SEFRELSHOP PRIVACY POLICY

1. Introduction

Welcome to SefrelShop (“SefrelShop,” “we,” “our,” or “us”).

SefrelShop is a digital marketplace dedicated to promoting and facilitating the sale of authentic Nigerian-made products by connecting buyers with local vendors, artisans, manufacturers, and service providers.

We respect your privacy and are committed to protecting your personal data in compliance with the Nigeria Data Protection Act (NDPA) 2023, the Nigeria Data Protection Regulation (NDPR), the General Data Protection Regulation (GDPR), and other applicable privacy laws.

This Privacy Policy explains how we collect, use, process, store, disclose, and protect your personal information when you use our website, mobile applications, products, and services.

By accessing or using SefrelShop, you agree to the practices described in this Privacy Policy.

2. Definitions

Personal Data means any information relating to an identified or identifiable individual.

Processing means any operation performed on personal data including collection, storage, use, disclosure, transfer, and deletion.

Data Subject means any individual whose personal data is processed.

Vendor means any seller, merchant, artisan, manufacturer, or business registered on SefrelShop.

Customer means any buyer or visitor using the platform.

3. Information We Collect

A. Information You Provide

We may collect:

  • Full name
  • Email address
  • Phone number
  • Residential or business address
  • Company information
  • National Identification Number (where legally required)
  • Tax Identification Number (where applicable)
  • Bank account information
  • Profile photos
  • Product listings and descriptions
  • Customer service communications

B. Transaction Information

We collect:

  • Purchase history
  • Payment records
  • Order information
  • Delivery information
  • Refund requests
  • Vendor earnings records

C. Technical Information

We automatically collect:

  • IP address
  • Browser type
  • Device information
  • Operating system
  • Location data (where permitted)
  • Cookies
  • Usage analytics
  • Log data

D. Marketing Information

We may collect:

  • Survey responses
  • Feedback submissions
  • Newsletter subscriptions
  • Advertising interaction data

4. Legal Basis for Processing

We process personal data based on:

Contractual Necessity

To provide marketplace services and fulfill transactions.

Consent

Where you have provided explicit consent.

Legal Obligations

To comply with applicable laws, regulations, tax requirements, anti-money laundering requirements, and government directives.

Legitimate Interests

To improve our services, prevent fraud, secure our platform, and support business growth.

5. How We Use Your Information

We use personal information to:

  • Create and manage user accounts
  • Verify vendor identities
  • Process transactions
  • Facilitate product deliveries
  • Provide customer support
  • Improve platform performance
  • Detect fraud and abuse
  • Conduct analytics and research
  • Communicate updates and announcements
  • Send marketing communications (where permitted)
  • Comply with legal obligations
  • Resolve disputes

6. Vendor Verification and KYC

To maintain trust and platform integrity, SefrelShop may conduct Know Your Customer (KYC) procedures for vendors.

This may include the collection of:

  • Government-issued identification
  • Business registration documents
  • Tax information
  • Banking information
  • Utility bills or address verification documents

Such information is processed securely and only for legitimate verification purposes.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Authenticate users
  • Remember preferences
  • Improve user experience
  • Analyse platform performance
  • Deliver relevant advertisements

Users may manage cookie preferences through browser settings.

Disabling cookies may affect certain functionalities of the platform.

8. Sharing of Information

We do not sell personal data.

We may share information with:

Service Providers

Including:

  • Payment processors
  • Logistics providers
  • Cloud hosting providers
  • Analytics providers
  • Communication platforms

Legal Authorities

Where required by law, court order, or regulatory request.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets.

Platform Participants

Certain information may be shared between customers and vendors solely to facilitate transactions.

9. International Data Transfers

Your information may be transferred and processed outside Nigeria where necessary.

Where such transfers occur, SefrelShop will ensure appropriate safeguards are implemented, including:

  • Standard Contractual Clauses
  • Adequacy Decisions
  • Data Processing Agreements
  • Other lawful transfer mechanisms recognized by NDPA and GDPR

10. Data Retention

We retain personal data only as long as necessary for:

  • Service delivery
  • Legal compliance
  • Dispute resolution
  • Financial record keeping
  • Fraud prevention

Upon expiration of retention periods, data will be securely deleted, anonymized, or archived as required by law.

11. Data Security

We implement reasonable technical and organizational measures including:

  • SSL encryption
  • Secure cloud infrastructure
  • Access controls
  • Role-based permissions
  • Password protection
  • Regular security reviews
  • Secure payment integrations

Despite these safeguards, no method of transmission over the internet is completely secure.

12. Your Privacy Rights

Subject to applicable law, you may have the right to:

Access

Request copies of your personal data.

Rectification

Request correction of inaccurate information.

Erasure

Request deletion of personal data.

Restriction

Request limitation of processing activities.

Objection

Object to certain processing activities.

Portability

Receive your data in a structured format.

Withdraw Consent

Withdraw previously given consent.

Complaint

Lodge complaints with relevant data protection authorities.

13. Children’s Privacy

SefrelShop is not intended for individuals under 18 year of age.

We do not knowingly collect personal information from children.

If such information is discovered, it will be deleted promptly.

14. Marketing Communications

Users may opt out of marketing communications at any time by:

  • Clicking unsubscribe links
  • Updating account settings
  • Contacting us directly

Service-related communications may still be sent where necessary.

15. Third-Party Links

Our platform may contain links to third-party websites.

We are not responsible for the privacy practices of third-party services.

Users should review the privacy policies of external websites before sharing information.

16. Data Breach Notification

In the event of a personal data breach likely to result in risk to individuals:

  • Appropriate authorities shall be notified in accordance with NDPA requirements.
  • Affected users may be notified where required.
  • Corrective actions will be taken promptly to mitigate the impact.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Updated versions will be published on our website with a revised effective date.

Continued use of the platform after updates constitutes acceptance of the revised policy.

18. Contact Information

For privacy-related inquiries, requests, or complaints, please contact:

Sefrel Technologies Ltd.
Email: privacy@sefrelshop.com

Data Protection Officer (DPO):
Email: dpo@sefrelshop.com

19. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with:

  • Nigeria Data Protection Act (NDPA) 2023
  • Nigeria Data Protection Regulation (NDPR)
  • General Data Protection Regulation (GDPR), where applicable
  • Other applicable Nigerian laws and regulations

By using SefrelShop, you acknowledge that you have read and understood this Privacy Policy.