The Afropolitan Concierge and Hospitality Services

PRIVACY POLICY

for The Afropolitan Reward Program (TARP)

Managed by The Afropolitan Concierge and Hospitality Services Limited (TACHS)

1. Introduction

At The Afropolitan Concierge and Hospitality Services Limited (TACHS), we value your trust and are committed to protecting your privacy. As the official managers of The Afropolitan Reward Program (TARP), we collect, process, and safeguard your personal data to deliver seamless, secure, and engaging lifestyle benefits. This policy explains how your information is handled across TARP platforms and services.

2. What Information We Collect

We collect personal data to deliver, improve, and personalize the TARP experience. This includes:

  • Personal & Identity Data: Name, phone number, email address, date of birth, photograph, identification documents.
  • Account & Investment Data: Tier level, Afropolitan wallet ID, referral data, rewards history.
  • Transaction & Redemption Data: Partner visits, transaction value, redemption counts, TARP points balance.
  • Technical Data: Device ID, browser type, IP address, geolocation (where applicable).
  • Communication Records: Messages via SMS, WhatsApp, email, in-app chat, support requests, and dispute logs.

3. Why We Collect and Use Your Information

We collect your information for the following lawful and transparent purposes:

  • Program Operations: To validate transactions, apply tier-based benefits, and manage loyalty privileges.
  • Customer Engagement: To notify you about rewards, new partners, and gamification milestones.
  • Improvement & Analytics: To improve the program based on usage trends and behavior patterns.
  • Security & Fraud Prevention: To detect and prevent unauthorized activity and safeguard user trust.
  • Compliance: To fulfill obligations under applicable laws and financial regulations.

4. How We Share Your Information

We may share your information in limited and secure ways:

  • With Partner Merchants & Service Providers: Only for validating eligibility and processing in-store or platform-based rewards.
  • With Technical Partners (e.g., RMA Operators): To power and maintain program infrastructure securely.
  • With Law Enforcement or Regulators: Only when required by law or to protect your rights or the integrity of the TARP system.
  • With Internal Units of TACHS: For operational, analytics, and support purposes only.

We do not sell your data. We ensure all third-party processors comply with Nigerian Data Protection Regulation (NDPR) and applicable global standards (e.g., GDPR-equivalent protocols).

5. Cross-Border Data Transfers

Where necessary, some data may be processed or stored securely on cloud servers located outside Nigeria. TACHS ensures any such transfers are safeguarded using:

  • Data Processing Agreements (DPAs)
  • Contractual Standard Clauses (SCCs)
  • Secure cloud encryption standards

6. Data Retention

We retain user data based on purpose:

  • Active TARP Accounts: Up to 12 months after last interaction or downgrade.
  • Transactional/Compliance Data: Up to 7 years (as required for audit/legal purposes).
  • Once retention obligations are met, your data is anonymized or securely deleted.