PRIVACY POLICY

Last updated: January 2024 | NDPA & NDPR Compliant

1. INFORMATION WE COLLECT

  • • Account information (name, phone number, email address)
  • • Delivery address and location data
  • • Payment information (processed securely via Paystack — we do not store card details)
  • • Order history and product preferences
  • • Communication records with our support team
  • • Device information and browsing activity on our platform

2. LEGAL BASIS FOR PROCESSING

Under the Nigeria Data Protection Act 2023 (NDPA) and the NDPR, we process your data based on:

  • • Consent: You provide consent when creating an account
  • • Contract performance: Processing orders and deliveries
  • • Legitimate interest: Fraud prevention and platform security
  • • Legal obligation: Tax and regulatory compliance

3. HOW WE USE YOUR INFORMATION

  • • Process and deliver your orders
  • • Send order updates via SMS and email
  • • Improve our services and user experience
  • • Prevent fraud and ensure platform security
  • • Send promotional offers (only with your explicit consent)
  • • Comply with legal and regulatory requirements

4. DATA SHARING

We share your data only with:

  • • Vendors (only order-related information for fulfillment)
  • • Paystack (for payment processing)
  • • Delivery partners (delivery address only)
  • • Law enforcement (when legally required)

We never sell your personal data to third parties.

5. DATA SECURITY

We implement industry-standard security measures including encryption, secure authentication, and regular security audits. All payment processing is handled through PCI-DSS compliant Paystack infrastructure.

6. YOUR RIGHTS (NDPA)

Under the Nigeria Data Protection Act, you have the right to:

  • • Access your personal data we hold
  • • Request correction of inaccurate data
  • • Request deletion of your data ("right to be forgotten")
  • • Withdraw consent for data processing
  • • Data portability — receive your data in a machine-readable format
  • • Object to processing based on legitimate interest
  • • Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

7. DATA RETENTION

We retain your data for as long as your account is active or as needed to fulfill services. Order records are kept for 7 years for tax compliance. You may request deletion at any time.

8. CONTACT & COMPLAINTS

📧 privacy@ojify.com | 📱 +234 810 306 9369

For data protection complaints, contact the Nigeria Data Protection Commission (NDPC): ndpc.gov.ng