EketSupply

Privacy Policy

Last updated: 1 March 2026

Overview

EketSupply ("we", "us", or "our") is committed to protecting your personal data in accordance with the Nigeria Data Protection Act, 2023 (NDPA) and its General Application and Implementation Directive (GAID). This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use our platform, website, or mobile application.

By using EketSupply, you consent to the practices described in this Policy. If you do not agree, please discontinue use of our services.

Data Protection Registration

EketSupply is registered with the Nigeria Data Protection Commission (NDPC)as required under the Nigeria Data Protection Act, 2023. Our data protection registration is maintained and renewed annually in compliance with NDPC directives.

Our designated Data Protection Officer (DPO) can be reached at: privacy@eketsupply.com

1. Information We Collect

We collect information you provide directly, including:

  • Name, email address, and phone number when you register
  • Profile information and photos for artisan listings
  • Payment information (processed securely by Paystack — we do not store card details)
  • Bank Verification Number (BVN) for artisan identity verification, where required
  • Location data when you use location-based features
  • Communications you send through our platform
  • Device information, IP address, and usage data collected automatically

2. Legal Basis for Processing

Under the NDPA 2023, we process your personal data on the following lawful bases:

  • Contract performance — to provide the services you have requested
  • Legitimate interests — to improve our platform, prevent fraud, and ensure security
  • Legal obligation — to comply with applicable Nigerian laws and regulations
  • Consent — for marketing communications (you may withdraw consent at any time)

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our services
  • Process transactions and send related notifications
  • Match customers with appropriate artisans
  • Verify artisan credentials and conduct background checks
  • Send service updates, promotional offers, and platform news (with consent)
  • Detect and prevent fraud or abuse
  • Comply with legal and regulatory obligations

4. Information Sharing

We do not sell your personal information. We share information only with:

  • Artisans or customers necessary to complete a booking
  • Paystack (our payment processor) to handle transactions securely
  • Service providers who assist our operations (under strict data processing agreements)
  • Law enforcement or regulatory authorities when required by Nigerian law
  • The Nigeria Data Protection Commission (NDPC) in compliance with regulatory directives

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Nigerian law. Specifically:

  • Account data: retained for the duration of your account plus 2 years after closure
  • Transaction records: retained for 7 years in compliance with financial regulations
  • Marketing data: retained until you withdraw consent

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS/SSL) and at rest, access controls, and regular security audits. Payments are processed through Paystack, a PCI-DSS Level 1 certified payment gateway. We do not store card details on our servers.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the NDPC and affected individuals within 72 hours of becoming aware of the breach, as required by the NDPA 2023.

7. Your Rights Under the NDPA 2023

As a data subject under Nigerian law, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate or incomplete data
  • Erasure — request deletion of your account and personal data
  • Restriction — request that we limit how we process your data
  • Portability — receive your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interests or for direct marketing
  • Withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, contact our DPO at privacy@eketsupply.com. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

8. Cookies

We use cookies and similar technologies to improve your experience, analyse usage, and personalise content. We use Google Analytics to understand how visitors use our website. You can control cookie settings through your browser. By continuing to use our website, you consent to our use of cookies.

9. Children's Privacy

EketSupply is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our platform. Continued use of EketSupply after changes take effect constitutes acceptance of the updated Policy.

11. Contact

For privacy-related requests, questions, or to exercise your data rights, contact our Data Protection Officer: