Privacy Policy

SkillSeeds Enterprise Limited ("we") runs Bookjara. We follow the Nigeria Data Protection Act 2023 (NDPA).

For business owners and staff, we decide how the data is used (we are the data controller). For clients who book with a business, the business decides why it collects your details and we handle them for the business (we are the data processor).

Owners and staff:

• name, email address and a securely hashed password
• business details, services, prices, branches and opening hours
• your role and activity in the dashboard

Clients who book:

• name, email address and phone number
• the booking details (service, date, time, notes)
• deposit payment status. Card details go straight to Bachs and never reach us

• to run the service: show booking pages, take and manage bookings, and send confirmations and reminders
• to take and refund deposits through Bachs
• to keep accounts secure and prevent abuse
• to contact you about your account or important changes
• to improve the product, using general usage information

We do not sell personal data. We use trusted providers to run the service, and they only process data for us:

• MongoDB Atlas, for database hosting
• Vercel, for hosting the website and app
• Bachs, for payments and refunds
• our email provider, for booking and account emails

A business can see the details of the clients who book with it. We may also share data where the law requires it. Some of these providers store data outside Nigeria. Where that happens we rely on appropriate safeguards as the NDPA requires.

We keep data while an account is active and for as long as needed for bookings, payment records and legal obligations. When a business closes its account, we delete or anonymise its data after a reasonable period, unless we must keep some of it by law.

Under the NDPA you can ask to:

• see the personal data we hold about you
• correct data that is wrong
• delete your data, or restrict how it is used
• object to certain uses, or receive your data in a portable format
• withdraw consent where we rely on it

If you are a client, you can also ask the business you booked with. You can complain to the Nigeria Data Protection Commission if you think your data has been mishandled.

We protect data with encrypted connections, hashed passwords and access controls. No system is perfectly secure, and if a breach affects you we will tell you and the regulator as the law requires.

We use only the cookies needed to keep you signed in and the service working. We do not use advertising cookies.

If we change this policy in a way that matters, we will tell you in the dashboard or by email. The date at the top shows the latest version.