Afoomart Privacy Notice

1. Introduction & Data Controller

Afoomart Online Marketplace Limited ("Afoomart", "we", "us", or "our") operates the digital marketplace accessible via afoomart.com. This Privacy Notice describes our practices regarding the collection, processing, transfer, and safeguarding of personal data belonging to buyers, merchants, affiliates, and visitors.

We are registered and operate under the laws of the Federal Republic of Nigeria. Our data handling procedures strictly conform to the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR), and relevant regulatory directives issued by the Nigeria Data Protection Commission (NDPC).

2. Categories of Information We Collect

We collect and process the following categories of information to provide seamless marketplace services:

• Identity & Account Data: Full legal name, username, email address, password hash, and date of birth. For merchants, corporate registration (CAC documents), Tax Identification Number (TIN), and national ID.
• Contact & Delivery Data: Residential/delivery address, state, LGA, mobile telephone number, and alternative contact details.
• Financial & Payment Tokens: Encrypted transaction reference tokens, bank account details (for merchant payouts and customer refunds), and billing records. Note: Afoomart does not store raw 16-digit debit card numbers or CVVs on our servers.
• Transaction Data: Historical order records, products purchased, cart contents, delivery timestamps, and customer reviews.
• Technical & Usage Data: IP address, device fingerprints, browser version, operating system, and on-site behavioral analytics.

3. Lawful Basis & How We Use Your Data

We only process your personal information under established legal bases stipulated by the NDPA 2023:

• Contractual Performance: To process marketplace orders, secure payments, deliver parcels to your doorstep, and process returns or refunds.
• Legal & Regulatory Compliance: To comply with anti-money laundering (AML), Know-Your-Customer (KYC), tax withholding, and accounting statutory obligations under Nigerian law.
• Legitimate Interests: To prevent marketplace fraud, detect counterfeit listings, safeguard user accounts, and improve website performance.
• Consent: To send promotional deal updates, newsletters, or marketing alerts where you have explicitly opted in. You retain the right to withdraw consent at any time.

4. Escrow Security & Payment Processing

All online card transactions, bank transfers, and USSD payments on Afoomart are processed via PCI-DSS Level 1 compliant Nigerian payment gateways (Paystack, Flutterwave, Interswitch, and Moniepoint).

5. Data Sharing with Logistics & Third Parties

We do not sell, rent, or lease your personal data. We only share necessary subsets of data with verified entities:

• Logistics & Courier Partners: Your delivery name, address, phone number, and order item breakdown are shared with verified delivery partners (e.g., GIG Logistics, Speedaf Express, DHL Nigeria) exclusively for physical fulfillment.
• Verified Sellers: Merchants receive customer shipping details and items ordered solely to package and dispatch products.
• Law Enforcement & Regulators: Disclosed only when legally mandated by court order or regulatory directive from the NDPC, FCCPC, or EFCC.

6. Your Statutory Rights Under NDPA 2023

As a Nigerian data subject, you enjoy the following enforceable rights:

• Right of Access: You can request a certified copy of all personal data held about you by Afoomart.
• Right to Rectification: You may update or correct inaccurate profile, address, or payment details directly in your account dashboard.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your account and personal data, subject to statutory transaction retention periods.
• Right to Object & Restrict: You may object to direct marketing or automated profiling at any time.
• Right to Lodge a Complaint: If you believe your data has been compromised, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).

7. Cookies & Session Management

Afoomart uses essential cookies to remember your shopping cart contents, maintain your active session, authenticate logins, and protect against CSRF attacks. Analytics cookies are utilized in an anonymized fashion to measure server load and optimize page speed.

8. Contact Our Data Protection Officer (DPO)

For inquiries, data access requests, or privacy concerns, please contact our dedicated Data Protection Officer: