LOBB
Book a coach. Not a favor.
Legal Document
Privacy Policy
Effective date: June 2026  ·  Governed by the Nigeria Data Protection Act (NDPA) 2023
Your data, explained plainly. This policy tells you exactly what information LOBB collects from you, why we need it, and how we protect it. We do not sell your data to anyone.
01

Who Controls Your Data

LOBB Sports Technologies Limited is the Data Controller — meaning we are responsible for deciding how and why your personal data is processed. If you have any questions about your data, contact us at: privacy@lobb.ng

Our Data Protection Officer is the Chief Operating Officer of LOBB, reachable at the same email address.

02

What Data We Collect

Data You Give Us

DataWho It Applies ToWhy We Collect It
Full nameAll usersAccount identity
Phone numberAll usersLogin (OTP), booking confirmations, support
Email addressOptional for all usersReceipts, account communications
Profile photoAll usersDisplayed on profile and booking cards
NIN (National Identification Number)Coaches onlyIdentity verification before going live
BVN (Bank Verification Number)Coaches onlyBank account verification for payouts
Bank account detailsCoaches onlyProcessing coach payouts via Paystack
Coaching credentials / certificationsCoaches onlySupporting the LOBB Verified standard
Demo video linkCoaches onlyDisplayed on public coach profile
Booking notesPlayersPassed to the coach to prepare for sessions

Data We Collect Automatically

  • Device and browser information — type of device, browser version, operating system. Used to ensure the app works correctly on your device.
  • Usage data — which pages you visit, which coaches you view, how long you spend on pages. Used to improve the platform.
  • IP address — used for security (detecting unusual login attempts) and approximate location.
  • Session data — booking history, cancellation history, review history.

What We Do Not Collect

  • We do not collect card numbers or payment credentials. These are handled entirely by Paystack.
  • We do not collect biometric data (fingerprints, facial recognition) directly. If an identity verification provider uses biometrics, their own privacy policy applies to that step.
03

Why We Use Your Data

PurposeLegal Basis
Creating and managing your accountContract — necessary to provide the service
Processing bookings and paymentsContract — necessary to complete your booking
Verifying coach identity (NIN/BVN)Legal obligation + consent (you provide explicit consent at the verification step)
Sending booking confirmations and reminders via SMSContract — part of the service you signed up for
Displaying coach profiles to playersContract — core platform function
Improving the platform (analytics)Legitimate interest — we want to build a better product
Detecting fraud and preventing abuseLegitimate interest + legal obligation
Sending marketing messages about new coaches or featuresConsent — you can opt out at any time
04

How Long We Keep Your Data

Data TypeRetention Period
Account data (name, phone, profile)Until you close your account, plus 12 months after closure for legal/dispute purposes
Booking records5 years (required for financial record-keeping under Nigerian law)
NIN / BVN verification records5 years after account closure (required for AML compliance)
Coach bank account detailsUntil coach account is closed, plus 5 years
Usage and analytics data12 months, then aggregated (not linked to you personally)
Complaint records3 years from the date of the complaint
05

Third-Party Services We Use

LOBB shares limited data with the following providers to operate the platform. Each provider is bound by their own privacy policies and, where applicable, data processing agreements with LOBB.

Paystack
Payment processing — handles all card and bank transfer transactions

Data shared: name, email, phone number, bank account details (for coaches). Paystack is a licensed Payment Service Provider under the Central Bank of Nigeria. Privacy policy: paystack.com/privacy

Termii
SMS delivery — sends OTP codes, booking confirmations, and reminders

Data shared: phone number and SMS message content only.

Smile ID / Identity Verification Provider
Coach identity verification — verifies NIN and BVN against government records

Data shared: coach's NIN, BVN, full name, date of birth. This provider processes sensitive identity data under a separate data processing agreement with LOBB. You give explicit, separate consent for this step during coach onboarding.

Supabase
Database and file storage — stores all platform data securely

Infrastructure provider. Data remains within LOBB's controlled environment.

Posthog
Product analytics — helps us understand how the platform is used

Data shared: anonymised usage events, page views, and interaction data. No personally identifiable information is included in analytics events.

06

Cookies and Tracking

LOBB uses a small number of cookies and similar technologies:

  • Session cookie — keeps you logged in while using the app. Strictly necessary. Cannot be disabled.
  • Referral tracking cookie — records which coach's referral link you arrived through, for 30 days, to attribute referral commissions correctly. Set only when you click a referral link.
  • Analytics cookie (Posthog) — tracks anonymised page views and interactions to improve the platform. You can opt out by adjusting your browser settings.

LOBB does not use advertising cookies or sell data to advertising networks.

07

Your Rights Under Nigerian Data Protection Law

Under the Nigeria Data Protection Act (NDPA) 2023, you have the right to:

  • Access — request a copy of the personal data LOBB holds about you
  • Correction — ask us to correct any inaccurate data
  • Deletion — ask us to delete your data (subject to legal retention requirements)
  • Restriction — ask us to stop processing your data in certain circumstances
  • Portability — request your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interest, including direct marketing
  • Withdraw consent — where we rely on consent, you can withdraw it at any time

To exercise any of these rights, email privacy@lobb.ng. We will respond within 30 days. If you are not satisfied with our response, you may contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

08

Data Security

LOBB takes reasonable technical and organisational measures to protect your data, including:

  • All data transmitted between your device and our servers is encrypted (HTTPS/TLS).
  • Sensitive data (NIN, BVN, bank details) is stored encrypted at rest.
  • Access to user data within LOBB is restricted to staff who genuinely need it.
  • Paystack handles all card data — we never see or store raw card numbers.

No system is 100% secure. If a data breach occurs that is likely to affect your rights, we will notify you and the NDPC within 72 hours of discovering it, as required by law.

09

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date and notify you by SMS. Material changes will require your re-acknowledgement before you can continue using the platform.

10

Contact

Data Controller: LOBB Sports Technologies Limited
Privacy enquiries: privacy@lobb.ng
General support: support@lobb.ng
Regulator: Nigeria Data Protection Commission — ndpc.gov.ng