Privacy notice.

Who we are

This website, biliaminoba.org, belongs to Olalekan Biliamin Oba. He decides how personal data collected through the site is used, so he is the data controller under the Nigeria Data Protection Act 2023 (NDPA).

The site is built and run on his behalf by Aim One Company, which acts as a data processor and only handles your data on his instructions.

For anything about your personal data, email obalekan2@gmail.com with “Privacy” in the subject line.

What we collect

We only collect what you type into a form on this site.

Book launch RSVP: your name, email, phone or WhatsApp number, organisation or title (optional), number of seats, your guests’ names if you bring any, and any accessibility or dietary needs you choose to share. We also create a ticket code and record whether you checked in at the door.

Newsletter: your email address, and your name if you joined through the RSVP form.

Contact form: your name, email, organisation, what your message is about, an event date if you are inviting him to speak, and your message.

Spam protection: a scrambled (hashed) version of your IP address, kept for up to 24 hours to stop repeated automated submissions.

Please only share accessibility or dietary needs that you are comfortable sharing. We use them only to look after you at the event.

Book purchases happen on Selar, not on this site. Selar handles your payment and details under its own privacy policy.

Why we use it, and our lawful basis

To register you for the launch, send your ticket, calendar invite and reminders, manage seating and the waitlist, and check you in. We do this because you asked us to, and you give your consent with the tick box on the form.

To send the newsletter, only if you ask for it. Your consent is the basis, and you can withdraw it at any time with the unsubscribe link in every email.

To reply to your message through the contact form. We do this because you asked us to.

To keep the forms safe from spam and abuse. This is in our legitimate interest and uses the minimum data needed.

We do not sell your data, use it for advertising, or make automated decisions about you.

Who can see it

Your data is seen only by the small team that runs the launch and this website, and by the service providers below, who process it for us under contract:

Netlify hosts the website and stores form submissions.

Resend sends the confirmation, reminder and reply emails.

On the day of the launch, the door team will see your name and ticket code to check you in. We will only share data with anyone else if the law requires it.

Storage outside Nigeria

Netlify and Resend run their servers outside Nigeria, mainly in the United States and the European Union. Sending your data to them is necessary to provide the service you asked for, such as your ticket or a reply.

Both providers protect data with encryption in transit and contractual data protection commitments, and access to the data is limited to people who need it. This is how we meet the cross-border transfer rules in the NDPA.

How long we keep it

RSVP records: deleted within six months after the launch, so by 31 May 2027.

Newsletter: kept until you unsubscribe. After that we keep only a record that you unsubscribed, so we do not email you again.

Contact messages: deleted 12 months after our last reply.

Spam-protection records: deleted after 24 hours.

Your rights

Under the NDPA you can ask us to:

Show you the personal data we hold about you and give you a copy.

Correct anything that is wrong or incomplete.

Delete your data.

Stop or limit how we use it, or object to a use.

Send your data to you or another organisation in a common format.

Withdraw your consent at any time. This does not affect anything we did before you withdrew it.

To use any of these rights, email obalekan2@gmail.com. We will reply within 30 days. If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

Keeping it secure

The site runs only over an encrypted connection (HTTPS). Form data is stored in a private store that only the site’s own code can read. The admin page is protected by a password, and only the people running the launch have it.

Children

This site is meant for adults. If someone under 18 is coming to the launch, a parent or guardian should register them and give their details as a guest.

Cookies and visit counts

This site does not set any cookies on visitors, and it has no advertising trackers. Fonts, images and scripts load from the site itself.

Visit counts. To know which pages are useful, the site counts page views without cookies. For each view it records the page, the website you came from, any campaign tag in the link, your country, and whether you use a phone, tablet or computer. Your IP address is not stored. To count visitors rather than views, it keeps a short code that is scrambled with a secret and changes every day, so a visitor cannot be recognised from one day to the next. Counts are kept for up to 13 months.

Videos. Some pages may show YouTube or Vimeo videos. We use YouTube's privacy-enhanced mode and Vimeo's do-not-track setting, but when you press play, that company receives your visit under its own privacy policy.

The admin. The team who run this site sign in to a private admin page, which uses one essential cookie to keep them signed in. Visitors never see or use it.

If we add anything that needs cookies on visitors in future, we will ask for your permission first and update this notice.

Changes to this notice

If we change how we use personal data, we will update this page and the date below. Last updated: 25 October 2026.