Your data, your community

This Privacy Policy explains how BCC007 ("we", "us" or "our") collects, uses, discloses and protects the personal information of members of the BCC007 alumni community who use the BCC007Pay platform (the "Service").

By creating an account or using the Service, you agree to the practices described in this policy.

We collect information you provide directly, information collected automatically, and information from third parties:

• Account information — your name, email address, phone number and password (stored securely and hashed).
• Profile information — occupation, location, gender, date of birth and profile photo.
• Financial information — bank account details you provide during onboarding so transfers from the group balance can reach you, and a record of your payments, dues, donations and transfers.
• Community data — events you are interested in, birthdays, support tickets, notifications and your activity in the Service.
• Usage data — how you interact with the Service, including pages visited, features used and audit-log entries.
• Device and technical data — IP address, browser type and device information collected automatically.

We use your information to:

• operate, maintain and personalise the Service, including your dashboard, member directory and profile;
• process and confirm payments, dues, donations and transfers you authorise;
• send you notifications and reminders about events, birthdays, payments and support requests;
• verify your identity, secure your account and investigate fraud or misuse;
• provide support and respond to your requests;
• generate group reports and administer the community;
• comply with legal and regulatory obligations.

Payments and transfers are processed by Paystack, our payment processor. We do not store your card numbers. Card and bank details are handled by Paystack in accordance with its own privacy and security practices.

We store the bank account details you provide during onboarding solely so that transfers from the group balance can be sent to you, and to keep a record of transactions.

Payment records, including amounts, dates and references, are visible to the community administrators who administer the group's finances and, for your own transactions, to you.

We do not sell your personal information. We share it only in the following circumstances:

• Within the community — your profile and activity are visible to other members and administrators of the BCC007 group as reasonably necessary to operate the Service. For example, administrators can view member details to manage payments, transfers and support tickets.
• Service providers — with trusted providers who help us run the Service, such as our database, hosting, email, image-storage and workflow providers. These providers may only use your data to perform services on our behalf.
• Payment processors — with Paystack to process payments and transfers you authorise.
• Legal compliance — when required by law, regulation, legal process or a valid governmental request, or when we believe disclosure is necessary to protect the rights, safety or property of BCC007, its members or the public.
• Business transfers — in connection with a merger, acquisition, reorganisation or sale of assets, subject to appropriate confidentiality protections.

Because the Service is a community platform, certain information is visible to other members and administrators, including your name, profile photo and, where applicable, your payments and event activity.

We give you control over sensitive profile fields. From the Privacy settings in your account you can:

• hide your birth date, so birthday reminders and the members directory do not display it;
• hide your gender;
• stop receiving email notifications and newsletter emails.

We use appropriate technical and organisational measures to protect your information, including secure connections, encrypted storage of sensitive data such as passwords and bank details, access controls and activity logging.

No method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee its absolute security, and you are responsible for keeping your account credentials confidential.

We retain your information for as long as your account is active and as needed to operate the Service, comply with legal obligations, resolve disputes and enforce our agreements.

Financial records, audit logs and support history are retained in accordance with applicable accounting and regulatory requirements, even after you close your account.

When you request deletion of your account, we delete or anonymise your personal information, except where retention is required by law or is necessary for legitimate business purposes.

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate or incomplete information from your profile or by contacting us;
• request deletion of your account and personal information;
• restrict or object to certain processing of your information;
• withdraw consent where processing is based on consent;
• receive a copy of the information you provided in a structured, machine-readable format.

We use cookies and browser local storage to keep you signed in, remember your preferences (such as theme and sidebar state) and operate the Service securely.

You can adjust your browser settings to block or delete cookies, but some features of the Service may not work properly without them.

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from them. If you believe a minor has provided us with personal information, contact us and we will take steps to remove it.

Your information may be stored and processed outside the country where you live, including by our hosting and service providers. We take steps to ensure such transfers are protected by appropriate safeguards in accordance with applicable law.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and take reasonable steps to notify you, such as through the Service or by email.

Your continued use of the Service after the changes take effect constitutes your acceptance of the revised policy.

Questions about this Privacy Policy or your data? Send us a message from the Contact page and we will get back to you as soon as possible.