Legal
Privacy Policy
In short: we collect what we need to run BookPro safely: to sign you in, connect you with pros, hold payments in escrow, pay pros out and keep people safe. We do not sell your data. Our website uses no cookies or advertising trackers; it counts visits with Cloudflare Web Analytics, which does not use cookies or follow you across sites. You can see, download, correct or delete your data at any time.
1. Who we are
BookPro (“BookPro”, “we”, “us”) runs the BookPro mobile app and the website bookpro.ng, a marketplace where customers book independent service professionals (“pros”) and pay safely through escrow. For the personal data described here, BookPro is the data controller under the Nigeria Data Protection Act 2023 (“NDPA”).
Legal entity and registered address: to be confirmed. Contact for privacy matters: support@bookpro.ng.
2. Data we collect
Information you give us
- Account details: your phone number (we sign you in with a one-time SMS code), first and last name, email address and, if you add one, a profile photo.
- Area and location: the city and area you choose, and the address and landmark you add to a booking. We collect a precise map location only if you choose to drop a pin on a booking.
- Chat content: messages, photos and offers you exchange with customers or pros in the app.
- Photos: your profile photo, a pro's portfolio photos, and photos you add as evidence in a dispute.
- Pro profile: if you become a pro, your display name, bio, services and starting prices, service areas, years of experience, availability and, if you choose to give it, your gender.
- Payment details: your wallet balance and history, top-ups, bookings, escrow payments, refunds and withdrawals. For each top-up, the bank reports the payer's name and the last 4 digits of the paying account, which we keep to match the payment to you.
- Payout details: the bank and account number you withdraw to, and the account name your bank returns when we verify it.
- BVN, only if you opt in: if you choose to get a permanent wallet account number, you give your Bank Verification Number so our banking partner can create the account. We pass it to that partner and do not store it; we keep only its last 4 digits and the time you gave consent.
- Reviews, reports and support: ratings and reviews, reports you make, and messages you send to our support team.
Information we collect automatically
- Security data: your transaction PIN (stored only as a one-way hash, never readable), device and session details, IP address, and logs of sign-ins and money actions.
- Safety signals: automated checks that hide bank account numbers in chat and flag requests to pay outside BookPro.
We do not access your contacts or your SMS inbox.
3. How we use it and why
The NDPA requires a lawful basis for each use of your data. Ours are:
| What we do | Lawful basis |
|---|---|
| Create and secure your account; sign you in by SMS code | Contract |
| Show pros to customers; run chat, offers, bookings, escrow, confirmations, cancellations and refunds | Contract |
| Credit wallet top-ups, verify bank accounts and send withdrawals | Contract |
| Review pro profiles before they can take bookings | Contract; legitimate interests (a safe marketplace) |
| Resolve disputes using the chat, photos and booking history | Contract; legitimate interests |
| Prevent fraud, money laundering and off-app payment scams; enforce limits and keep security logs | Legal obligation; legitimate interests |
| Keep financial records | Legal obligation |
| Create a permanent account number with your BVN | Consent |
| Store your data with our hosting provider outside Nigeria | Consent; contract |
| Send you news and offers | Consent (off unless you opt in) |
Where we rely on consent, you can withdraw it at any time in the app or by emailing us; this does not affect what we did before. Automated checks only flag activity: a person at BookPro reviews before any action is taken against an account, and no decision with legal or similar effect is made about you by automated means alone.
4. Who we share it with
We never sell your personal data. We share it only as needed to run BookPro:
- The other side of your booking: a pro sees your name, the booking details and address, and your chat; a customer sees a pro's public profile, reviews and chat.
- Service providers (processors) who act on our instructions under contract:
- Cloudflare, Inc.: hosting, data storage and security for the app and this website.
- Volboo and 9 Payment Service Bank (9PSB): the virtual bank account numbers used to top up your wallet, and confirming those payments.
- Paystack: verifying payout bank accounts and sending withdrawals to your bank.
- Termii: sending sign-in codes by SMS or voice call.
- Authorities: regulators, law enforcement or courts, when the law requires it or to protect someone's safety.
- Professional advisers, such as lawyers and auditors, under a duty of confidentiality.
- A future owner of BookPro, if the business is sold or merged, under this policy.
5. Data stored outside Nigeria
Our hosting provider, Cloudflare, stores and processes data in data centres outside Nigeria. We ask for your consent to this when you sign up and rely on contractual safeguards with Cloudflare, as Part VIII of the NDPA allows. You can ask us for details of these safeguards.
6. How long we keep it
- While your account is open: we keep your data for as long as you use BookPro.
- Financial records (wallet history, bookings, top-ups, escrow, refunds and withdrawals): 6 years after the transaction, to meet tax, accounting and anti-money-laundering obligations. After you delete your account, these records are linked only to an anonymous ID.
- Chats linked to a booking: 180 days after you delete your account, so any dispute can still be resolved. Chats without a booking are deleted with your account.
- Fraud prevention: after deletion we keep a one-way fingerprint (hash) of your phone number, so we can link repeat fraud without keeping the number itself.
- Security logs are kept only as long as needed to investigate incidents.
7. How we protect it
We use encryption in transit, strict access controls, a transaction PIN for every money action, extra holds on withdrawals after a new device, PIN reset or bank change, and an append-only payment ledger that is checked every day. If a personal data breach puts your rights at risk, we will tell the Nigeria Data Protection Commission and, where required, you, as the NDPA requires.
8. Your rights
Under the NDPA you have the right to:
- be told how your data is used (this policy);
- get a copy of your data: the app can export it for you in a portable format;
- correct data that is wrong or incomplete;
- have your data deleted (see Delete your account);
- restrict or object to some uses of your data;
- withdraw consent at any time;
- not be subject to decisions based solely on automated processing;
- complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
To use any of these rights, use the settings in the app or email support@bookpro.ng from the email address on your account. We may need to confirm it is you, for example with a code sent to your phone. We respond without undue delay and within the time the law sets.
9. Children
BookPro is for adults aged 18 or over. We do not knowingly collect data from children. If you believe a child has an account, contact us and we will close it.
10. This website
bookpro.ng sets no cookies and loads no advertising trackers. The only script not served by us is Cloudflare Web Analytics, which counts page views and measures load speed without cookies or any personal profile of you. Like any website, our host Cloudflare also processes basic request data (such as your IP address and browser type) to deliver the pages and protect them from attacks.
11. Changes to this policy
If we make important changes, we will tell you in the app before they take effect and update the date at the top of this page.
12. Contact us
Questions or requests: support@bookpro.ng.
Postal address: to be confirmed.