Privacy Policy

Crowned & Nurtured is an events, ticketing and vendor platform, powered by Curls AuNaturel. The organisation responsible for your personal information (the “data controller”) is CURLS-AUNATUREL LLC (trading as Curls AuNaturel), Southside Shopping Centre, Wandsworth High St, London SW18 4TF, United Kingdom.

You can contact us about anything in this policy at info@curls-aunaturel.co.uk.

• Account details — if you create an account: your name, email address and a password. Passwords are handled by our sign-in provider and are stored only in hashed form; we never see them.
• Guest checkout details — if you buy without an account: your name, email address and, if you choose to give it, your phone number.
• Tickets and bookings— the event, ticket type, booking reference (for example CN-7K3Q9P), the ticket holder's name and email, the QR code on your ticket, and whether and when the ticket was checked in at the door.
• Payment records— the amount, currency, payment status, the payment gateway's reference, and the buyer's email and phone number. Card and mobile money details are entered on Paystack's or Hubtel's own secure checkout page. We never see or store your card number, CVV or mobile money PIN.
• Vendor details — if you apply to be a vendor: your business name, category, description and any logo, plus the stalls you book.
• Newsletter — if you ask to be notified about events: your email address.
• Emails we send you — a record of which transactional emails were sent to which address, so we can confirm delivery and avoid sending duplicates.
• Technical information — like any website, our hosting provider processes standard request information (such as IP address and browser type) to deliver the service and keep it secure. We use only the cookies needed to keep you signed in. We do not use advertising, analytics or tracking tools, and we do not track you across other apps or websites.

The mobile app does not access your location, contacts, photos or camera. It stores your sign-in tokens securely on your device (in the iOS Keychain or Android Keystore) so you stay signed in.

• To sell you tickets and stalls and let you in on the day — issuing your booking reference and QR ticket, checking it at the door, and sending your confirmation email. Basis: performing our contract with you.
• To run your account — signing you in, showing your tickets, resetting your password. Basis: performing our contract with you.
• To tell you about changes to an event you are booked on, such as a cancellation. Basis: performing our contract with you.
• To keep accurate financial records — reconciling payments and meeting tax and accounting duties. Basis: legal obligation and our legitimate interests.
• To keep the service safe — preventing fraud, duplicate check-ins and misuse. Basis: our legitimate interests.
• To send event news if you signed up for it. Basis: your consent, which you can withdraw at any time.

These bases are written with the Ghana Data Protection Act, 2012 (Act 843) and, where it applies, the UK GDPR in mind. [COUNSEL TO CONFIRM LEGAL BASES AND WHICH LAWS APPLY]

We do not sell your personal information. We share it only with the service providers who help us run Crowned & Nurtured:

• Payment gateways — Paystack and Hubtel, to take your payment on their hosted checkout pages. They act under their own privacy policies for the payment details you give them.
• Email delivery — Zend and/or Resend, to send ticket confirmations, welcome emails and event updates.
• Bareconnect, our commerce ledger partner. A copy of each sale (the amount, what was bought, and the buyer's name, email and phone number) is recorded there so that sales can be reconciled.
• Hosting and storage — Vercel (website, app servers and image storage) and Neon (our Postgres database, which also runs our sign-in service).
• Event organisers and door staff, who see the ticket holder's name and ticket status when checking tickets in.
• Authorities, where the law requires it.

Some of these providers store or process data outside Ghana (for example in the United States or the European Union). Where that happens we rely on the safeguards the law requires. [COUNSEL TO CONFIRM INTERNATIONAL TRANSFER WORDING AND PROVIDER REGIONS]

• Your account is kept until you delete it.
• Tickets, bookings and payment records are kept until 90 days after the event, so that tickets you have bought still work at the door and any queries or refunds can be handled. This applies even after you delete your account: the records are kept, but they are no longer linked to an account. Where the law requires us to keep financial records for longer (for example for tax), we keep only what that law requires, and only for as long as it requires.
• Newsletter sign-ups are kept until you unsubscribe.
• Email delivery logs are kept for 90 days.

You can delete your account at any time, in the app (Profile, then Delete account) or on the web at /account/delete. Deleting your account removes your profile and sign-in details. As explained above, records of tickets and payments are kept for accounting and event entry.

Depending on where you live, you can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that is wrong;
• delete your information, where we are not required to keep it;
• stop or limit how we use it, or object to a particular use;
• withdraw consent for event news (use the unsubscribe link or contact us).

Email info@curls-aunaturel.co.uk and we will reply within [RESPONSE TIME, e.g. 30 DAYS]. If you are unhappy with our answer, you can complain to the Data Protection Commission of Ghana (dataprotection.org.gh) or, in the UK, the Information Commissioner's Office (ico.org.uk).

Crowned & Nurtured is not directed at children. You must be at least 18 to create an account or buy tickets. Younger guests can attend events where the organiser allows it, with a ticket bought by a parent or guardian; some events set their own age limits. If you believe a child has given us personal information, contact us and we will delete it.

All traffic is encrypted with HTTPS. Access to our database is restricted to the people who need it. Payments are handled entirely on our payment gateways' secure pages.

If we change this policy we will update the date at the top of this page, and tell you by email or in the app if the change is significant.

CURLS-AUNATUREL LLC (trading as Curls AuNaturel)
Southside Shopping Centre, Wandsworth High St, London SW18 4TF, United Kingdom
Email: info@curls-aunaturel.co.uk

For help with tickets or your account, see our Support page.