Privacy Policy

PLACEHOLDER TEXT — this page is a draft for review. Replace it with your lawyer-reviewed version before launch.

Last updated: [PLACEHOLDER] date · [PLACEHOLDER] Veloce Technologies Ltd

[PLACEHOLDER — draft aligned with the Nigeria Data Protection Act 2023 (NDPA). Have it reviewed before use.]

1. Data controller

[PLACEHOLDER] Veloce Technologies Ltd, [PLACEHOLDER] Street address, City, State, Nigeria. Contact: [PLACEHOLDER] support@yourdomain.com. [PLACEHOLDER: name of Data Protection Officer, if appointed.]

For orders placed on a merchant's store, the merchant is the data controller for customer order data and Veloce acts as a data processor on the merchant's behalf.

2. What we collect

• Merchants: email address, password (stored hashed), store details, bank details for receiving customer transfers, subscription and payment records.
• Customers: name, phone number, delivery address, order details and any proof of payment you upload.
• Technical: sign-in sessions and basic security logs (such as sign-in time and IP address) to protect accounts.

We only collect what is needed to provide the service.

3. Lawful basis (NDPA section 25)

• Performance of a contract — to create stores, process orders and subscriptions.
• Consent — for any optional cookies or marketing. You can withdraw consent at any time.
• Legal obligation and legitimate interests — security, fraud prevention and record keeping.

4. Sharing

We share data only with: the merchant you buy from; Paystack for subscription payments; our hosting and database providers. [PLACEHOLDER: list providers and where data is hosted, including any transfer outside Nigeria and the safeguards used.]

5. Retention

[PLACEHOLDER] How long each type of data is kept.

6. Your rights

Under the NDPA you have the right to be informed, to access, correct and delete your data, to restrict or object to processing, to data portability, and to withdraw consent. You can also complain to the Nigeria Data Protection Commission (NDPC).

To request deletion, use our data deletion form or email [PLACEHOLDER] support@yourdomain.com.

7. Security

We use access controls that keep each merchant's data separate, encrypted connections, and private storage for payment proofs. No system is perfectly secure; we will notify affected people and the NDPC of a breach as required by law.

8. Cookies

See our Cookie Policy.