Legal

Privacy policy

Last updated 1 May 2026. We follow the Nigeria Data Protection Act 2023 (NDPA).

What we collect

  • Contact: name, phone number, email, delivery addresses.
  • Order data: items purchased, prices, payment method (we never store full card numbers — Nuqood handles those).
  • Device data: IP, browser, referrer, pages viewed — for analytics and fraud prevention.
  • Messages: WhatsApp, web chat, and email conversations with our team or AI agent.

What we do with it

  • Process and deliver your orders.
  • Reach you about your order — confirmations, delivery updates, returns.
  • Improve the storefront (which products surface, which deliveries fail).
  • Detect fraud and protect customers and staff.
  • Send marketing — only with your explicit opt-in. You can unsubscribe at any time.

Who we share it with

  • Payments: Nuqood for card processing.
  • Delivery: the courier we use for your zone (GIG, Kwik, GoKada, or our own riders).
  • Communications: Termii (SMS), Resend (email), Meta (WhatsApp Business API).
  • Hosting: Vercel + Neon (PostgreSQL).

We never sell your data. We share only what each provider needs to do their job.

Your rights

Under the NDPA you can ask us to: see what we have on you, correct it, delete it, or export it. Email avmallbusiness@gmail.com and we will respond within 14 days.

Cookies

We use a small number of cookies to keep you signed in, remember your cart, and measure traffic. Full breakdown on the cookies page.

Data retention

Orders are kept for 7 years for tax and customer-service reasons. Marketing data is cleared 24 months after your last interaction. Account-level data is cleared on request.

Contact

Privacy questions or NDPA requests: avmallbusiness@gmail.com. Our data protection officer responds within 14 days.