Privacy Policy

Effective Date: 1 January 2025 Version: 1.0

1. INTRODUCTION

TAHROS ("Platform", "we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use the TAHROS platform.

This policy applies to all users: visitors, registered Buyers, and Merchants.

2. DATA WE COLLECT

2.1 Information You Provide

  • Account data: name, email address, phone number, password;
  • Business data (Merchants): company name, address, website, business registration details;
  • Transaction data: order history, payment records, wallet transactions;
  • Communication data: messages sent through the Platform, support requests.

2.2 Information Collected Automatically

  • Device and browser information: IP address, browser type, operating system, device identifiers;
  • Usage data: pages visited, features used, timestamps, referral URLs;
  • Location data: approximate location derived from IP address.

2.3 Information from Third Parties

  • Payment processors: transaction confirmation and payment status;
  • Identity verification services (where applicable): verification results.

3. HOW WE USE YOUR DATA

We use your personal data to:

  • Create and manage your account;
  • Process transactions and maintain wallet balances;
  • Facilitate communication between Buyers and Merchants;
  • Provide customer support;
  • Detect and prevent fraud and abuse;
  • Comply with legal and regulatory obligations;
  • Improve the Platform and develop new features;
  • Send transactional notifications (order updates, payment confirmations);
  • Send marketing communications (with your consent, where required by law).

4. LEGAL BASIS FOR PROCESSING

We process your personal data based on:

  • Contract performance: processing necessary to provide Platform services;
  • Legitimate interests: fraud prevention, security, Platform improvement;
  • Legal obligation: compliance with applicable laws and regulations;
  • Consent: marketing communications and optional data processing.

5. DATA SHARING

We may share your data with:

  • Merchants (for Buyers): order and delivery information necessary for fulfilment;
  • Payment processors: payment details for transaction processing;
  • Service providers: hosting, analytics, email delivery, and other operational services;
  • Law enforcement: when required by law, court order, or governmental authority;
  • Professional advisors: legal, accounting, and auditing services.

We do not sell your personal data to third parties.

6. DATA RETENTION

We retain your personal data for as long as your account is active or as needed to provide services. After account closure, we may retain data for the periods required by law for record-keeping, dispute resolution, and fraud prevention.

7. DATA SECURITY

We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee absolute security.

8. YOUR RIGHTS

Subject to applicable law, you have the right to:

  • Access your personal data held by us;
  • Correct inaccurate or incomplete data;
  • Delete your data (subject to legal retention requirements);
  • Restrict processing of your data in certain circumstances;
  • Data portability: receive your data in a structured, machine-readable format;
  • Object to processing based on legitimate interests;
  • Withdraw consent for consent-based processing at any time.

To exercise your rights, contact us through the Platform's support channels.

9. COOKIES

The Platform uses cookies and similar technologies for authentication, preferences, analytics, and functionality. You can manage cookie preferences through your browser settings.

10. CHILDREN'S PRIVACY

The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data promptly.

11. INTERNATIONAL TRANSFERS

Your data may be processed in jurisdictions outside your country of residence. Where we transfer data internationally, we ensure appropriate safeguards are in place.

12. COMPLIANCE WITH NIGERIAN LAW

This Privacy Policy complies with the Nigeria Data Protection Act (NDPA) 2023 and its implementing regulations. We are committed to the data protection principles of lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, and accountability.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Changes will be posted on the Platform with an updated effective date. Material changes will be communicated via email or Platform notification.

14. CONTACT

For privacy-related inquiries or to exercise your data rights, please contact us through the Platform's support channels.

By using the TAHROS platform, you acknowledge that you have read and understood this Privacy Policy.