Privacy policy

Effective 17 September 2026. ITALEWA (italewa.com) is operated by 7Hundred Percent / Sevenhundredpercent. This policy explains how we handle personal data under the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Commission (NDPC). Italewa is used by guests and creatives at home, abroad, and in the diaspora. The NDPA is the law we follow.

Who is responsible

Sevenhundredpercent is the data controller for ITALEWA. Registered office: 1, Ndawuse, Opp. Jostos Place Hotel, Off Norbert E. Offor Street, Cadastral Zone B09, Kado Kuchi District, Abuja, FCT, Nigeria. Privacy questions: [email protected]. Support: [email protected].

NDPA

We follow the NDPA: lawful basis, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability. Face search is treated as sensitive personal data and runs only after your consent. Read the NDPA page and the face search notice.

What we collect

  • Creatives: name, email, password hash, brand or studio name, phone, country, city, optional Instagram and website, event information, package or quote records, and Event Center highlight consent.
  • Guests: optional camera access for a face search, a consent log (time and policy version), and an email if you buy a premium edit.
  • Payments: amount, status, and Paystack reference. We do not store full card numbers.
  • Technical: essential session cookies so you stay signed in. See the cookie notice.

Lawful basis

We process account and package data to perform a contract with you. We process face search on consent. We keep a public Event Center highlight after the gallery window ends only with the creative's tick at signup. We keep security and fraud logs as a legitimate interest that does not override your rights. You may withdraw consent for face search at any time by not using the camera flow.

Photos and face search

Event photos are uploaded by the creative who owns that gallery. Public pages show watermarked previews. Originals stay private until a match or a paid download path. Search selfies are used only to find photos in that event. They are not kept as a biometric profile, not sold, and not used for ads.

Event Center highlights

After a gallery window ends, Italewa may keep a public Event Center highlight of that night: the cover and a veiled teaser with faces blurred. Guests cannot reopen the gallery, run face search, download originals, or save photos from an ended night. That highlight is a stated purpose of the service. Ended galleries are not reopened.

Who else sees data

Hosting and database run on Supabase. Checkout runs on Paystack. Those processors see only what they need to provide the service. We do not sell personal data.

Where data lives

Some infrastructure may store or process data outside Nigeria. When that happens we rely on contractual safeguards with those providers, as the NDPA allows for transfers with adequate protection.

How long we keep it

Account and event records stay while the account is open and for a reasonable period after, for disputes and tax. Gallery access follows the package (for example 7 or 30 days, or a custom quote). When that window ends, the open gallery closes; a highlight may remain on the Event Center. Consent logs are kept so we can show what you agreed to. You can ask us to delete photos or an account.

Your rights under the NDPA

You may request access, correction, deletion, restriction, objection, or a copy of your data. You may withdraw face-search consent. Email [email protected]. If we do not resolve it, you may complain to the NDPC at https://ndpc.gov.ng.

Children

Italewa is built for events, not for creating child accounts. A parent or guardian should use face search for a child. Contact us to delete a child's data.

Security

We use HTTPS, access controls, and row-level rules on event data. No online service is perfectly secure. Tell us at [email protected] if you think something went wrong.

Questions: [email protected] · Contact us.