Privacy Policy
Last updated 3 November 2026
This policy explains what personal data RightRock handles and why, in line with the Nigeria Data Protection Act 2023. RightRock is run by Right Rock Limited, a company registered in Nigeria.
Who this covers
- Cinema owners and staff who use RightRock. For this data, RightRock is the controller.
- Cinema customers who buy tickets. For this data the cinema is the controller and RightRock processes it on the cinema's behalf.
What we collect
- Account details: name, email, phone number, job title and a hashed password.
- Business details: trading and legal names, registration and tax numbers, addresses.
- Customer details the cinema records with an order: name, email and phone, and what was bought.
- Payment details: the payment provider handles card numbers. We keep only the card type and last four digits.
- Technical data: sign-in times, IP address and browser type, to keep accounts secure.
How we use it
- To provide the Service: accounts, ticket sales, e-tickets, receipts and reports.
- To verify businesses and prevent fraud.
- To bill for subscriptions and fees.
- To send service emails, such as codes, invitations, receipts and billing notices. We don't sell personal data or use customer data for our own marketing.
Sharing
We share data only with providers that help run the Service (hosting, email delivery, payment processing), under contracts that protect it, or where the law requires.
Keeping it safe
Data is encrypted in transit, passwords are hashed, and access is limited to people who need it. We keep data while an account is open and as long as the law requires after.
Your rights
You can ask to see, correct, move or delete your personal data, or object to how it's used. Cinema customers should contact the cinema first; we'll help the cinema respond.
Contact
For privacy questions or to use your rights, email hello@rightrock.co or call +234 904 492 8510.