Privacy Policy
Last updated: 22 June 2026
This policy explains what we collect, why, and your rights. It applies to DoyinMart and is aligned with the Nigeria Data Protection Act.
1. What we collect
- Account: name, email, password (hashed), and — for vendors — business name, bank/payout details and WhatsApp number.
- Transactions: orders, licences, amounts, and a payment reference from our processor.
- Content: products, reviews and messages you submit.
- Technical: basic logs and cookies needed to run the site (e.g. your session and a referral cookie).
2. How we use it
- To operate the marketplace — accounts, listings, checkout, licences and downloads.
- To process payments and pay vendors and affiliates.
- To send transactional email (receipts, licence keys, approval notices).
- To prevent fraud and abuse, and to comply with the law.
3. Processors we use
- Supabase — database, authentication and file storage.
- Paystack — payment processing and payouts.
- Resend — transactional email delivery.
- Vercel — hosting.
These providers process data on our behalf under their own security and privacy terms.
4. Sharing
We do not sell your personal data. We share only what is necessary with the processors above, with a Vendor to fulfil your order, or where required by law.
5. Cookies
We use essential cookies for sign-in sessions and to remember a referral link for 30 days. We do not use third-party advertising cookies.
6. Retention
We keep data while your account is active and as needed for legal, tax and accounting purposes, then delete or anonymise it.
7. Your rights
You may access, correct, export or delete your data, and object to certain processing. Email privacy@doyinmart.com and we will respond within a reasonable time.
8. Security
We use encryption in transit, row-level security on our database, and least-privilege access. No system is perfectly secure, but we take reasonable measures to protect your data.
9. Contact
Privacy questions: privacy@doyinmart.com.
This is a starter template and not legal advice. Have a qualified lawyer review it before going live.