Effective Date: 18-March-2025 1. Introduction Chasescroll respects your privacy and is committed to protecting the personal information of users who access our website, applications, and marketplace services. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you create an account, buy tickets, organize events, make donations, purchase or rent items, hire services, sell goods, or otherwise interact with Chasescroll. This Policy should be read together with our Terms and Conditions. By using Chasescroll, you acknowledge the practices described in this Policy. Where consent is legally required, we will obtain it separately and will not treat general use of the platform as a substitute for that consent. 2. Information We Collect Depending on how you use Chasescroll, we may collect the following categories of information. 2.1 Personal and Account Information This may include: • Full name, username, and profile information. • Email address and telephone number. • Account credentials and authentication information. • Profile photographs and other information you choose to provide. • Identity or business verification information where necessary. We do not intend to collect more personal information than is reasonably necessary for the relevant purpose. 2.2 Transaction and Payment Information When you make a payment, receive funds, donate, purchase tickets, rent an item, buy goods, or hire a service, we may collect: • Transaction amounts, dates, currency, and status. • Order, ticket, booking, rental, and donation records. • Billing and payment confirmation information. • Refund, chargeback, and dispute records. • Wallet balances, payout details, and transaction references where applicable. Payment card details and other sensitive payment credentials may be processed directly by authorized payment service providers. Where we do not need to retain full payment credentials, we rely on the relevant provider to handle them securely. 2.3 Event, Vendor, and Marketplace Information Depending on your role, we may collect: • Event names, dates, locations, descriptions, and ticket details. • Vendor profiles, service descriptions, prices, and business information. • Product listings, photographs, rental details, and inventory information. • Delivery addresses and relevant delivery instructions. • Fundraising campaign descriptions, stated purposes, and beneficiary information. • Reviews, ratings, messages, and customer support communications. Users should avoid submitting sensitive personal information about themselves or other people unless it is necessary and there is an appropriate legal basis. 2.4 Technical and Usage Information When you use Chasescroll, we may collect technical information such as: • IP address and approximate location derived from technical information. • Device type, browser type, operating system, and application version. • Pages viewed, features used, and interaction records. • Login times, session information, and security logs. • Cookies and similar technologies, subject to applicable consent requirements. We will request permission before collecting precise device location where required by law or platform settings. 2.5 Communications and Support Information We may collect information you provide when contacting support, reporting a dispute, communicating with another user through platform features, responding to surveys, or submitting feedback. This information helps us resolve complaints, investigate suspected fraud, and improve our services. 2.6 Information from Other Sources Where lawful and necessary, we may receive information from payment processors, identity verification providers, fraud prevention services, vendors, event organizers, delivery partners, or other users involved in a transaction. We may use such information to verify transactions, protect accounts, fulfill bookings, investigate complaints, and meet legal obligations. 3. How We Use Personal Information Chasescroll may use personal information to: 1. Create, manage, and secure user accounts. 2. Process ticket purchases, donations, rentals, purchases, service bookings, and vendor payouts. 3. Manage events, listings, orders, and fundraising campaigns. 4. Verify identity, eligibility, payment status, and business information where necessary. 5. Communicate confirmations, receipts, changes, cancellations, and service notifications. 6. Handle refunds, disputes, complaints, chargebacks, and customer support requests. 7. Detect, investigate, and prevent fraud, abuse, unauthorized access, and unlawful activity. 8. Maintain platform security, reliability, and functionality. 9. Analyze platform performance and improve user experience. 10. Send promotional communications where permitted by law and subject to applicable consent and opt-out requirements. 11. Comply with tax, financial, regulatory, judicial, and other legal obligations. 12. Establish, exercise, or defend legal claims. We will not use personal information for purposes incompatible with the purpose for which it was collected without an appropriate legal basis. 4. Legal Basis for Processing Where required by applicable privacy law, including the Nigeria Data Protection Act 2023, Chasescroll will process personal information on an appropriate legal basis. Depending on the circumstances, these bases may include: • Contract: Processing necessary to create your account or complete a transaction you request. • Legal obligation: Processing required to comply with applicable laws or lawful orders. • Legitimate interests: Processing reasonably necessary to secure, administer, and improve the platform, provided your rights and interests are appropriately considered. • Consent: Processing based on your freely given consent, where required, such as certain optional marketing or cookie activities. • Vital interests or public interest: Processing where recognized by applicable law and relevant to the circumstances. Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect processing lawfully carried out before withdrawal. 5. How We Share Personal Information We do not sell personal information to third parties for their independent commercial use. We may share relevant information with the following categories of recipients when necessary and lawful. 5.1 Vendors, Sellers, and Service Providers We may share information required to fulfill a transaction, such as a customer's name, contact details, booking information, delivery address, or order details. We aim to limit such disclosures to information reasonably necessary for the transaction. 5.2 Event and Campaign Organizers We may share relevant ticket-holder information with event organizers for ticket validation, event administration, safety, and communication. We may share donation or campaign-related information with campaign organizers as necessary to administer a contribution, investigate a transaction, or fulfill a disclosed campaign process. Where donations are intended to be anonymous, we will respect the available anonymity settings and applicable legal obligations. Absolute anonymity may not be possible where payment processing, fraud prevention, or law requires identification. 5.3 Payment Processors and Financial Institutions We may share transaction information with payment processors, banks, wallet providers, and other authorized financial service providers to process payments, refunds, chargebacks, payouts, and compliance checks. These providers may process personal information under their own privacy notices and applicable legal obligations. 5.4 Technology and Operational Service Providers We may use third-party providers for hosting, analytics, customer support, communications, identity verification, security, fraud prevention, and other services required to operate Chasescroll. Where appropriate, these providers are required to protect information and process it only in accordance with applicable agreements and law. 5.5 Legal, Regulatory, and Safety Disclosures We may disclose information where reasonably necessary to: • Comply with applicable law or a valid legal request. • Respond to a competent regulatory or judicial authority. • Investigate fraud, security incidents, or suspected unlawful conduct. • Protect the rights, safety, and property of users, Chasescroll, or others. • Establish, exercise, or defend legal claims. 5.6 Business Transfers If Chasescroll undergoes a merger, acquisition, restructuring, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to applicable privacy obligations. 5.7 No Unnecessary Disclosure We do not permit third parties to use personal information received through Chasescroll for purposes that are inconsistent with the applicable legal basis, transaction requirements, or disclosed privacy practices. 6. Cookies and Similar Technologies Chasescroll may use cookies, pixels, local storage, and similar technologies to: • Keep users signed in. • Maintain security and prevent fraud. • Remember preferences and settings. • Understand how the platform is used. • Measure performance and improve features. • Support analytics and advertising where applicable. Strictly necessary technologies may be used to provide requested services or maintain platform security. Where consent is required for analytics, advertising, or other non-essential technologies, we will request consent and provide appropriate controls. You may manage cookies through your browser or any cookie preference tools made available on Chasescroll. Disabling certain cookies may affect platform functionality. 7. Marketing and Communications Chasescroll may send transactional communications relating to accounts, purchases, tickets, rentals, service bookings, donations, refunds, security, and changes to our Terms or Privacy Policy. These communications are necessary for the operation of the platform and may continue even if you opt out of marketing. Where permitted by law, we may send promotional emails, messages, or notifications about events, products, services, and platform features. You may opt out of promotional communications through the unsubscribe link, account settings, or instructions provided in the message. We will honor applicable opt-out requirements. 8. Data Retention Chasescroll retains personal information only for as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. Retention periods may depend on: • The duration of your account. • The nature and status of your transactions. • Applicable financial, tax, accounting, and regulatory requirements. • Fraud prevention, security, and dispute resolution needs. • Legal claims and recordkeeping obligations. When information is no longer required, we will take reasonable steps to delete it, anonymize it, or securely dispose of it, subject to technical limitations and legal obligations. Deleting your account may not immediately remove transaction records that must be retained by law. 9. Data Security Chasescroll uses reasonable technical, organizational, and administrative safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. Depending on the service and associated risks, these safeguards may include access controls, encryption where appropriate, authentication measures, security monitoring, and service provider safeguards. No website, application, or electronic transmission can be guaranteed to be completely secure. Users are responsible for safeguarding their credentials and promptly reporting suspected account compromise to [email protected]. Where required by applicable law, Chasescroll will respond to personal data breaches and notify affected individuals or relevant authorities within the applicable time limits. 10. International Data Transfers Chasescroll may use hosting providers, payment processors, or other service providers located outside Nigeria or the country in which a user resides. Where personal information is transferred internationally, Chasescroll will implement applicable legal safeguards and other required protections, including any necessary contractual or regulatory measures. Users may contact us for further information about relevant international transfers and safeguards, subject to legal and security limitations. 11. Your Privacy Rights Subject to applicable law and any lawful exceptions, you may have the right to: • Request access to personal information we hold about you. • Request correction of inaccurate or incomplete information. • Request deletion of personal information where legally appropriate. • Request restriction of certain processing activities. • Object to certain processing, including processing based on legitimate interests where applicable. • Request a portable copy of certain personal information. • Withdraw consent where processing is based on consent. • Opt out of direct marketing. • Lodge a complaint with the relevant data protection authority. To exercise these rights, contact [email protected] and describe your request. We may request reasonable information to verify your identity before responding. We will respond within the period required by applicable law and may decline or limit a request where a lawful exception applies. 12. Children's Privacy Chasescroll is intended for users who are at least 18 years old. We do not knowingly permit individuals under 18 to create accounts or use account-restricted marketplace services. If we discover that we have collected personal information from a person under 18 in circumstances where such collection is not permitted, we will take appropriate steps to restrict access and delete the information where legally required. If you believe a minor has provided personal information to Chasescroll, contact [email protected]. 13. Third-Party Websites and Services Chasescroll may contain links to third-party websites, payment pages, vendor profiles, event pages, or external services. Those third parties may operate under their own privacy policies and terms. Chasescroll does not control their independent privacy practices. Before submitting personal information to a third party, you should review its privacy notice and applicable terms. 14. Automated Processing and Fraud Prevention Chasescroll and its service providers may use automated tools to identify suspicious transactions, detect abuse, verify payments, protect accounts, and support platform security. These tools may result in a transaction being flagged, delayed, or referred for manual review. Where applicable law provides rights relating to solely automated decisions that significantly affect you, you may contact us to request information or exercise your available rights. 15. Privacy Complaints and Data Protection Contact If you have questions or concerns about how Chasescroll handles personal information, you may contact us using the details below. We will review privacy complaints and take reasonable steps to investigate and respond. You may also lodge a complaint with the relevant data protection authority, including the Nigeria Data Protection Commission where appropriate. 16. Changes to This Privacy Policy Chasescroll may update this Privacy Policy to reflect changes in our platform, data processing practices, service providers, or legal requirements. The revised Policy will be published on the platform with an updated effective date. Where required, we will provide additional notice or obtain consent for material changes. Your continued use of Chasescroll after an updated Policy takes effect will be subject to applicable law and any consent requirements. 17. Contact Us For privacy requests, complaints, or questions about this Policy, contact: Chasescroll Support Email: [email protected] Website: https://chasescroll.com Please do not include passwords, full payment card numbers, or other unnecessary sensitive information in your support request.