Privacy notice

1. Who is responsible

AcePass is a ticketing service run by Ace Engines Technologies ("we", "us"). Contact: tickets@aceengines.net.

We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA). For questions or requests, email us.

2. What we collect

When you buy: your name, email, phone number if you give it, the names on each ticket, and what you bought.

From payments: a payment reference and status from Paystack. We do not receive your full card number or PIN.

When you sign in: your email and a record of the session.

For security: your IP address, device type and the times you used the site, kept to stop fraud and abuse.

On your phone: your tickets, theme and city are saved in your browser so they work offline. You can clear them in your browser settings.

3. Why we use it

To sell you tickets, send them to you, let you in at the door and handle refunds (to perform our contract with you).

To keep the service safe and to meet tax and accounting duties (legitimate interest and legal obligation).

We do not sell your data. We send marketing only if you say yes.

4. Who we share it with

The organizer of the event you bought for: your name, email, phone if given, and ticket names, so they can run the event and contact you about it. Organizers agree to use this only for that event.

Service providers who work for us: Paystack (payments), our email provider, and our hosting and database providers. Some of them process data outside Nigeria; we use providers with safeguards the NDPA accepts.

Authorities, when the law requires it.

5. How long we keep it

Orders and payment records: 6 years, for tax and accounting. Security logs: up to 90 days. Sign-in codes: until used or expired.

6. Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask to move it. Some records we must keep by law.

Email us and we will answer within 30 days. If you are not satisfied, you can complain to the Nigeria Data Protection Commission.