Privacy Policy

Shoponent Limited ("Shoponent", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over your information when you use our platform and services.

1. Information We Collect

1.1 Information You Provide

When you register for an account, set up a store, or contact our support team, you provide us with information directly. This may include:

• Identity data: your full name, business name, and profile photograph.
• Contact data: email address, phone number, and mailing address.
• Account credentials: usernames, passwords, and security questions.
• Business data: store name, product listings, pricing, and inventory details.
• Payment data: billing address and payment method details. Card numbers are processed directly by our payment processors and are never stored on our servers.
• Communications: messages you send us through support tickets, feedback forms, or email.

1.2 Information Collected Automatically

When you use the Shoponent platform, we automatically collect certain technical and usage data, including:

• Log data: IP address, browser type, operating system, referring URLs, and pages visited.
• Device data: device identifiers, screen resolution, and hardware model.
• Usage data: features accessed, actions taken, time spent on pages, and click patterns.
• Cookie data: session identifiers and preference tokens (see Section 6).

1.3 Information from Third Parties

We may receive information about you from third-party services you connect to Shoponent, such as payment gateways, shipping providers, or social login providers. The information we receive depends on the permissions you grant those services.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: to create and manage your account, operate your store, process orders, and provide customer support.
• Platform improvement: to understand how users interact with our platform, identify bugs, and develop new features.
• Communications: to send transactional emails (order confirmations, invoices, password resets) and, where you have opted in, marketing communications.
• Security and fraud prevention: to detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities.
• Legal compliance: to comply with applicable laws, regulations, and legal processes.
• Billing: to process subscription payments and issue invoices.

We will not use your personal data for purposes incompatible with those listed above without obtaining your consent.

3. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing personal data, we rely on the following:

• Contract performance: processing necessary to provide the services you have requested.
• Legitimate interests: processing for fraud prevention, security, and platform improvement, where these interests are not overridden by your rights.
• Consent: where you have given us explicit permission, for example to receive marketing emails.
• Legal obligation: processing required to comply with applicable law.

4. Information Sharing and Disclosure

We do not sell your personal data. We may share your information in the following limited circumstances:

• Service providers: we engage trusted third-party companies to help operate our platform (e.g., cloud hosting, payment processing, email delivery, analytics). These providers access your data only to perform services on our behalf and are bound by confidentiality obligations.
• Business transfers: if Shoponent is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
• Legal requirements: we may disclose your data where required by law, court order, or government authority, or to protect the rights, property, or safety of Shoponent, our users, or others.
• With your consent: we may share information with third parties when you have given us explicit permission to do so.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze usage. The types of cookies we use include:

• Strictly necessary cookies: required for authentication, session management, and core platform functionality. These cannot be disabled.
• Functional cookies: remember your preferences such as language settings and dashboard layout.
• Analytics cookies: help us understand how visitors use the platform so we can improve it. We use aggregated, anonymized data from these cookies.

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect platform functionality.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Account data is retained while your account remains active and for up to 90 days after account closure to allow for recovery.
• Transaction and billing records are retained for a minimum of 7 years to comply with financial record-keeping obligations.
• Support communications are retained for 3 years after resolution.
• Analytics data is retained in anonymized form indefinitely.

You may request deletion of your personal data at any time (subject to legal retention obligations) by contacting us at legal@shoponent.com.

7. Security

We implement industry-standard technical and organizational security measures to protect your personal data, including:

• Encryption of data in transit using TLS/HTTPS.
• Encryption of sensitive data at rest.
• Role-based access controls limiting employee access to personal data.
• Regular security assessments and vulnerability scanning.
• Incident response procedures for data breaches.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate or incomplete data.
• Deletion: request that we delete your personal data, subject to legal obligations to retain certain records.
• Restriction: request that we restrict the processing of your data in certain circumstances.
• Portability: receive your personal data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at legal@shoponent.com. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

You may also opt out of marketing emails at any time by clicking the unsubscribe link in any email we send you.

9. International Data Transfers

Shoponent is operated from Nigeria. If you are located outside Nigeria, your information may be transferred to, stored, and processed in countries where our service providers operate. We take steps to ensure that any such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your data.

10. Children's Privacy

The Shoponent platform is not directed to children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a child, please contact us at legal@shoponent.com and we will take steps to delete it promptly.

11. Third-Party Links

Our platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you interact with.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the revised policy on this page with an updated effective date. For material changes, we will notify you by email or through a prominent notice on the platform at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.