Privacy Policy

Last updated: August 2026

1. Introduction

This Privacy Policy explains how Orgit, operated by Erobridge (“Orgit”, “we”, “us”, or “our”), collects, uses, stores, and protects personal data when you use orgit.ng and related services. We are committed to handling your information lawfully, fairly, and transparently, in line with the Nigeria Data Protection Act, 2023 (NDPA).

By using Orgit, you acknowledge that you have read and understood this policy.

2. What we mean by personal data

“Personal data” means any information that can identify you, on its own or together with other information — such as your name, email address, phone number, or account details. Information that has been fully anonymised is not treated as personal data.

3. Information we collect

Information you give us when you create an account or use Orgit:

Full name
Email address
Phone number
Password (stored securely by our authentication provider, never in plain text)
Profile details you choose to add (for Vendors: business name, category, service details, pricing, portfolio images, location)
Event details you enter (event type, date, budget, location, guest count)
Messages, enquiries, quotes, and support or dispute requests you submit

Information collected automatically when you use the platform:

Device and browser information
IP address, for security and general analytics
Usage information — which features you use and how you interact with the platform

4. How we use your information

We process personal data to:

create and manage your account and verify who you are;
operate the marketplace — matching Customers with Vendors, enabling enquiries, quotes, and bookings;
send you service messages about your account, enquiries, and bookings by email, SMS, WhatsApp, or in-app notification;
provide customer support and handle disputes;
keep the platform secure and detect fraud or abuse;
improve our features and understand how the platform is used; and
meet our legal and regulatory obligations.

5. Lawful basis for processing

Under the NDPA, we rely on one or more of the following bases:

Contract — to provide the service you have signed up for;
Legitimate interest — to operate, secure, and improve the platform, where this does not override your rights;
Consent — for optional things like marketing messages, which you can withdraw at any time; and
Legal obligation — where the law requires us to process or retain data.

6. Who we share information with

We do not sell your personal data. We share it only where necessary:

Between Customers and Vendors — when you send an enquiry or quote request, the relevant details are shared with the other party so they can respond. Phone numbers are not shown publicly on Orgit.
Service providers who help us run Orgit, under contracts that require them to protect your data — including our hosting and infrastructure (Vercel), our database and authentication provider (Supabase), and our email provider (Resend).
Legal and safety — where we are required by law, or to protect the rights, safety, and integrity of Orgit, our users, or the public.

7. How we protect your data

We use technical and organisational safeguards including encryption in transit, role-based access controls, and restricted access to personal data. No online system can be guaranteed completely secure, but we work to maintain a high standard of protection and will act promptly if an incident occurs.

8. How long we keep your data

We keep personal data only for as long as needed to provide the service and to meet legal or operational requirements. When you close your account, we remove or anonymise your personal data from active systems, except where we are required to retain certain records by law.

9. Your rights

Under the NDPA, you have the right to:

access the personal data we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to delete your data, where legally permissible;
object to or restrict certain processing, including marketing;
withdraw consent where processing is based on consent; and
lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, contact us at info@orgit.ng. We may need to verify your identity before responding.

10. Marketing

We only send promotional messages where you have agreed to receive them. You can opt out at any time using the unsubscribe option in the message or by contacting us.

11. Children

Orgit is not intended for anyone under 18, and we do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will remove it.

12. Third-party links

Orgit may link to external websites we do not control. We are not responsible for their privacy practices, and we encourage you to review their policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. Where changes are significant, we will take reasonable steps to notify you. Continued use of Orgit after an update means you accept the revised policy.

14. Contact

For any question or request about your data or this policy, contact us at info@orgit.ng. You may also contact the Nigeria Data Protection Commission at info@ndpc.gov.ng.