Privacy Policy

Steeches Lifestyle runs a shared tailoring workspace at Gilmore Road, Asokoro Village, Abuja - FCT. This policy explains what personal data we collect when you register as a tailor, ask a referee to support you, or book a workstation — and what we do with it. It is written to meet the Nigeria Data Protection Act, 2023 (NDPA). Last updated: 13 November 2026.

Who is responsible for your data

Steeches Lifestyle is the data controller. Contact us about your data on +234 707 284 7412, by WhatsApp, or in person at Gilmore Road, Asokoro Village, Abuja - FCT.

What we collect

When you register as a tailor, we collect:

• Your full name, phone number, residential address, date of birth and marital status.
• Your NIN or BVN number (one, not both), which you type into the registration form.
• Your passport photograph, a photo or scan of your NIN card or slip, and your signature.
• Your two referees' names and phone numbers, which you give us so we can send them a secure link.

When your referees use their secure link, we collect their name, phone, address, relationship to you, passport photograph, NIN card or slip, and signature.

When you book, we collect your registration ID, the workstation and time you asked for, and the amount and payment reference for the booking. When an admin signs in, we collect their email address and password (passwords are hashed — they are never stored in plain text).

We do not collect analytics or advertising data. We do not use tracking cookies (see our Cookie Policy).

Why we collect it, and the lawful basis

• To verify who you are — your NIN or BVN is checked against the government record through a verification provider, and your name and date of birth are compared with what the provider returns. A mismatch is flagged for a person to review; it never rejects you automatically.
• To run the workspace — to approve registrations, take bookings, take payment in advance, hold a security deposit, and keep the cash and equipment records.
• To keep the workspace safe — to know who is using each machine and who to contact about a booking, damage, or a deposit.

The lawful basis under the NDPA is your consent (the checkbox on the registration form, which you must tick before you can submit) and the need to carry out the workspace arrangement you are asking for. You can withdraw consent as described under “Your rights” below, but withdrawing it ends your registration — we cannot run the workspace for someone whose identity we cannot verify.

Identity verification — please read

We are still confirming which verification provider to use (the providers under consideration are Dojah, Smile Identity, Prembly and VerifyMe). Until a live provider is connected, identity numbers are checked in our test environment only and are not treated as verified — approval still needs a person to review your documents. We will update this section when the live provider is connected.

How your data is stored and protected

• Your NIN or BVN is encrypted (AES-256-GCM) before it is stored. Only the last 4 digits are ever shown to staff — in the admin screens and in the office, the full number is never displayed, logged or sent anywhere it does not need to go.
• Your photos, NIN slip and signature are kept in private storage with no public link. Documents are stored in a private MinIO bucket when that storage is configured; until then they are kept in a private folder on the app server. Either way they are only reachable by a signed-in admin through an authenticated download, and every access is logged.
• Admin passwords are hashed with Better Auth's own cryptography. We never store a password in plain text, and we never ask you for your password by phone or WhatsApp.
• Only the workspace owner and staff can see registration data. Tailors do not have accounts and cannot see each other's details.

Who we share your data with

• The identity verification provider (once connected) — your NIN or BVN, name and date of birth, only to check them against the government record.
• Bachs.io — payment details needed to take a booking payment, once live payments are connected. Until then payments are recorded by an admin; no card or bank details are typed into this app.
• WhatsApp (through our Clowd gateway) — to send your phone verification code and your referees' secure links.

We do not sell your data, and we do not share it for advertising. We share it with anyone else only if the law requires it.

How long we keep it

We keep your registration data while you are an active tailor, and for a reasonable period afterwards so we can deal with bookings, deposits, and any query about your time in the workspace. The exact retention period has not been agreed yet; when it is, we will publish it here. Identity documents of tailors who are declined or who leave are deleted on request, unless the law requires us to keep a record.

Your rights

Under the NDPA you can:

• Ask what data we hold about you, and get a copy.
• Ask us to correct anything that is wrong.
• Ask us to delete your data, or to stop using it — subject to records we must keep by law (for example, payment and deposit records).
• Withdraw the consent you gave at registration.
• Complain to the Nigeria Data Protection Commission (NDPC) if you think we have handled your data wrongly.

To use any of these rights, contact us on +234 707 284 7412 or WhatsApp, or in person at Gilmore Road, Asokoro Village, Abuja - FCT. We will answer within a reasonable time.

Changes to this policy

If we change how we handle your data — for example when the live identity verification provider or the live payment route is connected — we will update this page and note the date at the top.