This Privacy Policy explains how Vendeck ("Vendeck", "we", "us", or "our") collects, uses, shares, and protects personal information. Vendeck is operated by Eduke David and may update this Policy from time to time as the business develops and grows.
It applies to visitors to our marketing website, to merchants who create and run a store on Vendeck, and to the customers of those merchants who interact with a Vendeck-hosted storefront. Where a merchant collects personal data from their own customers through Vendeck, the merchant is the data controller for that data and Vendeck acts as a data processor on their behalf.
1. Information we collect
Information you give us
- Account details: name, email address, phone number, and a hashed password when you register. If you sign in with Google, we receive your name, email address, and Google account identifier.
- Business and store details: store name, description, branding, product listings, pricing, inventory, order records, and the payout bank account details you provide to receive settlements.
- Customer data you upload or collect: when your customers place orders, we process their names, delivery addresses, phone numbers, email addresses, and order history on your behalf.
- Support and communications: messages you send us and the contents of those communications.
Information we collect automatically
- Usage and device data: IP address, browser type, device type, operating system, referring pages, pages viewed, and timestamps.
- Cookies and similar technologies: see our Cookie Policy for detail.
Information from third parties
- Payment processors: when a payment is made, our payment partners (Paystack and Flutterwave) send us the transaction reference, amount, currency, status, and limited metadata. We do not receive or store full card numbers.
- Domain and infrastructure providers: status information relating to custom domains you connect or purchase through Vendeck.
2. How we use information
- To provide, operate, and maintain your store and the Vendeck platform.
- To process payments from your customers and settle payouts to you.
- To send transactional messages such as order notifications, receipts, verification emails, and account alerts.
- To provide customer support and respond to your requests.
- To detect, investigate, and prevent fraud, abuse, and security incidents.
- To understand how the platform is used and to improve our products.
- To comply with legal obligations and enforce our agreements.
3. Legal bases for processing
Where the Nigeria Data Protection Act 2023 (NDPA) applies, we rely on one or more of the following legal bases: performance of a contract with you; your consent; our legitimate interests in operating and securing the platform; and compliance with a legal obligation. Where we rely on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.
4. How we share information
We do not sell personal information. We share it only as described below:
- Service providers (sub-processors) that help us run the platform, including: Paystack and Flutterwave (payment processing and payouts); Cloudflare (content delivery, object storage for uploaded media, and custom-domain SSL); our transactional email provider (ZeptoMail); Google (authentication, where you choose to sign in with Google); and domain registrars (such as Namecheap) where you connect or buy a domain.
- Between merchant and customer: order information is shared with the merchant so they can fulfil the order and continue the conversation directly.
- Legal and safety: where required by law, regulation, legal process, or to protect the rights, property, or safety of Vendeck, our users, or the public.
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
5. International transfers
Some of our service providers process data outside Nigeria. Where personal data is transferred internationally, we take steps to ensure an adequate level of protection consistent with applicable law, including contractual safeguards with those providers.
6. Data retention
We retain personal information for as long as your account is active and for as long as needed to provide the service, then for the period required to comply with our legal, accounting, tax, and dispute-resolution obligations. Transaction and settlement records are generally retained for at least the minimum period required by applicable financial regulations. When data is no longer needed, we delete or anonymise it.
7. Security
We use technical and organisational measures to protect personal information, including encryption of data in transit, hashing of passwords, access controls, and network protections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Your rights
Subject to applicable law, you have the right to access the personal data we hold about you, to request correction or deletion, to object to or restrict certain processing, to request portability of data you provided, and to withdraw consent. To exercise these rights, contact us at privacy@vendeck.ng. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
9. If you are a customer of a Vendeck merchant
When you buy from a store hosted on Vendeck, the merchant decides what data is collected and how it is used, and is responsible for their own privacy practices. Vendeck processes that data on the merchant's instructions. Direct requests about your data to the merchant; we will support them in responding.
10. Children
Vendeck is not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or through the platform.
12. Contact us
For privacy questions or requests, contact privacy@vendeck.ng. For general support, contact support@vendeck.ng.