Legal
Privacy Policy
Who we are
Waaka is operated by Waaka Limited, a company registered in Nigeria (RC No. 9426840), with its registered office at 36 Silicon Vale Estate, Ologolo, Lekki Phase II, Lagos State (“Waaka”, “we”, “us”).
We are the data controller for personal data collected through trywaaka.com. For anything about your data, email privacy@trywaaka.com.
This policy covers the Waaka waitlist site only. We’ll publish a full policy for the Waaka app before it launches.
What we collect
When you join the waitlist
- your first name
- your email address
- the experiences you pick (up to five)
- which page or link brought you to us
When you use the site
- To stop bots and spam, our server keeps a one-way scrambled (hashed) version of your IP address and the times of your recent signup attempts. We never store your IP address in readable form.
- Our hosting provider keeps standard server logs, such as IP address, browser type and pages requested, for security and troubleshooting.
- If you accept advertising cookies, the Meta Pixel collects information about your visit: pages viewed, the fact that you joined the waitlist, your browser and device, and your IP address. It doesn’t receive your name, your email address or your experience picks.
Why we use it
- To keep you posted about launch and early access. You asked us to when you joined, and you can unsubscribe at any time. (Legal basis: consent.)
- To work out which experiences to bring first. Your picks, combined with everyone else’s, help us decide which partners and categories to launch with. (Legal basis: legitimate interest.)
- To measure and improve our advertising on Facebook and Instagram, including showing Waaka ads to people who’ve visited the site. This only happens if you accept advertising cookies. (Legal basis: consent.)
- To understand how people use the site, using Google Analytics — for example, which pages get visited and roughly how many people are on the waitlist journey at each step. This only happens if you accept optional cookies. (Legal basis: consent.)
- To advertise to people already interested in Waaka, and to find similar new audiences. We may give Meta a one-way scrambled (hashed) version of your email address, so we can show ads to people already on our waitlist, or reach people with similar interests (a “lookalike audience”). Meta cannot reverse the scrambling to recover your email. This is separate from the advertising cookies above: it uses the email you gave us when you joined, not your browsing activity, and it doesn’t depend on your cookie choice. (Legal basis: legitimate interest. You can ask us to stop at any time — see “Your rights”.)
- To keep the waitlist clean and the site secure, including blocking fake and automated signups. (Legal basis: legitimate interest.)
We don’t sell your personal data. We don’t share your details with venues or experience partners. When we talk to partners about demand, we only use combined numbers, such as how many people picked a category — nobody can be identified from those. The one exception is Meta, for the advertising purposes described above.
Who handles it for us
- Namecheap hosts the website.
- Brevo stores the waitlist and sends our emails.
- Meta provides the Meta Pixel, and also receives a hashed version of your email address so we can advertise to our waitlist and similar audiences (a Custom Audience). Pixel data is only shared if you accept advertising cookies; the Custom Audience upload doesn’t depend on that choice, since it uses the email you already gave us when you joined.
- Google provides Google Analytics, which we use to understand site traffic. This only loads if you accept optional cookies.
- Google Fonts serves the typeface used on this site. Loading it sends your IP address to Google. This happens on every visit and doesn’t depend on your cookie choice, since it’s a standard part of how the page displays, not a cookie.
They process your data on our instructions, except where Meta uses pixel or Custom Audience data, or Google uses analytics data, for their own purposes under their own policies. Some of these providers store data outside Nigeria. Where your data leaves Nigeria, we rely on the safeguards allowed under the Nigeria Data Protection Act 2023.
The Waakans WhatsApp community
Joining the Waakans community on WhatsApp is optional. It’s run on WhatsApp, which is owned by Meta, so WhatsApp’s own privacy policy applies to your use of it.
When you join, your phone number and WhatsApp profile become visible to community admins. Depending on WhatsApp’s settings, they may also be visible to other members. We don’t add your phone number to our waitlist records.
How long we keep it
We keep your waitlist details until 12 months after Waaka launches, or until you ask us to delete them, whichever comes first. If you create a Waaka account, the app’s privacy policy takes over from that point.
If you unsubscribe, we keep your email address on a do-not-contact list. This is so we don’t email you again by mistake.
Meta Pixel cookies stay on your browser for up to 90 days, unless you clear them sooner. Hashed emails uploaded to Meta as a Custom Audience are kept under Meta’s own data retention policies; you can ask us to request their removal at any time.
Google Analytics cookies stay on your browser for up to 2 years, unless you clear them sooner or use “Cookie settings” to withdraw consent.
Your rights
Under the Nigeria Data Protection Act 2023, you can ask us to:
- give you a copy of your data
- correct it
- delete it
- restrict or stop how we use it — including removing you from any Meta Custom Audience
- stop emailing you
You can also withdraw your cookie consent at any time using “Cookie settings”.
Email privacy@trywaaka.com and we’ll respond within 30 days. If you’re unhappy with how we’ve handled your data, you can complain to the Nigeria Data Protection Commission.
Age
Waaka is for people aged 18 and over. We don’t knowingly collect data from anyone under 18. If you think someone under 18 has joined, tell us and we’ll delete their details.
Keeping it safe
We use reasonable technical and organisational measures to protect your data, including encrypted connections and restricted access. No system is completely secure. If a breach affects you, we’ll tell you and the regulator as the law requires.
Changes
If we update this policy, we’ll post the new version here and change the date at the top. If a change affects how we use data you’ve already given us, we’ll email you.