Privacy Policy

Effective date: 1 January 2025 | Last updated: 1 May 2025

Uzajarr Technologies Limited ("Uzajarr", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, and safeguard your personal data when you shop, sell, or otherwise interact with the Uzajarr online shopping platform, including our mobile app, website, and all associated services (together, the "Platform").

This Policy is issued in compliance with the Nigeria Data Protection Regulation (NDPR) 2019, as administered by the National Information Technology Development Agency (NITDA), and the Nigeria Data Protection Act 2023.

1. Data Controller

Uzajarr Technologies Limited
14 Commerce Way, Victoria Island, Lagos, Nigeria
RC No. 1987654
Data Protection Officer: dpo@uzajar.com

2. Personal Data We Collect

2.1 Account & Identity Data

Full name, email address, phone number, and password (stored in hashed, non-reversible form)
Date of birth (where voluntarily provided)
Profile photo (optional)
Government-issued ID (NIN or BVN), for sellers completing identity verification and for buyers using advanced payment features
CAC business registration documents, for business seller accounts

2.2 Shopping & Transaction Data

Order history, cart contents, saved items, and wish-list products
Payment method details (card type and last four digits only, full card numbers are never stored on Uzajarr servers)
Delivery addresses and contact details for order fulfilment
Bank account details (sellers only, for receiving payouts)
Transaction amounts, timestamps, reference numbers, and SafePay payment records
Uzajarr Wallet balance and transaction ledger
Reviews, ratings, and feedback you submit about products or sellers

2.3 Usage & Technical Data

IP address, device type, operating system, and browser or app version
Session duration, pages or screens visited, and features used
Search queries, filters applied, products viewed, and browsing patterns
Crash logs and app performance diagnostics

2.4 Location Data

City and state (inferred from IP address or selected by you during checkout)
Precise GPS location, only where you explicitly grant location permission in the mobile app, used exclusively to show nearby sellers and estimate Uzajarr Rider delivery times

2.5 Communications Data

Messages you send or receive through Uzajarr's in-app buyer-seller chat
Customer support conversations and dispute submissions
Private Offer interactions and Make Offer negotiations

2.6 Third-Party Data

Identity verification results from our KYC provider
Payment status data from Paystack and Flutterwave
Delivery status updates from logistics partners and Uzajarr Riders
Fraud risk signals from our security and risk management providers

3. Legal Basis for Processing

Contract performance: To create and maintain your account, process your orders, manage payments through SafePay, coordinate delivery, and resolve disputes.
Legitimate interests: To improve the Platform, detect fraud, prevent abuse, personalise your shopping experience, and send relevant product recommendations, where our interests do not override your fundamental rights.
Legal obligation: To comply with CBN anti-money-laundering requirements, EFCC reporting obligations, FIRS tax regulations, and applicable Nigerian law.
Consent: For marketing communications, optional location tracking, and non-essential cookies.

4. How We Use Your Data

To register and maintain your Uzajarr account
To process purchases through SafePay and release seller payouts upon confirmed delivery
To verify seller identity and conduct ongoing seller due diligence and performance monitoring
To coordinate order fulfilment and Uzajarr Rider delivery
To facilitate in-app chat between buyers and sellers
To manage disputes, returns, and refunds through our Resolution Centre
To detect, investigate, and prevent fraud, account compromise, and prohibited activity
To send order confirmations, delivery updates, payment receipts, and support notifications
To send promotional offers, Flash Deal alerts, and personalised recommendations (where you have opted in or where we have a legitimate interest)
To improve our search results, product recommendations, and platform features through analytics
To comply with our legal and regulatory obligations
To enforce our Terms & Conditions, Seller Agreement, and other platform policies

5. Sharing Your Data

We do not sell your personal data. We share your data only with:

Payment processors (Paystack, Flutterwave), to process payments and manage SafePay disbursements to sellers
Sellers: your delivery name, phone number, and address are shared with the relevant seller to fulfil your order
Logistics partners and Uzajarr Riders: your name, phone number, and delivery address, for order dispatch and last-mile delivery only
KYC and identity verification providers: to verify seller and buyer identity documents
Fraud detection and security providers: to protect the platform from abuse and financial crime
Cloud infrastructure providers: to host and operate our platform (data stored within Nigeria or in countries meeting NDPR adequacy standards)
Regulatory and law enforcement authorities: when required by Nigerian law, court order, or valid regulatory directive
Professional advisors: auditors, legal counsel, and consultants, under strict confidentiality obligations

6. International Transfers

Your data is primarily stored and processed within Nigeria. Where transfers to overseas service providers are necessary, we ensure appropriate safeguards, including contractual protections consistent with NDPR requirements, are in place.

7. Data Retention

We retain your personal data for as long as your account is active, and for a minimum of five (5) years after account closure to meet applicable regulatory requirements. Transaction and financial records are retained for up to seven (7) years in accordance with CBN anti-money-laundering guidelines. You may request deletion of your account at any time, subject to our legal retention obligations.

8. Your Rights

Under the NDPR and Nigeria Data Protection Act 2023, you have the right to:

Access: request a copy of your personal data held by Uzajarr
Rectification: correct inaccurate or outdated data
Erasure: request deletion where data is no longer necessary or where you withdraw consent
Restriction: ask us to limit processing in certain circumstances
Portability: receive your data in a structured, machine-readable format
Objection: object to processing based on legitimate interests, including direct marketing
Withdraw consent: at any time, for processing activities based on consent

Contact our DPO at dpo@uzajar.com to exercise any of these rights. We respond within 30 days. You may also file a complaint with NITDA at nitda.gov.ng.

9. Security

We implement TLS encryption in transit, AES-256 encryption at rest, role-based access controls, multi-factor authentication for staff, and annual independent penetration testing. In the event of a personal data breach, we will notify affected users and NITDA within 72 hours of becoming aware.

10. Children

Uzajarr is not directed at persons under 18. We do not knowingly collect data from minors. If you believe we hold data belonging to a minor, contact dpo@uzajar.com immediately.

11. Cookies

For full details of the cookies we use, please read our Cookie Policy.

12. Changes

We may update this Policy periodically. For material changes, we will notify you by email or in-app notification at least 14 days before the change takes effect.

13. Contact

Data Protection Officer
dpo@uzajar.com
Uzajarr Technologies Limited, 14 Commerce Way, Victoria Island, Lagos, Nigeria