2. How We Use Your Data
Your data is processed to:
- ✓ Process orders and arrange delivery
- ✓ Send order confirmations, tracking, and support emails
- ✓ Personalize recommendations based on browsing/purchase history
- ✓ Detect and prevent fraud and abuse
- ✓ Comply with Nigerian law and tax obligations
- ✓ Analyze usage patterns to improve our platform
- ✓ Send promotional emails (you can opt-out anytime)
3. Data Sharing
We do NOT sell your data. We only share with:
- Delivery Partners: Name, phone, address (for order delivery)
- Payment Processors: PCI-DSS Level 1 certified vendors only
- Cloud Providers: AWS (encrypted, contractually bound)
- Legal Authorities: Only when required by Nigerian law
4. Data Security
We protect your data using:
- 🔒 AES-256 encryption at rest
- 🔒 TLS 1.3 encryption in transit
- 🔒 Two-factor authentication (2FA)
- 🔒 Biometric login options
- 🔒 24/7 security monitoring
- 🔒 Regular third-party security audits
5. Your Rights
You have the right to:
- 📋 Access: Request a copy of your personal data
- ✏️ Correction: Update or correct inaccurate information
- 🗑️ Deletion: Request deletion of your data (with exceptions)
- 🚫 Restriction: Limit how we use your data
- 📤 Portability: Export your data in machine-readable format
- ⛔ Objection: Opt-out of marketing communications
6. Data Retention
We retain data as long as your account is active. After account deletion, we retain data for 90 days maximum, then permanently delete it. Exceptions apply for legal compliance (tax records retained per Nigerian law).
7. Children's Privacy
Our service is not for anyone under 13 years old. If we discover a child's data, we delete it immediately. Parents concerned about data should contact: privacy@shopxpress.ng
8. Data Protection Officer
Email: dpo@shopxpress.ng
Address: Buchanan House, 58 Port Street, Glasgow, G2 1EQ
Response Time: Within 72 hours