Customer Privacy Notice

NKEMSTORE runs a multi-vendor marketplace connecting customers to local vendors. This notice explains what we collect from you as a customer, why, and what you can do about it, in line with the Nigeria Data Protection Act (NDPA) 2023.

1. What We Collect

Some of this you type in yourself; some of it we generate from how you use the platform.

• Account details: name, email, phone number, gender, date of birth, a username we can auto-generate for you, and a password we store hashed we never see or keep it in plain text.
• Delivery information: your saved address(es), country/state/city, and phone number, so vendors and delivery agents can find you.
• Location: your city, and GPS coordinates only if you grant permission this is what powers "vendors near you" and delivery-fee calculation. You can browse without it, though your results will be less relevant.
• Order history: what you bought, from which vendor, payment reference, delivery status, and any coupon codes or referral links you used.
• Reviews and ratings you leave on products, tied to a verified purchase.
• Referral activity: if someone referred you, or you refer others, we record that relationship so rewards can be issued correctly.
• Two-factor authentication data, if you enable it, we store a secret key (via Google Authenticator-compatible TOTP) used only to verify your login, never your actual authenticator app data.
• Device and usage data: IP address, browser, and general usage patterns, mainly for fraud prevention and fixing bugs.

2. Why We Collect It

Mostly so your orders actually arrive. Beyond that: to show you vendors and products relevant to where you are, to send order and delivery updates by WhatsApp, email, or SMS (through Termii), to calculate and pay out referral coupon rewards correctly, to stop the same coupon or referral bonus being abused across accounts, and to keep the platform secure. We don't sell this information to anyone.

3. Legal Basis

• Contract: we need your delivery address and payment reference to actually fulfil an order, there's no way around that one.
• Consent: promotional WhatsApp/email messages, and sharing your live GPS location.
• Legitimate interest: fraud checks, coupon-abuse prevention, and keeping accounts secure.
• Legal obligation: tax and transaction record-keeping under Nigerian law.

4. Who Sees Your Data

A vendor you order from sees your name, delivery address, and phone number enough to get your order to you, nothing more. A delivery agent assigned to your order sees the same, plus your live order status. Paystack processes your payment directly; we never see or store your card number. Termii delivers our SMS notifications on our behalf. None of these parties may use your data for anything beyond what we've engaged them to do.

5. How Long We Keep It

For as long as your account stays open, and for at least seven years after a transaction for tax purposes, that part isn't optional even if you delete your account, but everything else tied to a closed account is removed on request.

6. Your Rights Under the NDPA

You can ask us for a copy of what we hold on you, correct anything wrong, ask us to delete your account (subject to the tax-retention point above), withdraw consent for marketing at any time, or turn off 2FA and location sharing whenever you like. Email privacy@nkemstore.com and we'll act on it if you're unhappy with our response, you can also complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

7. Cookies

We use cookies to keep you logged in and remember your location preference. Full detail is in our Cookie Notice.

8. Security

Passwords are hashed, not stored in plain text. We support optional two-factor authentication we'd genuinely recommend turning it on. HTTPS is used throughout. No platform is unbreakable, so use a password you don't reuse elsewhere.

9. Under 18s

NKEMSTORE isn't intended for anyone under 18. If you believe a minor has created an account or provided us data, contact us and we'll remove it.

10. Changes

If we make a material change to this notice, we'll tell you by email or an in-app notice, not just quietly edit the page.

11. Contact

Data Controller: NKEMSTORE
Email: support@nkemstore.com
NDPC: ndpc.gov.ng