Privacy Notice
Last updated: 11 November 2026 · Version privacy-2026-11
Who we are
OneUp Africa Ltd (RC 9513555), Lagos, Nigeria, trading as OneUp Hair, Irun Eko by OneUp and the DO IT! Academy, is the data controller for the personal data described here. Contact: WhatsApp 0703 152 9244 · dayo@myoneuphair.com.
What we collect
- When you register: your full name, WhatsApp number, city/state, what you want to do (sell, install or both) and whether you sell hair now.
- Payment status and reference from Paystack. We never see or store your card or bank details; Paystack processes them.
- Which advert or link brought you to us, if any.
- If you allow notifications on the app: a technical notification token for your device.
Why we use it (and our legal basis)
- To create and run your academy and reseller account, give you your reseller code and wholesale prices, and add you to our WhatsApp groups (to perform our agreement with you).
- To contact you about classes, orders, new drops and your account, and to send app notifications (your consent, which you can withdraw).
- To keep payment and tax records (legal obligation).
- To understand which adverts work (our legitimate interest, using only the campaign tag).
Where your data is stored
Your data is stored with our database provider, Supabase, on servers in the European Union (Ireland), and our website runs on Cloudflare. This is a transfer of personal data outside Nigeria. We rely on your consent, given when you tick the box at registration, and on our providers' security and contractual safeguards. The EU's data protection standards are at least as strong as Nigeria's.
Who we share it with
Only with the service providers that help us run the academy: Paystack (payments), Supabase (database), Cloudflare (website hosting) and WhatsApp/Meta (messaging). We do not sell your data.
How long we keep it
While your account is active, and for up to 6 years after your last payment for tax and accounting records. You can ask us to delete your account at any time.
Your rights
Under the Nigeria Data Protection Act 2023 you can ask to see, correct or delete your data, object to or restrict its use, receive a copy of it, and withdraw consent at any time. Withdrawing consent does not affect anything we did before. Message us on WhatsApp 0703 152 9244 or email dayo@myoneuphair.com and we will respond within 30 days. You can also complain to the Nigeria Data Protection Commission (NDPC).
Security
Access to your data is restricted to the OneUp team who need it. Our database cannot be read from the public internet, and all traffic is encrypted.
Changes
If we change this notice we will update the date and version above, and tell active members on WhatsApp if the change is significant.