Privacy Policy

1. Who we are

Kick operates an online platform for booking fixed football-pitch time slots and purchasing venue admission tickets. For the personal information described in this policy, Kick is the data controller unless we state otherwise.

This policy applies to customers, guests, account holders, venue visitors, and people who contact or otherwise use the platform. It should be read with our Terms & Conditions.

2. Information we collect

Depending on how you use Kick, we collect:

• Account details: full name, email address, phone number, password hash, account role, and account security records.
• Booking and admission details: pitch or venue, date and time, number of attendees, price, booking status, and the name, email address, and phone number supplied for a guest booking or group ticket.
• Payment records: transaction reference, amount, status, and booking metadata exchanged with Paystack. Paystack collects and processes your payment-method details on its own secure service; Kick does not receive your full card number, PIN, or bank authentication credentials.
• Ticket and entry records: ticket or QR code, whether it has been used, and the date and time of check-in.
• Technical and security information: essential authentication and anti-forgery cookie data, failed sign-in counts, and operational records needed to secure and troubleshoot the service.
• Communications: information you include when you ask for help, report a problem, or make a privacy request.

If you provide another person’s details, you must have authority to do so and must tell them how Kick will use their information.

3. How and why we use information

We use personal information only where we have a recognised lawful basis:

Kick does not currently use advertising or analytics cookies and does not sell personal information.

4. How we share information

We share only what is reasonably necessary with:

• Paystack, to initialise, verify, and reconcile payments. Paystack also processes information under its own privacy terms.
• Authorised venue, administrative, and entry staff, so they can manage bookings, support customers, and validate tickets.
• Infrastructure and professional service providers, such as hosting, database, security, and advisory providers, under appropriate confidentiality and data-protection obligations.
• Courts, regulators, law-enforcement bodies, or other parties, where disclosure is required by law, protects rights or safety, or is necessary for a corporate transaction.

Some providers may process information outside Nigeria. Where that happens, we use a transfer mechanism and safeguards recognised by applicable data-protection law.

5. Retention, cookies, and security

We keep personal information only for as long as it is needed for the purposes described above. Account information is generally kept while the account is active. Booking, payment, ticket, audit, and support records may be kept longer where needed for accounting, fraud prevention, disputes, or legal obligations. We then delete or anonymise information unless the law requires continued retention.

Kick uses essential cookies and similar anti-forgery tokens to keep you signed in, protect forms, and maintain service security. The authentication cookie is HTTP-only, uses SameSite protection, and normally expires after eight hours. Because these technologies are necessary to provide the service, disabling them may prevent sign-in or booking functions from working.

We use technical and organisational safeguards designed to protect personal information, including access controls, password hashing, encrypted HTTPS connections, transaction verification, and restricted administrative access. No internet service can guarantee absolute security; please use a unique password and tell us promptly if you suspect unauthorised use.

6. Your privacy rights

Subject to applicable law, you may ask us to:

• confirm whether we process your information and give you access to it;
• correct inaccurate or incomplete information;
• delete information or restrict how it is used;
• provide information you supplied in a portable format;
• object to processing based on legitimate interests; or
• withdraw consent at any time where consent is the basis for processing.

We may need to verify your identity before acting on a request. Some rights are limited where we must retain information to complete a transaction, comply with law, protect other people, or establish or defend legal claims.

You may also lodge a complaint with the Nigeria Data Protection Commission (opens in a new tab). We would appreciate the chance to address your concern first.