Privacy policy

Tikka is run by [Tikka's registered company name], [registered address], Nigeria (“Tikka”, “we”). Businesses use Tikka to run drops: limited batches of Tikkas (digital cards with a reward inside) that people claim on WhatsApp and use at the business.

For the details people give when they claim a business's Tikka, that business and Tikka each decide how some of it is used, as explained below. You can reach us about anything in this policy at [privacy email].

To give you your Tikka and let you use it, we collect:

• the first name you type in;
• your WhatsApp number and WhatsApp profile name, which come with the message you send to claim;
• which drop you claimed from, the Tikka you got and its code;
• where you came from (for example the business's Instagram, a QR poster or the Tikka marketplace);
• the day and time you plan to visit, if you pick one;
• when you used your Tikka and, if the business types it in, how much you spent;
• your review and star rating, if you leave one;
• whether you ticked “Send me future drops”.

Claiming is free. We use these details to send your Tikka, let the business check and accept it at the counter, remind you before it runs out, and send the thank-you message after your visit.

• The business you claimed from sees your first name, WhatsApp number and profile name, the Tikka you got, your visit plan, when you used it and what you spent. They can message you on WhatsApp from their own phone, and they may keep you on their customer list.
• The business's staff see your first name and Tikka at the counter when they check your code. They never see your phone number.
• Everyone can see reviews, shown with your first name and the first letter of your last name (for example “Ada O.”). Other visitors never see your number.
• Tikka staff can see these details to run the service and handle reports and requests.

We don't sell your details, and we don't give them to other businesses.

If you ask to be told when a business drops again, we keep your WhatsApp number to send you that message. The business only ever sees how many people are waiting, never who. Asking to be notified doesn't make you one of the business's customers.

If you ask Tikka Studio for help, we keep what you send (your name, business, WhatsApp number and what you need) to reply to you on WhatsApp. If you ask to hear about Spark first, we keep your email or WhatsApp number only to tell you when it's ready. Neither is shared with any business.

Tikka sends you WhatsApp messages about the Tikkas you claim: the Tikka itself, a reminder before it runs out, and a thank-you after your visit with a link to review it.

A business's future drops only reach you if you ticked “Send me future drops” or asked to be notified. Reply STOP to Tikka on WhatsApp to stop messages from the business you last heard about, or STOP ALL to stop all Tikka messages. Claiming from that business again turns its messages back on.

The business can also message you directly from its own WhatsApp. To stop those, tell the business, or block its number in WhatsApp.

When you open a drop, we count the visit so the business can see how many people looked, tore open a Tikka and claimed. To count each person once without knowing who they are, your browser keeps a random code, and we only store a scrambled version of it that changes every day. These counts never include your name or number.

To stop anyone flooding a drop with fake claims, we also count how often each browser and internet address uses the claim, Notify me and report buttons. We only store a scrambled version of these, and throw the counts away after a day.

We also use a few small cookies to keep the site working: the random code above, one to show your Tikka again if you come back to the drop, and your chosen city on the marketplace.

We collect your name and email (or your Google account's name and email if you sign in with Google), your business's details, the WhatsApp number for your alerts and daily summary, your staff's emails, and your payments. Payments are handled by Paystack; we never see your card number.

You decide how you use your customers' details. You agree to use them only to follow up the people who claimed your Tikkas, to respect STOP, and not to sell or share them (see our terms).

We use these companies to run Tikka. They only use your details to provide their service to us.

• Supabase: our database, sign-in and file storage ([data location]).
• Vercel: hosts the website.
• Meta (WhatsApp Business Platform): sends and receives WhatsApp messages.
• Paystack: takes payments from businesses.
• Google: sign-in with Google for businesses, and the fonts on our pages.

Some of these store data outside Nigeria. [How these transfers are protected under the NDPA, to be confirmed.]

We keep claim details for as long as the business uses Tikka and [retention period] after that, so the business can see its history and we can deal with questions. Visit counts never had names in them. When you ask us to delete your details, we do it as described below.

Under the Nigeria Data Protection Act 2023 you can ask us to:

• tell you what we hold about you and give you a copy;
• correct anything that's wrong;
• delete your details;
• stop using them for messages you didn't ask for, or withdraw your consent at any time.

To ask, email [privacy email] or message Tikka on WhatsApp, and tell us the WhatsApp number you claimed with. We'll reply within [response time]. If you're not happy with our answer, you can complain to the Nigeria Data Protection Commission.

Tikka is meant for people aged [minimum age] and over.

If we change this policy in a way that matters, we'll update the date at the top and, for big changes, tell businesses by email.