Effective Date: 09 Sept. 2025
Last Updated: 09 Sept. 2025
Bokshop (“we,” “our,” or “us”) values your privacy and is committed to protecting your personal information in line with the Nigeria Data Protection Regulation (NDPR) 2019. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our multivendor eCommerce platform as a customer, vendor, or visitor.
By using our Platform, you consent to the practices described in this Privacy Policy.
We may collect the following categories of personal data:
Identity Information: Full name, phone number, email address, billing/shipping address, date of birth.
Vendor Verification Information: Government-issued ID (e.g., NIN, Driver’s License, International Passport), utility bill.
Transaction Information: Payment details (processed via third-party gateways), purchase history, order details.
Technical Information: IP address, device type, browser, cookies, and usage logs.
Communication Information: Messages, inquiries, and customer support interactions.
Under the NDPR, we process your personal data on the following legal bases:
Consent: When you create an account or provide data voluntarily.
Contract: To process orders, verify vendors, and deliver services.
Legal Obligation: To comply with financial, tax, or regulatory requirements.
Legitimate Interest: To improve our services, prevent fraud, and secure the Platform.
Your data may be used to:
Register and manage customer and vendor accounts.
Verify vendor identities for security and compliance.
Process orders, payments, and deliveries.
Communicate important updates, promotions, or support messages.
Resolve disputes and enforce our Terms & Conditions.
Monitor usage, analyze trends, and improve services.
Fulfill legal or regulatory obligations in Nigeria.
We do not sell personal data. However, we may share information with:
Vendors: Customer details (e.g., name, address, phone number) necessary to deliver products.
Customers: Vendor details (e.g., store name, business address, contact info) for transparency.
Service Providers: Payment processors, logistics/shipping companies, IT services, and fraud prevention partners.
Regulators or Law Enforcement: When legally required under Nigerian law.
If personal data is transferred outside Nigeria, we will ensure adequate safeguards in compliance with NDPR Article 2.11 (such as ensuring the receiving country has adequate data protection laws or using approved contractual clauses).
We will retain personal data only as long as necessary to:
Fulfill contractual obligations (orders, deliveries, and payments).
Maintain vendor records for legal and tax purposes.
Comply with NDPR requirements and other applicable Nigerian laws.
When data is no longer required, it will be securely deleted.
We apply technical and organizational measures to protect your data against unauthorized access, alteration, loss, or misuse. These include encryption, secure payment gateways, and restricted employee access.
As a data subject in Nigeria, you have the right to:
Request access to the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Withdraw consent to processing at any time.
Request deletion of your personal data (“right to be forgotten”).
Object to certain processing, including direct marketing.
Request data portability (transfer of your data to another controller).
To exercise these rights, please contact us at [Insert Contact Email]. We will respond within 30 days as required under NDPR.
We use cookies and tracking technologies to improve site functionality, store preferences, and analyze performance. You may disable cookies in your browser settings, but some features may not work properly.
We may update this Privacy Policy from time to time in compliance with NDPR. Updates will be posted with a new “Last Updated” date