Privacy Notice

BB ("we", "our", "us") is committed to protecting your personal information. This Privacy Notice explains what data we collect, how we use it, and your rights under the Nigeria Data Protection Act (NDPA) 2023.

1. Data We Collect

We collect information you provide directly and data generated through your use of BB:

• Account data: Name, email address, phone number, gender, date of birth, username.
• Transaction data: Orders placed, payment references, delivery addresses.
• Location data: City, state, and GPS coordinates (only when you grant permission) to show nearby products and vendors.
• Device & usage data: IP address, browser type, pages visited, session duration.
• Communication data: Messages sent via our chat feature or support email.

2. How We Use Your Data

• To process and fulfil your orders.
• To personalise your shopping experience based on location and preferences.
• To send order updates, promotional offers, and service notifications (you can opt out at any time).
• To detect and prevent fraud, abuse, and security incidents.
• To improve our platform through analytics.
• To comply with legal obligations.

3. Legal Basis for Processing

We process your data under one or more of the following lawful bases:

• Contract: Processing necessary to fulfil your orders.
• Consent: Marketing emails and optional location sharing.
• Legitimate interests: Fraud prevention and platform security.
• Legal obligation: Compliance with Nigerian law.

4. Sharing Your Data

We do not sell your personal data. We may share it with:

• Vendors: Only the information needed to fulfil your order (name, delivery address, phone).
• Delivery agents: Name, phone number, and delivery address for fulfilment.
• Payment processors: Paystack, for secure payment processing.
• Service providers: Cloud hosting, SMS (Termii), and email services acting as data processors under contract.
• Law enforcement: When required by law or to protect rights and safety.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Transaction data is retained for at least 7 years for tax and legal compliance. You may request deletion of your account and associated data at any time (subject to legal retention requirements).

6. Your Rights

Under the NDPA 2023, you have the right to:

• Access a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Withdraw consent for marketing at any time.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise your rights, contact us at privacy@elicod.store.

7. Cookies

We use cookies and similar technologies to maintain your session, remember your location preferences, and analyse platform usage. See our Cookie Notice for full details.

8. Security

We implement industry-standard security measures including HTTPS encryption, secure password hashing, and access controls. However, no system is completely secure — please use a strong password and protect your account credentials.

9. Children's Privacy

BB is not intended for users under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, contact us immediately.

10. Changes to This Notice

We may update this Privacy Notice periodically. We will notify you of significant changes via email or a prominent notice on the platform.

11. Contact

Data Controller: BB Store
Email: privacy@elicod.store
Nigeria Data Protection Commission: ndpc.gov.ng