Privacy Policy

1. Who we are

Ace Legends Club ("the Club", "we", "us") is a community of professionals and entrepreneurs with roots in Akoko, Ondo State, Nigeria, with members living in Nigeria, Canada, the United States, the United Kingdom, Italy, Australia, the United Arab Emirates, Côte d'Ivoire and other countries.

The Club is responsible for the personal information described in this policy. You can reach us at admin@acelegends.org.

2. Information we collect

3. How and why we use it

• To run your membership (because you asked to join): reviewing applications, checking referees, issuing Member IDs, keeping the member directory and sending Club notices.
• To manage dues and the Club's finances (membership and legal record-keeping): recording payments and showing members their own payment history.
• To let you sign in securely: emailing one-time codes and showing you only your own record.
• To show members on our website (with your consent): names, roles, photos, short profiles and business listings appear publicly only if you agree. You can ask us to remove them at any time.
• To connect members (with your consent): for example, sharing the members' WhatsApp group with signed-in members.
• To answer questions sent through the website, email or WhatsApp.
• To keep the Club and website safe (our legitimate interest): preventing spam, fraud and misuse.

We do not sell your personal information, rent it, or use it for advertising.

4. Who we share it with

• Club executives and administrators who need it for their role, such as the General Secretary for membership records and the Director of Finance for dues.
• Service providers that run our tools: Webador (website and forms), Google (Google Sheets, Apps Script and Gmail, which store member records and send sign-in codes), WhatsApp (messaging), and Ecobank or an online payment provider such as Paystack or Flutterwave (payments). They may only use your information to provide their service to us.
• Other members, only for what you choose to share, such as your profile on the website or your number in the members' WhatsApp group (which other group members can see).
• Authorities, if the law requires us to.

5. Members in other countries

Because our members live in many countries and our service providers operate internationally, your information may be stored or processed outside the country you live in, for example on Google servers in the United States or Europe. We only use reputable providers with strong security, and we apply this policy wherever your information is held.

We aim to respect the privacy laws that apply to our members, including Nigeria's Data Protection Act 2023, Canada's privacy laws, the UK GDPR and Data Protection Act 2018, the EU GDPR (for members in Italy and other EU countries), Australia's Privacy Act, the UAE's data protection law and applicable US state laws.

6. How long we keep it

• Unsuccessful applications: deleted within 12 months.
• Member records: kept while you are a member, and for up to 2 years after you leave, unless you ask us to delete them sooner.
• Financial and dues records: kept for up to 6 years for accounting and audit purposes.
• Sign-in codes: expire after 10 minutes and are never stored in readable form.
• Website photos and profiles: removed when you leave or when you ask us to.

7. How we protect it

• Member records are kept in a private spreadsheet that only authorised administrators can open.
• The members portal uses your Member ID plus a code sent to your email, and shows each member only their own record.
• Administrator accounts are protected with 2-step verification.
• We limit what we collect to what we need.

No system is completely secure. If a breach affects your information and puts you at risk, we will tell you and, where the law requires, the relevant regulator, as quickly as possible.

8. Your rights

Depending on where you live, you can ask us to:

• tell you what information we hold about you and give you a copy;
• correct anything that is wrong or out of date;
• delete your information, where we no longer need it or you withdraw consent;
• stop or limit certain uses, including removing your profile or photo from the website;
• send your information to you or another organisation in a common format;
• withdraw any consent you gave, at any time.

Email admin@acelegends.org with your request. We will reply within 30 days, and may ask you to confirm your identity first. Members can also see much of their record at any time by signing in to the members portal.

9. Website, cookies and other services

Our website is hosted by Webador, which may use essential cookies to make the site work. We do not use advertising cookies. Some parts of the site load content from other services, which receive your IP address when they do:

• Google (fonts, and the members portal sign-in);
• Pexels (background videos and photos);
• flagcdn.com (country flag pictures in the members portal);
• WhatsApp (only if you click a WhatsApp button).

10. Age

Membership is for adults aged 18 or over. We do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If we make important changes, we will tell members by email or in the members' WhatsApp group.

12. Contact and complaints

If you are unhappy with how we handle your information, please contact us first so we can put it right. You can also complain to the data protection authority where you live, for example:

• Nigeria: Nigeria Data Protection Commission (NDPC)
• Canada: Office of the Privacy Commissioner of Canada
• United Kingdom: Information Commissioner's Office (ICO)
• Italy: Garante per la protezione dei dati personali
• Australia: Office of the Australian Information Commissioner (OAIC)
• United States: your state attorney general or consumer protection office