Privacy Policy
Last updated: March 2026
1. Introduction
Letzplay ("we", "us", "our") is committed to protecting the privacy of our customers, their children, and all visitors to our website and facilities. This Privacy Policy explains how we collect, use, store, and protect personal information in compliance with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act (NDPA) 2023.
2. Information We Collect
Parent/Guardian Information
- Full name, email address, phone number
- Payment information (processed securely via Paystack — we do not store card details)
- Account credentials (password stored using industry-standard hashing)
- Communication preferences
Child Information
- First name, date of birth, and age
- Medical/allergy information (provided voluntarily for safety purposes)
- Activity and education progress records
- Check-in/check-out timestamps
Automatically Collected
- Device and browser information when using our website
- IP address and general location data
- Website usage patterns (pages visited, time spent)
3. How We Use Your Information
- Providing and managing playground access, memberships, and bookings
- Ensuring child safety during visits (check-in/check-out, medical info for emergencies)
- Tracking educational activities and providing parent progress updates
- Processing payments and issuing receipts
- Sending important notifications (booking confirmations, membership updates)
- Improving our services through anonymised analytics
- Marketing communications (only with your explicit consent)
4. Children's Data Protection
We take the protection of children's data extremely seriously. We only collect the minimum data necessary for providing a safe play environment and educational services. Children's data is:
- Collected only with parental/guardian consent
- Never sold to third parties
- Never used for marketing purposes
- Stored separately with enhanced access controls
- Deleted upon request or when no longer needed for service delivery
5. Data Sharing
We do not sell personal information. We may share data with:
- Payment processors (Paystack) — to process transactions securely
- Communication providers — to send SMS and email notifications
- Law enforcement — only when required by Nigerian law or court order
6. Data Security
We implement appropriate technical and organisational measures to protect personal data, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Role-based access controls for staff
- Regular security audits and monitoring
- Secure password hashing (PBKDF2 with SHA256)
- Audit logging of sensitive data access
7. Data Retention
We retain personal data only for as long as necessary to provide our services and comply with legal obligations. Membership data is retained for the duration of active membership plus 12 months. You may request deletion at any time.
8. Your Rights
Under the NDPR and NDPA, you have the right to:
- Access your personal data and receive a copy
- Correct inaccurate or incomplete data
- Request deletion of your data
- Withdraw consent for marketing communications
- Object to processing of your data
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC)
9. Cookies
Our website uses essential cookies required for authentication and security. We do not use third-party advertising cookies. Analytics cookies are used only with your consent to improve our services.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. The "Last updated" date at the top indicates the most recent revision.
11. Contact Us
For privacy-related inquiries, data access requests, or complaints, contact our Data Protection Officer at privacy@letzplayng.com or write to us at:
Letzplay Indoor Playground
Isheri North, OPIC
Lagos, Nigeria