Legal
Privacy policy
Last updated 1 May 2026. We follow the Nigeria Data Protection Act 2023 (NDPA).
What we collect
- Contact: name, phone number, email, delivery addresses.
- Order data: items purchased, prices, payment method (we never store full card numbers — Nuqood handles those).
- Device data: IP, browser, referrer, pages viewed — for analytics and fraud prevention.
- Messages: WhatsApp, web chat, and email conversations with our team or AI agent.
What we do with it
- Process and deliver your orders.
- Reach you about your order — confirmations, delivery updates, returns.
- Improve the storefront (which products surface, which deliveries fail).
- Detect fraud and protect customers and staff.
- Send marketing — only with your explicit opt-in. You can unsubscribe at any time.
Who we share it with
- Payments: Nuqood for card processing.
- Delivery: the courier we use for your zone (GIG, Kwik, GoKada, or our own riders).
- Communications: Termii (SMS), Resend (email), Meta (WhatsApp Business API).
- Hosting: Vercel + Neon (PostgreSQL).
We never sell your data. We share only what each provider needs to do their job.
Your rights
Under the NDPA you can ask us to: see what we have on you, correct it, delete it, or export it. Email avmallbusiness@gmail.com and we will respond within 14 days.
Cookies
We use a small number of cookies to keep you signed in, remember your cart, and measure traffic. Full breakdown on the cookies page.
Data retention
Orders are kept for 7 years for tax and customer-service reasons. Marketing data is cleared 24 months after your last interaction. Account-level data is cleared on request.
Contact
Privacy questions or NDPA requests: avmallbusiness@gmail.com. Our data protection officer responds within 14 days.