Kapital Lounge ("we", "us") runs Kapital Bistro Ondo, Kapital Lagos and BlingX Lagos, this website and the Kapital Club rewards programme. This policy explains what we collect, why, and the choices you have. We handle personal data under the Nigeria Data Protection Act 2023.
What we collect
- Account details: your email address, and your name and phone number if you add them. If you sign in with Google, we receive your name and email from Google.
- Visits and rewards: the spends you lodge (center, visit date, amount, receipt number), the receipt photos you upload, your points balance and history, claims and merch you reserve, and reservations and enquiries you send.
- Messages you choose: whether you want updates by email, WhatsApp or browser notifications.
- Technical data: a sign-in cookie that keeps you signed in, and the device and browser details sent with each visit, used to keep accounts secure.
How we use it
- To run your account and the Kapital Club: crediting points, confirming claims and handing over merch.
- To read your receipts. When you upload a receipt, an automated service reads the date, time, amount, receipt number and who was paid, to fill in the form for you and to spot receipts that have been used before. Our staff make every decision on your points; the automated reading only helps them check.
- To send you what you ask for: sign-in codes, updates on your requests, and offers if you opt in.
- To prevent fraud and misuse, and to meet our legal and tax obligations.
Who we share it with
We do not sell your data. We share it only with providers who help us run the service, under contracts that protect it:
- Amazon Web Services, for hosting, file storage and email.
- Google, for Google sign-in and for reading receipt photos.
- Our WhatsApp messaging provider, if you choose WhatsApp updates.
We may also share data when the law requires it, or to protect our guests, staff or business.
How long we keep it
We keep your account and rewards history while your account is open, and for as long as the law requires afterwards for tax and accounting records. You can delete your account at any time, as described below.
Your rights
You can ask to see, correct or delete your data, to object to how we use it, or to receive a copy of it. You can change your message choices in your account at any time. You may also complain to the Nigeria Data Protection Commission.
Deleting your account
You can delete your account yourself at any time:
- Sign in, open Profile in your account and choose Delete account.
- Type your email address to confirm.
We then remove your name, email address, phone number, birthday and Google sign-in link, and sign you out on every device. Your points and visit history stay only as anonymous records for tax and accounting, and can no longer be linked to you.
If you cannot sign in, email info@kapitalbistro.com from the address on your account and we will delete it for you.
Keeping it safe
We use encrypted connections, private storage for receipts, and staff access limited to the people who need it.
Children
Our services are for adults. We do not knowingly collect data from anyone under 18.
Changes and contact
We will update this page when our practices change and show the date it last changed. For any privacy question or request, email info@kapitalbistro.com.
Last updated 10 November 2026