This portfolio demo
PalmSteeze is a portfolio project operated by Adnan Muhammad Sadiq, not a real Lagos venue. This notice describes the personal, noncommercial demo. Bookings and payments are simulated; the Google account you choose and information you enter can be real.
Entrance verification is required for the application; these policy pages are available without it. You can browse verified pages without signing in. The administrator preview uses separate fictional records.
What we use and why
- Account information. Google sign-in provides your account identifier, name, email and basic profile information, which may include a profile image and verification status. Supabase stores the account and session records. We use verified identity to sign you in and keep each customer’s visits separate. Your account shows your name, email and profile image. The image loads directly from a restricted Google image host without a page referrer; if it cannot load, we show initials. We do not request your Google password, contacts, files or calendar.
- Visit and payment records. Selected space, dates, hours, prices, payment choice, reservation status and sandbox payment/refund references support the booking demonstration, safe retries and reconciliation. Private provider event records may also contain billing/contact information or masked payment details supplied to Checkout. Amounts shown in this demo do not create a real charge or a real balance due.
- Messages and administrator decisions. Cancellation reasons, decision notes, timestamps and customer/administrator identity snapshots support review and an attributable history. Please avoid sensitive information in free-text fields.
- Security and technical information. Signed entrance cookies verify application access, while authentication cookies verify the signed-in account. Turnstile processes browser and network signals on entrance and booking review. A separate preference cookie records your optional-memory choice. Service providers may record request, authentication and security diagnostics, including IP addresses. We do not add analytics, advertising trackers or marketing lists.
The purposes are providing the demo service you request and protecting it against misuse. The corresponding bases are steps at your request to provide that service and legitimate interests in security, reliable records and resolving disputes, subject to your rights. Choosing Google sign-in authorizes that provider connection; it is not blanket consent to unrelated processing. Optional tab-local saved choices rely on your opt-in, which you can withdraw on the Cookies page. The first-visit banner also offers necessary-only use; accepting optional memory is not consent to all personal-data processing. No analytics or advertising tracking is offered.
Services & international processing
Vercel hosts the application and processes request and security diagnostics. Google handles sign-in. Supabase hosts authentication, the database and payment recovery functions. Stripe hosts sandbox Checkout and processes test payment/refund events. Payment details entered on Stripe’s page go to Stripe, not a PalmSteeze card-entry form; use test details only.
Cloudflare Turnstile receives signals such as IP address, browser characteristics, site key and origin to assess automated traffic. Cloudflare also processes signals to improve bot detection under its own privacy notice. The application sends a short-lived verification token to Cloudflare; it does not send your booking selection or account name in that verification request.
The Supabase project is configured in eu-central-1 (Frankfurt, Germany). The hosted application uses Vercel; local and development-tunnel environments share the same Supabase database. These providers and remote infrastructure can process information outside Nigeria. A provider’s privacy terms describe its own handling; this demo does not promise Nigeria-only storage or a particular international-transfer safeguard.
Retention & access
Signing out removes this browser’s sign-in cookies; it does not delete your account, booking history or provider records. There is no self-service account deletion or automatic timed purge of account, booking, cancellation or audit records in this version. Ending a hold only changes its booking status. Historical price and identity snapshots remain part of the record.
Customers can view their own visits. Assigned administrators can view customer identity, bookings, cancellation requests and audit history to operate the demo. The project owner and authorized provider account administrators can access operational systems. Public previews do not grant that access.
Provider logs and backups have separate lifetimes and may outlast a change to the application database. We cannot promise immediate removal from every provider system. Retention and any justified exceptions must be assessed for a privacy request.
Your choices & rights
You may request information about processing, access or a copy, correction, deletion, restriction or portability where applicable; you may object to processing based on legitimate interests and withdraw consent where processing relies on it. Rights can have legal exceptions. There is no solely automated decision about your entitlement to a real workspace; automated security checks can prevent application access or a demo reservation; policy pages remain available.
For privacy requests or demo questions, contact Adnan Muhammad Sadiq at s.adnan.werk@gmail.com. State which information or right your request concerns and the account email, if relevant. Never send a password, sign-in code, security token or card details. The owner must verify account control before sharing or changing personal records. There is no automatic deletion button.
You can also raise a concern with the Nigeria Data Protection Commission. See its Nigeria Data Protection Act guidance. This notice is information about the demo, not a certification of legal compliance.
See Cookies & storage for browser choices and Demo Terms for booking and refund behaviour.