Legal

Privacy Policy

Last updated: 27 March 2026

1. Introduction

giftech ("we", "our", or "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your data when you use our platform.

2. Data Controller & Processor Roles

Giftech acts as a Data Controller for information related to platform users (Sellers and Buyers). Giftech acts as a Data Processor regarding the customer data managed by Sellers. Sellers are independently responsible for the lawful processing of customer data collected through their individual stores.

3. Information We Collect

  • Account Data: Name, email, and securely hashed passwords.
  • Store Data: Business details, contact info, and branding assets.
  • Order Data: Customer names, emails, and shipping addresses.
  • Payment Data: Transaction references and amounts (we do not store card details).
  • Usage Data: IP addresses, browser types, and activity logs.
  • Notifications: Push notification tokens for device alerts.

4. Legal Basis for Processing

We process your data based on your explicit consent, contractual necessity to provide our services, compliance with legal obligations, and our legitimate business interests in preventing fraud.

5. How We Use Data

We use your information to operate the platform, process orders, facilitate payments via third parties, send notifications, prevent fraudulent activity, and improve the user experience. We do not sell your personal data.

6. Data Sharing

We may share data with payment processors, email service providers, and cloud storage vendors. These services operate independently and are governed by their own privacy practices. We may also disclose data to law enforcement if required by Nigerian law.

7. International Data Transfers

Your data may be processed outside of Nigeria in regions where our core infrastructure or service providers operate. We ensure these providers maintain high standards of data protection.

8. Data Security

We employ HTTPS encryption, secure database architectures, and robust password hashing (bcrypt). While we strive to protect your data, no method of transmission over the internet is 100% secure.

9. Data Breach Notification

In the unlikely event of a data breach, we will take reasonable steps to notify affected users and relevant authorities where required by applicable law.

10. Cookies

We use cookies primarily for authentication and session management. You may disable cookies in your browser, but this will limit your ability to use certain features of the Platform.

11. Your Rights

You have the right to access your data, correct inaccuracies, request deletion, export your data, or withdraw consent. We may require identity verification before processing these requests.

12. Data Retention

Data is retained while your account is active. We may retain specific transaction records for up to 7 years to comply with legal and financial reporting requirements under Nigerian law.

13. Children's Privacy

Giftech is not intended for users under the age of 18. We do not knowingly collect data from minors.

14. Changes to Policy

We may update this policy periodically. Your continued use of the platform after updates are published constitutes acceptance of the revised terms.

15. Contact

For privacy concerns, contact us at giftechstores@gmail.com