1. Introduction

At Goodybag Connect, we value your privacy and are committed to protecting your personal information in compliance with the Nigeria Data Protection Act (NDPA, 2023). This Privacy Policy explains how we collect, use, store, and safeguard your data when you use our website.

 

2. Information We Collect

We may collect the following types of information:

- Personal Information: Name, email address, phone number, billing/shipping address.

- Payment Information: Bank transfer references (processed securely via third-party payment providers).

- Cookies and Tracking: To improve user experience and personalize services.

 

3. How We Use Your Information

Your information is used for:

- Processing and fulfilling orders.

- Providing customer support.

- Improving our website and services.

- Sending promotional offers (with your consent).

- Complying with legal and regulatory obligations in Nigeria.

 

4. Legal Basis for Processing

We process your personal data based on:

- Consent (e.g., marketing communications).

- Contractual necessity (e.g., fulfilling your order).

- Legal obligations (e.g., tax reporting).

- Legitimate interests (e.g., fraud prevention, service improvement).

 

5. Data Sharing

We may share your information with:

- Payment processors and logistics partners.

- Regulatory authorities when required by law.

- Service providers who help us operate our business (under strict confidentiality agreements).

 

We do not sell or rent your personal data to third parties.

 

6. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, or as required by Nigerian law.

 

7. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

 

8. Your Rights

Under the NDPA, you have the right to:

- Access your personal data.

- Request correction of inaccurate data.

- Request deletion of your data (“right to be forgotten”).

- Withdraw consent for data processing.

- Lodge complaints with the Nigeria Data Protection Commission (NDPC).

 

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on our website and will take effect immediately.