Privacy Policy

When you send an enquiry: your name, email address, phone number (if you give it) and your message, plus any replies in the conversation.

When you buy something: your name, email address, phone number, delivery address, any note you add, and what you ordered. Card and bank details are entered on Paystack's or Flutterwave's secure page — we never see or store them.

Spam protection: a one-way fingerprint of your internet address, so we can limit automated abuse. Your actual IP address is not stored.

On your device: we remember your light/dark theme choice and, for members, the sign-in session. We don't use advertising or tracking cookies.

To answer your enquiry, process and deliver your order, send you updates about it, keep records we're required to keep, and protect the website from fraud and abuse. We use your information only for these purposes, on the basis of your request, our contract with you when you buy, and our legitimate interest in keeping the site secure.

We do not sell your personal information, and we don't send marketing emails.

Your enquiry or order goes to the venture you contacted or bought from, and to the Nzotta Group administrators. We also rely on these service providers, who process data on our behalf:

• Supabase — secure database where enquiries and orders are stored.
• Vercel — hosts this website.
• Paystack and Flutterwave — take payments.
• Brevo — sends emails such as replies and order updates.

Some of these providers store data outside Nigeria. We use them because they apply strong security measures, including encryption of data in transit.

• Unpaid or failed checkouts are deleted automatically after 7 days.
• Paid orders are kept for as long as we need them for delivery, customer service, and accounting and tax records.
• Enquiries and conversations are kept until they're no longer needed to help you, or until you ask us to delete them.

The website uses HTTPS encryption throughout. Access to enquiries and orders is limited to the venture concerned and the group administrators, each signing in with their own account. Private conversation links are long random codes that can't be guessed.

Under the Nigeria Data Protection Act 2023 you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that's wrong;
• delete your information (unless we must keep it, e.g. for tax records);
• stop or limit how we use it, or move it to another service.

To make a request, contact us through our contact page. We'll respond within 30 days. If you're not satisfied, you can complain to the Nigeria Data Protection Commission.

If we change how we handle personal information, we'll update this page and the date at the top.