Privacy Policy
Last updated: October 14, 2026
1. Overview & Ownership
This Privacy Policy describes how Itmed Interactive Ltd ("we", "us", "our"), trading and operating under the Gada Pass infrastructure, collects, uses, and protects your personal data when you use our website, mobile application, and event ticketing services.
We are committed to preserving your privacy in accordance with the Nigeria Data Protection Act (NDPA) 2023 and international data protection standards.
2. Information We Collect
We collect personal data that you provide directly, as well as data gathered automatically during your platform usage:
- Account Information: Full name, email address, phone number, and password credentials when registering.
- Event & Organizer Data: Event names, descriptions, host organization details, payout bank account information, and tax identification numbers.
- Transaction & Ticket Data: Order history, ticket quantities, and purchase metadata. Note: Payment card details and banking credentials are processed directly by our PCI-DSS compliant payment processor (Paystack) and are never stored on Gada servers.
- Gate & Attendance Data: Ticket check-in timestamps, agent assignments, and gate verification logs.
- Technical Data: IP address, device type, browser specifications, and usage cookies.
3. Lawful Basis & Use of Data
We process your personal data under the following legal frameworks:
- Contractual Performance: To issue electronic tickets, facilitate gate scanning, process payouts, and manage user accounts.
- Organizer Sharing: When you register for or purchase a ticket to an event, your name, email, and ticket status are shared with the designated Event Organizer solely for event logistics and gate verification.
- Legal Compliance: To maintain financial transaction logs for tax and regulatory auditing purposes.
4. Data Sharing & Third-Party Processors
We do not sell your personal data to advertisers. We share data strictly with operational partners bound by confidentiality agreements:
- Payment Infrastructure: Paystack (PCI-DSS compliant payment processing).
- Email & Messaging: Transactional email service providers for delivery of PDF passes and tickets.
- Event Gate Agents: Designated bouncers or scanners added by the Event Organizer receive access to ticket verification lists.
5. Your Data Rights
Under the NDPA, you possess the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete records.
- Request erasure of your account and personal data (subject to legal retention mandates).
- Withdraw consent for marketing communications at any time.
6. Contact Us
For privacy inquiries, data deletion requests, or data protection concerns, contact us at:
Itmed Interactive Ltd
Trading as Gada Pass
Abuja, Federal Capital Territory, Nigeria
Email: privacy@gada.africa