Who we are
Beekomm Technologies Limited (RC 7216597) is the data controller for personal data collected through beekomm.com, which means we decide how and why it’s used.
This policy explains what we collect, why, who we share it with and the rights you have under the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Commission’s General Application and Implementation Directive 2025 (GAID).
- Data controller
- Beekomm Technologies Limited, RC 7216597
- Registered address
- 1A Timothy Babatunde Street, Labak Estate, Old Abeokuta, Oko-Oba Road, Abule Egba, Agege, Lagos 102212, Nigeria
- Data protection officer
- info@beekomm.com
What we collect
Information you give us
- Booking details: your name, email address, the expert and session length you chose, the time you picked and what you’d like to discuss.
- Messages: anything you send us by email or through a form, with your contact details.
- Company details: if you book for a business, its name and your role, if you tell us.
Payment information
You enter your payment details on Bachs’ secure checkout, not on our site. Bachs collects your name, email address, phone number, billing address and card or bank details to process the payment. We receive a confirmation with your name, email address, the amount, currency, date and a payment reference. We never receive your full card number or security code.
Information collected automatically
- Technical data: your IP address, browser and device type, and the pages you visit and when. Cloudflare and our server record this to deliver the site and protect it from attacks.
- Cookies: a small number of essential cookies, explained in section 9.
We don’t ask for sensitive personal data, such as information about your health, religion or political views. Please don’t include it in your booking notes.
How we use it
The NDPA requires a lawful basis for each use of personal data. These are ours:
| Purpose | Data used | Lawful basis |
|---|---|---|
Book, confirm and run your session, send reminders and handle changes or refunds | Booking details, payment confirmation | Performing our contract with you |
Take payment and prevent fraud | Payment information, technical data | Performing our contract, and our legitimate interest in preventing fraud |
Reply to your messages | Messages | Our legitimate interest in answering you, or steps you ask for before a contract |
Keep accounting and tax records | Payment confirmation, booking details | Legal obligation |
Keep the site working and secure | Technical data, essential cookies | Our legitimate interest in running a secure website |
Send news and offers | Name, email address | Your consent, which you can withdraw at any time |
We don’t make decisions about you by automated processing alone, and we don’t build profiles of you for advertising.
Who we share it with
We share personal data only with providers who help us run the service, and only as much as each one needs. Each works under a written agreement that requires it to protect the data and use it only on our instructions.
| Provider | What they do for us | Where data may be held |
|---|---|---|
Cloudflare, Inc. | Hosts the website (Cloudflare Workers) and provides our domain’s DNS, delivery and security | Cloudflare’s global network, including the United States and the EU |
Bachs Technologies Limited | Processes payments | Nigeria, and the countries of its banking and card partners |
Zoho Corporation | Runs our booking calendar (Zoho Bookings), hosts session video calls (Zoho Meeting) and sends confirmations and reminders | United States (Zoho’s US data centre) |
netcup GmbH | Hosts our private server in Vienna, which runs our forms (Formbricks) and automations (n8n) | Austria (EU) |
Backblaze, Inc. | Stores encrypted backups of our server | The Netherlands (EU) |
Brevo (Sendinblue SAS) | Sends some of our emails, such as form confirmations | France (EU) |
If a session ever uses a different video-call service, your confirmation email will name it.
We may also share data with our professional advisers, such as lawyers and accountants; with a buyer if our business is sold; or with authorities when the law requires it. We never sell personal data.
Transfers outside Nigeria
Several of our providers store or process data outside Nigeria, including in the European Union and the United States. Before data leaves Nigeria, we check that it will be protected to the standard sections 41 to 43 of the NDPA require. We rely on:
- the data protection laws that apply to our providers, such as the EU’s General Data Protection Regulation
- written agreements with each provider, including data processing terms
- the transfer being needed to carry out your booking
- your consent, which you give when you book a session
You can ask us for details of the safeguards for any provider.
How long we keep it
| Data | How long we keep it |
|---|---|
Booking and payment records | 6 years after the session, as company and tax law requires |
Messages that don’t lead to a booking | 2 years after our last contact |
Marketing preferences | Until you unsubscribe; after that, only a record that you opted out |
Server and security logs | Up to 90 days |
Backups | Removed as backups rotate, normally within 90 days of deletion from our live systems |
When we no longer need data, we delete it or make it anonymous.
How we protect it
- Encrypted connections (HTTPS) across the site and booking flow
- Access limited to the people who need it, with two-factor sign-in on the accounts that hold customer data
- A firewall and intrusion protection on our server, with regular updates
- Encrypted, off-site backups
No system is perfectly secure. If a breach puts your data at risk, we’ll report it to the Nigeria Data Protection Commission within 72 hours of becoming aware of it. If it’s likely to put you at high risk, we’ll tell you promptly and explain the steps you can take.
Your rights
Under the NDPA, you can:
- get a copy of the personal data we hold about you
- have inaccurate data corrected
- have your data deleted when we no longer need it or have no lawful basis to keep it
- restrict how we use it while a concern is being resolved
- object to uses based on our legitimate interests, and to direct marketing at any time
- receive your data in a common, machine-readable format, or have it sent to another organisation
- withdraw your consent at any time, without affecting what we did before
- not be subject to decisions made solely by automated processing that significantly affect you
To use any of these rights, email info@beekomm.com with “Privacy request” in the subject line. We may ask you to confirm your identity. We’ll reply within 30 days, free of charge, unless a request is clearly unfounded or excessive.
The law requires us to keep some data, such as payment records, even if you ask us to delete it. If that applies, we’ll tell you.
Cookies
Cookies are small files that a website stores in your browser. We keep them to a minimum:
| Cookie | Set by | Why | Type |
|---|---|---|---|
__cf_bm, cf_clearance | Cloudflare | Tells people apart from bots and protects the site from attacks | Essential |
cf_clearance, __stripe_mid, m | Bachs and its card partners | Keep the payment session secure while you pay and help stop card fraud | Essential |
ph_…_posthog | Bachs | Bachs’ own analytics on its checkout page. We don’t receive this data; Bachs’ privacy policy covers it | Analytics (Bachs’) |
zccpn, JSESSIONID, zalb_…, __cf_bm | Zoho | Make the booking calendar work and keep its form secure | Essential |
Essential cookies don’t need your consent, because the site and the checkout can’t work safely without them. We don’t use advertising or social media tracking cookies, and we don’t currently use analytics tools. Bachs’ checkout sets its own analytics cookie, listed above, which Bachs controls. If we add analytics later, we’ll choose a tool that doesn’t use cookies, or ask for your consent first, and update this policy.
If we ever add optional cookies, we’ll ask for your consent first, with clear Accept and Reject buttons, and we’ll update this table.
Marketing emails
We only send newsletters or offers if you’ve opted in. Every email has an unsubscribe link, or you can write to us. Booking confirmations and reminders aren’t marketing, so you’ll still get those.
Children
Our services are for adults and businesses. We don’t knowingly collect personal data from anyone under 18. If you think a child has given us personal data, contact us and we’ll delete it.
Changes to this policy
We’ll update this policy when our services, our providers or the law change, and change the “Last updated” date at the top. If a change affects how we use data you’ve already given us, we’ll email you before it takes effect.
Contact and complaints
For privacy questions or requests, email our data protection officer at info@beekomm.com, or write to us at our registered address.
If you’re not happy with our response, you can complain to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng. If you live in the EU or the UK, you can also contact your local data protection authority. We’d appreciate the chance to put things right first.
- Bookings, rescheduling and refunds
- hola@beekomm.com
- Privacy requests and legal notices
- info@beekomm.com
- Registered address
- 1A Timothy Babatunde Street, Labak Estate, Old Abeokuta, Oko-Oba Road, Abule Egba, Agege, Lagos 102212, Nigeria