Privacy policy

Who this policy applies to

This policy explains how Oreeva handles personal data when business owners create and manage accounts, clients use a business's booking page, and people contact support or interact with booking and payment notifications.

Who controls your personal data

Oreeva is the data controller for business-owner accounts and for personal data used to operate, secure, support, administer, and reconcile the Oreeva platform. Oreeva is an online service based in Nigeria and does not currently maintain a public customer-service office. Contact support@useoreeva.com for privacy questions or requests.

Each beauty business independently decides which services it provides and how it manages its client relationship. It may therefore be a separate data controller for client data it receives through Oreeva. Oreeva processes booking data to provide the platform and also uses limited data for its own security, fraud prevention, support, payment reconciliation, and legal obligations.

Personal data we collect

For business owners, we collect names, email addresses, numbers, account details, business names and descriptions, business location, availability, services, and prices

For clients, we collect names, numbers, selected services and locations, and payment references.

Why we use personal data

We use personal data to create and secure accounts; verify email addresses; recover account access; publish business pages; show services and availability; create, confirm, manage, and cancel bookings; initialise and verify payments; calculate fees and expected payouts; track refunds and settlement status; send requested booking and account messages; provide support; detect abuse and fraud; keep audit and financial records; enforce our terms; and comply with law.

Who receives personal data

The relevant beauty business receives the client and booking details needed to provide and manage the requested appointment. We also disclose limited data to providers that help us operate Oreeva, including Paystack for payments, MongoDB Atlas for database hosting, Meta for WhatsApp messages, and Resend for account email.

International data transfers

Some providers may store or process data outside Nigeria. Where personal data is transferred internationally, we use a transfer basis and safeguards required by the Nigeria Data Protection Act 2023, such as an adequacy decision, contractual protection, another permitted legal basis, or explicit consent where appropriate. Transfer details relevant to a request can be obtained by contacting us.

Cookies

Oreeva uses a secure, HTTP-only session cookie to keep business owners signed in and protect authenticated requests. This cookie is necessary for the requested service. We do not currently use advertising cookies or sell behaviour profiles. If we later introduce non-essential analytics or similar technology, we will update this policy and obtain consent where required.

How long we keep data

We keep personal data only for as long as needed for the purpose collected and then delete, anonymise, or securely isolate it unless continued retention is required. Account and business data is generally kept while an account is active. Booking, payment, refund, policy-acceptance, and settlement records may be kept after account closure where needed for financial reconciliation, tax or legal obligations, consumer complaints, chargebacks, fraud prevention, or legal claims.

Verification and reset codes expire after short security windows. Temporary booking holds and rate-limit records expire automatically under their configured retention periods. Support and security records are reviewed according to their purpose, sensitivity, and the applicable limitation or regulatory period. A deletion request may not apply to records we must retain by law or need to establish, exercise, or defend a legal claim.

Changes to this policy

We may update this policy when our product, providers, or legal obligations change. We will update the effective date and provide reasonable notice of a material change where appropriate. If a new purpose requires consent, we will request it before using data for that purpose.

Contact

Privacy, security, and support requests: support@useoreeva.com.