Privacy Policy

1. Introduction

Venderce ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our marketplace platform, website, and related services (collectively, the "Platform").

As a marketplace, we facilitate transactions between independent Vendors and Buyers. This means certain data (such as shipping addresses) is shared with Vendors solely to fulfill your orders.

By using the Platform, you consent to the data practices described in this policy. If you do not agree, please do not use the Platform.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Create an account: Name, email address, phone number, password.
• Set up a Vendor store: Business name, business registration documents, tax identification number, bank account details (for payouts), store description, logo, and product listings.
• Make a purchase: Shipping address, billing information, payment card details (processed securely through our payment processor — we do not store full card numbers).
• Contact support: Name, email, order details, and the content of your message.
• Leave a review: Your display name and the content of your review.
• Subscribe to newsletters: Email address and communication preferences.
• Complete your profile: Profile picture, bio, location, and other optional information.

2.2 Information Collected Automatically

When you use the Platform, we automatically collect:

• Device information: IP address, browser type and version, operating system, device type, screen resolution.
• Usage data: Pages viewed, links clicked, time spent on pages, search queries, products browsed, order history.
• Location data: Approximate location derived from your IP address (used for currency, shipping estimates, and fraud prevention).
• Cookies and tracking: Session cookies, preference cookies, and analytics cookies (see Section 7 below).

2.3 Information from Third Parties

We may receive information from:

• Payment processors: Transaction confirmation and fraud signals (we do not receive your full card details).
• Analytics providers: Aggregated usage statistics.
• Social login providers: If you sign in via Google or another social account, we receive your name, email, and profile picture (as permitted by your settings).
• Fraud prevention services: Risk scores and verification status.

3. How We Use Your Information

We use your information for the following purposes:

3.1 Transaction Facilitation

• Process orders and payments (held in escrow until delivery confirmation).
• Share shipping details with Vendors so they can fulfill your order.
• Send order confirmations, dispatch notifications, and delivery confirmation emails.
• Process refunds and resolve disputes.

3.2 Platform Operation and Improvement

• Maintain and improve the Platform's features and user experience.
• Analyze usage patterns to optimize product discovery and marketplace performance.
• Develop new features and services.
• Conduct research and analytics (using aggregated, anonymized data where possible).

3.3 Communication

• Send transactional emails (order updates, account notifications, security alerts).
• Send marketing communications (newsletters, promotions) — only with your consent, which you can withdraw at any time.
• Respond to your support requests and inquiries.
• Send important updates about the Platform, policies, or terms.

3.4 Safety and Security

• Detect and prevent fraud, unauthorized access, and other harmful activity.
• Verify Vendor identities and business legitimacy.
• Enforce our Terms of Service and platform policies.
• Protect the rights, property, and safety of Venderce, Users, and the public.

3.5 Legal Compliance

• Comply with applicable laws, regulations, and legal processes.
• Maintain required business and financial records.
• Respond to lawful requests from government authorities.

4. How We Share Your Information

4.1 With Vendors (Buyer Data)

When you place an order, the Vendor receives:

• Your name (or alias if you choose).
• Shipping address.
• Order details (items ordered, quantities, special instructions).
• Your email address (for order-related communication only).

Vendors may not use this information for marketing purposes or share it with third parties. They may only use it to fulfill your order and handle disputes.

4.2 With Payment Processors

Payment information is shared with our PCI-compliant payment processor to complete transactions. We do not store full credit card numbers on our servers.

4.3 With Service Providers

We share data with trusted third-party service providers who assist in operating the Platform, including:

• Cloud hosting (Hostinger VPS).
• Image storage and CDN (Cloudinary).
• Email delivery (SMTP provider).
• Analytics (Google Analytics, internal analytics).
• Error tracking (Sentry).
• Push notifications (Web Push, VAPID).

These providers are contractually bound to protect your data and use it only for the services they provide to us.

4.4 For Legal Reasons

We may disclose your information if required to:

• Comply with a legal obligation, subpoena, or court order.
• Enforce our Terms of Service or other agreements.
• Protect against legal liability.
• Protect the safety of Users, Venderce, or the public.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and any choices you may have regarding your information.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• SSL/TLS encryption for all data in transit.
• AES-256 encryption for sensitive data at rest.
• Regular security audits and vulnerability assessments.
• Role-based access controls for internal systems.
• PCI-DSS compliance for payment processing.
• Regular backups with encrypted storage.

However, no method of transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes described in this policy:

Data Type	Retention Period	Reason
Account information	Until account deletion + 30 days	Legal obligations, dispute resolution
Order history	7 years	Tax and legal requirements
Payment records	7 years	Financial auditing, chargeback protection
Audit logs	7 years	Legal compliance, fraud investigation
Webhook events	90 days	Debugging, reconciliation
Failed login attempts	90 days	Security monitoring
Marketing emails	Until unsubscribed	Consent-based marketing
Deleted account data	30 days after deletion	Recovery period, then permanently deleted

When data is no longer needed, it is securely deleted or anonymized so that it can no longer be associated with you.

6.1 Data Breach Notification

In the unlikely event of a data breach, we will:

• Notify affected users within 72 hours of discovery.
• Report to relevant authorities as required by law.
• Take immediate steps to contain the breach and prevent recurrence.
• Provide guidance on protective measures you can take.

7. Cookies and Tracking Technologies

We use the following types of cookies:

7.1 Essential Cookies

Required for the Platform to function. These include session management, authentication, security, and shopping cart cookies. You cannot opt out of essential cookies as the Platform will not work without them.

7.2 Preference Cookies

Remember your settings and choices (currency, language, recently viewed items). These improve your experience but are not strictly necessary.

7.3 Analytics Cookies

Help us understand how Users interact with the Platform. We use anonymized analytics to improve our services. You can opt out of analytics cookies through your browser settings.

7.4 Marketing Cookies

Used to deliver relevant advertisements and track campaign effectiveness. These are only set with your consent. You can manage marketing cookies through the cookie consent banner or your browser settings.

7.5 Managing Cookies

You can control cookies through:

• The cookie consent banner on your first visit.
• Your browser settings (block or delete cookies).
• Our cookie preference center (accessible via the footer link).

Disabling certain cookies may affect Platform functionality.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

8.1 Access and Portability

You have the right to request a copy of the personal data we hold about you, provided in a structured, commonly used, and machine-readable format.

8.2 Correction

You have the right to request correction of inaccurate or incomplete personal data. You can also update most information directly through your account settings.

8.3 Deletion

You have the right to request deletion of your personal data. We will comply unless we have a legitimate legal basis to retain it (such as tax records or dispute resolution).

8.4 Restriction and Objection

You have the right to restrict or object to certain processing of your data, including direct marketing. You can opt out of marketing emails at any time by clicking the unsubscribe link.

8.5 Withdraw Consent

Where processing is based on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.

8.6 Exercising Your Rights

To exercise any of these rights, contact us at privacy@venderce.com or through the data settings in your account. We will respond to your request within 30 days.

9. International Data Transfers

Venderce operates primarily in Nigeria. If you access the Platform from outside Nigeria, your data may be transferred to and processed in Nigeria or other countries where our service providers operate.

For transfers outside your jurisdiction, we ensure appropriate safeguards are in place, including standard contractual clauses where required by applicable law.

10. Children's Privacy

The Platform is not intended for children under 18 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 18, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at privacy@venderce.com.

11. Third-Party Links

The Platform may contain links to third-party websites, including Vendor stores accessed through subdomains. This Privacy Policy applies only to the Venderce Platform. We are not responsible for the privacy practices of third-party websites. We encourage you to read their privacy policies before providing any information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last updated" date.
• Sending an email notification to registered Users.
• Displaying a prominent notice on the Platform.

Continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@venderce.com
• Support: support@venderce.com
• Help Center: venderce.com/help
• Data Protection Officer: dpo@venderce.com