Privacy Policy

At Shopta, we are committed to protecting your personal information and handling it responsibly in compliance with the Nigeria Data Protection Act 2023 and
all applicable Nigerian laws. This policy explains what information we collect, why we collect it, how we use it, and how we protect it.
By creating an account or using our platform in any capacity, as a vendor or a buyer, you agree to the terms of this Privacy Policy.
Last updated: June 2026

1.Contact Details

If you have any questions, requests, or concerns about this Privacy Policy or how we handle your data,
please contact us at:

Email: shoptamarket@gmail.com
Address: Lagos, Nigeria

2.Information we Collect

We collect information when you register an account, complete identity verification, list a product, place an
order, dispatch a delivery, or interact with our customer support team. The information we collect includes:

Identity and verification information: Your full name, date of birth, Bank Verification Number (BVN), National
Identification Number (NIN) or equivalent government-issued ID, and a liveness selfie photograph. This is
collected from all users as part of our mandatory KYC process and is required to access core platform features.

Contact information: Your email address, Nigerian phone number, and physical delivery address in Lagos
State.

Financial information: Your linked Nigerian bank account details (for vendor payouts and buyer refunds),
your transaction PIN (stored in encrypted form only), and wallet transaction history. We do not store full
card details. Card payments are processed exclusively by our licensed payment partner, Moniepoint.

Transaction data: Order history, item listings, delivery OTP events, dispatch records, rider capture data
(name, phone, vehicle plate), formal logistics receipts, escrow events, payout history, and dispute records.

Device and usage information: Your device type, operating system, IP address, unique device identifier, and
session activity. This is collected automatically when you use the platform and is used for fraud prevention,
trust and safety monitoring, and platform improvement.

Location data: Your approximate location, used to determine your delivery zone (Z1 or Z2) and to power the
vendor discovery map. Precise GPS is collected only if you enable location permissions on the mobile app.

Content you submit: Product photos, videos, descriptions, profile images, and ratings or reviews you post
on the platform.

3.How We Use Your Information

We only process your information where there is a lawful basis for doing so. We use the information we
collect for the following purposes:

  • To verify your identity and maintain KYC compliance before granting access to transactions and payouts
  • To process orders, hold payments in escrow, release payouts, and handle reimbursements
  • To calculate and display delivery fees based on vendor and buyer location
  • To send Delivery OTPs and order status notifications
  • To detect and prevent fraud, abuse, prohibited listings, coded illegal trade, and financial crime
  • To comply with our obligations under the Money Laundering (Prevention and Prohibition) Act 2022,
    including filing Suspicious Transaction Reports (STRs) with the Nigerian Financial Intelligence Unit
    (NFIU) where required
  • To manage disputes, investigate reports, and enforce our Terms of Service
  • To communicate with you about your account, orders, platform updates, and policy changes
  • To improve and personalise the platform experience

We do not sell or rent your personal information to third parties for marketing purposes.

4.Payment Processors and Logistics Partners

We partner with a licensed payment processor. All payments, escrow holdings, payouts, and wallet
transactions are processed through Moniepoint's infrastructure. Relevant transaction data is shared with
Moniepoint as necessary to process your payments and comply with CBN regulatory requirements.

For formal logistics, we work with an approved third-party provider. When a buyer selects formal logistics at
checkout, relevant delivery information including pickup and delivery addresses, is used to facilitate the
booking. Receipt data uploaded by vendors is retained for reimbursement and fraud verification purposes.

We may also work with third-party service providers for cloud hosting, identity verification (including
liveness and BVN check providers), customer support, and platform analytics. These providers access your
data only to the extent necessary to perform services on our behalf and are bound by confidentiality obligations.

5.Sharing Your Information

We treat your personal information with care and do not share it beyond what is necessary. We may share
your information in the following circumstances:

  • With our payment partner and other CBN-licensed partners for payment processing and AML
    compliance
  • With our logistics partners or other approved logistics providers to facilitate deliveries you have selected
  • With Nigerian regulatory bodies, law enforcement agencies, and financial intelligence units, including the
    NFIU, EFCC, NDLEA, and the Nigeria Police Force where we are legally required to do so or where we
    have reasonable grounds to suspect financial crime or illegal activity on the platform
  • With legal or professional advisors in connection with any dispute, regulatory inquiry, or legal proceeding
  • With any successor entity in the event of a merger, acquisition, or sale of substantially all of our assets,
    subject to the receiving party honouring this Privacy Policy

We will never sell your personal information to advertisers or data brokers.

7.Information Security

We implement appropriate technical and organisational measures to protect your personal information
against unauthorised access, loss, misuse, alteration, or disclosure. These include encrypted storage of
sensitive credentials (including transaction PINs and BVN references), device fingerprinting for fraud
detection, access controls, and secure data transmission protocols.

In the event of a data breach that poses a risk to your rights or freedoms, we will notify you and the Nigeria
Data Protection Commission (NDPC) as required by applicable law.

Please protect your account by keeping your password, transaction PIN, and Delivery OTP confidential. Do
not share your OTP with any person, including vendors, riders, or anyone claiming to represent Shopta.

8.Information Retention

We retain your personal information for as long as your account is active and for as long as necessary to
fulfil our legal, regulatory, and contractual obligations. Under the Money Laundering (Prevention and
Prohibition) Act 2022, we are required to retain transaction records for a minimum of five (5) years. KYC
documentation is retained for a minimum of five (5) years from the date of the last transaction or account
closure, whichever is later.

When your information is no longer required, we delete or anonymise it securely.

9.Your Rights

Under the Nigeria Data Protection Act 2023, you have the right to:

  • * Access the personal information we hold about you
  • * Request correction of inaccurate or incomplete information
  • * Request deletion of your personal information, subject to our legal retention obligations
  • * Object to or restrict certain types of processing
  • * Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at shoptamarket@gmail.com We will respond within a
reasonable timeframe and in accordance with applicable law. Please note that some requests may be
limited where we have a legal obligation to retain data.

10.Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements,
or platform features. Where changes are material, we will notify you via in-app notification or email before
the changes take effect. Your continued use of the platform following any update constitutes your
acceptance of the revised policy.