Privacy Policy

HOTNEWAFRO Entertainment Ltd., a company registered in the Federal Republic of Nigeria, is the data controller for personal data collected through hotnewafro.com and the HOTNEWAFRO Network services. Contact us at privacy@hotnewafro.com.

Account data

Name or display name, email address, password (stored hashed by our authentication provider), avatar, bio, links, notification preferences, and — where you sign in with Google — the basic profile data Google returns. Creator accounts may additionally hold payout and verification details.

Order and ticket data

Items purchased, order and ticket references, amounts, currency, billing and delivery addresses, delivery contact phone number, ticket scan status at events, and refund history. We receive a payment confirmation and the last four digits and card brand from our processor — never your full card number or CVV.

Content you submit

Comments, reviews, submissions, uploaded images and messages you send us, together with the account they were posted from.

Technical and usage data

IP address, device and browser type, referring page, pages and articles viewed, and interactions with playlists, charts and product listings, collected via cookies and similar technologies.

• To run your account — creation, sign-in, email verification, role and Creator upgrades. Basis: performance of a contract.
• To sell and deliver tickets, collectibles and merch — processing orders, issuing tickets, admission scanning, shipping, refunds and cancellations. Basis: performance of a contract.
• To take payment and prevent fraud — via third-party processors, including fraud and chargeback checks. Basis: contract and legitimate interests.
• To publish and moderate comments and submissions — including removing unlawful or infringing material. Basis: contract and legitimate interests.
• To handle intellectual property and takedown notices — investigating and responding to complaints. Basis: legal obligation and legitimate interests.
• To send service and marketing email — order, ticket and account notices are service messages; newsletters and drop alerts are sent with consent and can be unsubscribed at any time.
• To measure and improve the Platform — analytics on content and product performance. Basis: consent where required, otherwise legitimate interests.
• To meet accounting and tax obligations — retaining transaction records. Basis: legal obligation.

• Payment processors (such as Paystack, Stripe, Paddle and Shopify) — to take payment and process refunds. They act as independent controllers for payment data under their own privacy notices.
• Event organisers and venues — the attendee name and ticket reference needed to admit you to a third-party event.
• Fulfilment and delivery partners — the address and contact details needed to ship physical orders.
• Infrastructure and tooling providers — hosting, database, authentication, email delivery, file storage and analytics vendors acting as our processors.
• Professional advisers and authorities — where required by law, or to establish or defend legal claims.

We do not sell your personal data.

Some of our providers are located outside Nigeria, including in the European Union and the United States. Where personal data is transferred, we rely on appropriate safeguards such as contractual protections with the provider and their own certified transfer mechanisms.

• Account data: while your account is active, then up to 12 months.
• Order, ticket and payment records: at least 6 years, to satisfy Nigerian tax and accounting requirements.
• Published comments and submissions: until you or we remove them.
• Analytics data: typically up to 26 months, in aggregated or pseudonymised form where possible.

Subject to applicable law, you can request access to your data, correction of inaccurate data, deletion, restriction of processing, a portable copy, and you can object to processing based on legitimate interests. You can withdraw consent to marketing or non-essential cookies at any time.

Email privacy@hotnewafro.com and we will respond within 30 days. You may also complain to the Nigeria Data Protection Commission, or to your local supervisory authority if you are outside Nigeria.

We use strictly necessary cookies for sign-in, cart and checkout, plus analytics cookies to understand how content and products perform. Full detail — including categories and how to control them — is in our Cookie Policy.

Data is transmitted over TLS, passwords are hashed, and access to production data is restricted to authorised staff. No system is perfectly secure; tell us immediately if you suspect a problem with your account.

The Platform is not intended for children under 18. We do not knowingly collect their data and will delete it if we discover it.

We may update this policy. The "Last updated" date above shows the current version, and material changes will be notified on the Platform or by email.