Privacy Policy
Effective 13 October 2026 · Last updated 13 October 2026
Bookdfy is new and growing, so this page will change from time to time. When it does, we’ll update it here with a new date, and for important changes we’ll let you know in the app before they take effect.
This Privacy Policy explains how Bookdfy (bookdfy.com, operated from Nigeria; “Bookdfy”, “we”, “us”) collects, uses, shares and protects personal data when you use the Bookdfy website and web app (the “Platform”). We handle personal data in line with the Nigeria Data Protection Act 2023 (the “NDPA”).
It forms part of our Terms of Use. Everyone who creates an account confirms they have read it.
1. Who we are
Bookdfy is responsible for the personal data processed through the Platform. Bookdfy is a solution platform that connects clients with independent artisans; it is not a middleman and never handles payments between them.
2. What we collect
Clients
- Your name and WhatsApp number when you make a booking.
- Your name, username and email address if you create an account.
- Your bookings, reviews you post, artisans you save and any reports you make.
Artisans
- Your name, NIN and a photo or PDF of your national ID. See identity checks.
- Business bank account details, WhatsApp and call numbers, and business address.
- Your profile, services, prices, photos, videos and availability.
- Subscription and billing records. Card details are handled by our payment provider; we never store full card numbers.
- Profile views, link taps and QR code scans, so we can show you insights.
Everyone
- Two essential cookies: one keeps you signed in, and one remembers bookings you made as a guest on this device. We don’t use advertising or tracking cookies.
- Your light or dark mode choice is saved in your own browser, not sent to us.
- Bookdfy doesn’t store your IP address or device details. Our hosting and network providers automatically log basic request data (such as IP address and browser type) for a short time to keep the Platform secure and working.
3. Why we use it
- Running your account and bookings: to provide the service you signed up for.
- Verifying artisans: to provide the service and to protect clients from fraud.
- Billing artisan subscriptions: to provide the service.
- Investigating fraud and keeping the Platform safe: our legitimate interest and legal obligations.
- Responding to the authorities: legal obligation.
- Service messages (booking updates, reminders, account notices): to provide the service.
- Improving the Platform using combined, non-identifying usage data: our legitimate interest.
We don’t send marketing messages without your consent, and you can withdraw consent at any time.
4. Who can see what
- Clients see an artisan’s public profile and verified badge, never their ID document, NIN or verification records.
- An artisan’s street address is shown to a client only after their booking is confirmed; before then, only the area.
- Artisans see the name, WhatsApp number and booking details of clients who book them.
- ID documents are kept in private storage. Only Bookdfy can open them, only when needed, and every access is logged.
5. When we share it
We never sell your personal data. We share it only in these cases:
5.1 Service providers. Trusted providers process data for us to run the Platform: hosting and database, file storage, our payment provider (subscriptions and bank account name checks) and email delivery. They may use it only to provide their service to us.
5.3 Clients who report fraud never receive an artisan’s private details. They get only the artisan’s business name and the booking details, so they can make a police report.
5.4 If Bookdfy is sold or merged, personal data may be transferred, still protected by this policy.
6. Data stored outside Nigeria
Some of our providers store or process data outside Nigeria. We only do this as the NDPA allows, for example with providers in countries with adequate data protection laws or under appropriate safeguards.
7. How we protect it
- Encrypted connections (HTTPS) everywhere.
- NINs and saved payment card references are encrypted in our database.
- ID documents in private storage, with access logged.
- Restricted access for Bookdfy only.
No system is completely secure. If a breach is likely to put your rights at risk, we’ll notify the Nigeria Data Protection Commission and affected users as the law requires.
8. How long we keep it
- Artisan verification records (ID document, NIN, bank details): while the account is active and for 6 years after it closes, so we can still help with investigations, then securely deleted.
- Deleted accounts: deactivated straight away and permanently deleted after 30 days.
- Artisans without an active plan: deleted after the 2 or 4 months they choose, with a reminder a week before.
- Billing records: as long as tax and accounting rules require.
We may keep data longer if it relates to an open investigation, a legal claim or a legal obligation.
9. Your rights
Under the NDPA, you can:
- ask for a copy of the personal data we hold about you;
- correct inaccurate data (most of it you can edit yourself in your account);
- ask us to delete your data (you can delete your account in settings);
- restrict or object to some processing;
- receive your data in a portable format; and
- withdraw consent where we rely on it.
To use these rights, message us on WhatsApp or Telegram (below). We may need to confirm it’s you first, and some requests may be limited where we must keep data by law or for an open investigation. You can also complain to the Nigeria Data Protection Commission (NDPC).
10. Children
The Platform is only for people aged 18 or older. We don’t knowingly collect data from children. If you think a child has given us personal data, contact us and we’ll delete it.
11. Changes to this policy
This policy will change as Bookdfy grows. We’ll post the new version here with a new date, and let you know in the app about important changes before they take effect.
12. Contact us
Bookdfy doesn’t use email for support. Reach us on: