Ariya by Abbie is a travel and events company based in Lagos, Nigeria. We curate holiday packages, bespoke private and corporate trips, and destination events for our clients and their guests. This policy explains what personal information we collect, why we collect it, how we keep it safe, and the choices you have. It applies to our website, our enquiry and booking process, our event invitation and RSVP system, and the messages we send you on WhatsApp and email.
Contents
1.Who we are
Ariya by Abbie ("we", "us", "our") is the data controller for the personal information described in this policy. We are based in Lagos, Nigeria, and we process personal information in line with the Nigeria Data Protection Act 2023 (NDPA) and, where it applies to travellers from other countries, other applicable data protection laws.
You can reach us at hello@ariyabyabbie.com or on WhatsApp at +234 813 640 5036.
2.Information we collect
We only collect what we need to plan and deliver your travel or event experience. Depending on how you interact with us, this may include:
When you enquire or book a trip
- Your name, email address and WhatsApp or phone number
- The kind of trip you are interested in, your preferred destination and dates, group size and any special requests
- For confirmed bookings: passport details, date of birth, nationality, emergency contact, dietary or accessibility needs, and payment confirmation (we do not store card numbers)
When you are invited to an event we organise
- Your name and WhatsApp number, provided to us by the event host or by you
- Your RSVP response (attending, not attending, maybe) and when you gave it
- Any optional services you ask us to help with, such as visa support, flights or airport transfers, and anything you write in the "other" field
- Whether and when your personal invitation link was opened, so we know who has received their invitation
When you use our website
- Basic technical information such as your IP address, browser type and the pages you visit, collected by our hosting provider for security and performance
When you message us
- The content of WhatsApp messages, emails and calls between you and our team, so we can respond and keep a record of what was agreed
3.How we use your information
| Purpose | Legal basis under the NDPA |
|---|---|
| Responding to your enquiry and preparing a proposal | Taking steps at your request before entering a contract |
| Booking and delivering your trip or event (flights, hotels, transfers, visas, activities) | Performance of our contract with you or the event host |
| Sending event invitations, RSVP confirmations, reminders and post-event messages | Legitimate interest of the event host and ourselves in organising the event; you can opt out at any time |
| Tracking RSVP responses and service requests so we can plan numbers, transport and accommodation | Performance of our contract with the event host |
| Telling you about future packages and events we think you'd enjoy | Your consent, which you can withdraw at any time |
| Keeping records for accounting, tax and dispute resolution | Legal obligation and legitimate interest |
| Keeping our website and systems secure | Legitimate interest |
4.Event invitations and RSVPs
When a client asks us to organise an event, such as a destination birthday or group trip, they give us the names and WhatsApp numbers of the people they want to invite. We use this to send each guest a personal invitation link and to collect their response.
If you received an invitation from us, the event host has shared your details with us so we can organise their event. We use your information only for that event: to invite you, record your response, arrange any services you ask for, and keep you informed. We do not add you to a marketing list unless you separately ask us to.
Your personal invitation link is unique to you. Anyone with the link can view the invitation and update your response, so please don't forward it. If you'd rather receive a fresh link, contact us and we'll issue one.
The event host can see the guest list for their event, including who has responded and what services guests have requested, because they need this to plan. We do not share one guest's details with other guests.
5.WhatsApp and email messages
WhatsApp is how most of our clients prefer to hear from us, so we use it for invitations, confirmations, reminders, trip updates and customer support. Messages are sent from our business number, +234 813 640 5036, under the name Ariya by Abbie.
WhatsApp is operated by Meta Platforms. Messages are end-to-end encrypted between your phone and ours, but WhatsApp's own privacy policy governs how Meta handles your account. We may use Meta's WhatsApp Business Platform or an approved Nigerian messaging provider to send messages; these providers process your number and message content on our behalf and under our instructions.
You can stop receiving messages from us at any time by replying STOP or telling us in any message. We will still send essential messages about a trip or event you are booked on.
6.Who we share your information with
We never sell your personal information. We share it only where necessary to deliver what you've asked for:
- Travel suppliers — airlines, hotels, tour operators, transfer companies, visa agents and insurers, to make your bookings. They receive only what they need (for example, a hotel receives names and dates, not your full enquiry).
- Event hosts — the client who organised the event you've been invited to, who can see the guest list and responses for that event.
- Service providers who help us run our business: website and database hosting (Vercel and Supabase), email delivery, WhatsApp messaging, and accounting. They process data on our behalf and are bound by contract to protect it.
- Authorities where the law requires it, such as immigration, customs or a court order.
7.International transfers
Because we organise international travel, your information will be sent to suppliers in the countries you travel to. Our website and database are hosted on servers in the European Union and the United States. Where personal information leaves Nigeria, we rely on the recipient being in a country with adequate protection, contractual safeguards, or the transfer being necessary to perform your booking, as permitted by the NDPA.
8.How long we keep it
- Enquiries that don't become bookings: up to 12 months, so we can follow up if you come back.
- Bookings and trip records: 6 years after the trip, for accounting, tax and in case of a dispute or claim.
- Event guest lists and RSVPs: up to 12 months after the event, then deleted unless the host asks us to keep them for a follow-up event.
- Marketing consent: until you withdraw it.
- Passport and ID copies: deleted within 30 days of the trip ending unless a supplier requires longer.
9.How we protect it
Your information is stored in an access-controlled database with encryption in transit and at rest. Only authorised members of our team can access the event dashboard, and access is password-protected. Invitation links use long random codes that cannot be guessed. We review who has access regularly and remove it when someone leaves the team. No system is perfectly secure, but if we ever become aware of a breach affecting your information we will tell you and the Nigeria Data Protection Commission as the law requires.
10.Your rights
Under the NDPA you have the right to:
- Access the personal information we hold about you
- Correct anything that is inaccurate or out of date
- Delete your information, where we no longer need it for a booking, event or legal obligation
- Object to or restrict certain uses, including marketing
- Withdraw consent at any time where we rely on it
- Receive a copy of your information in a portable format
- Complain to the Nigeria Data Protection Commission (ndpc.gov.ng) if you're unhappy with how we've handled your information
To exercise any of these, email hello@ariyabyabbie.com or message us on WhatsApp. We'll respond within 30 days and may ask you to confirm your identity first.
11.Cookies
Our public website does not use advertising or tracking cookies. Our hosting provider may set a small number of technical cookies needed for security and performance. Our events dashboard, used only by our team, sets a login cookie so staff stay signed in. We don't use third-party analytics that track you across other websites.
12.Children
Our family packages and events often include children. We collect children's details (name, age, passport information, dietary needs) only from a parent or guardian, and only to make their travel arrangements. We don't send marketing to children and don't knowingly collect their information directly.
13.Changes to this policy
We'll update this page when our practices change and show the date at the top. If a change significantly affects how we use your information, we'll let you know by email or WhatsApp before it takes effect.
Contact us
Questions about this policy or your information? We're happy to help.
Email: hello@ariyabyabbie.com
WhatsApp: +234 813 640 5036
Post: Ariya by Abbie, Lagos, Nigeria