Privacy Policy

This policy describes how the ZumaFlix marketplace and its related account, vendor, checkout, order, delivery, and support services handle personal information. In this policy, “ZumaFlix”, “we”, and “us” refer to the service operating the ZumaFlix platform. A seller, payment provider, delivery participant, or other third party may handle information under its own privacy notice when it provides its service.

What we handle depends on how you use the platform and whether you are a shopper, vendor, vendor staff member, or another account user. This may include:

• Account and profile details, such as your name, email address, phone number, profile image, preferences, and sign-in or session information. Passwords are stored as password hashes.
• Order and checkout details, such as products, quantities, prices, delivery instructions, recipient details, addresses, shipment status, returns, refunds, and payment references or transaction records.
• Vendor and business information, which may include store and staff details, business and tax identifiers, identity or verification documents, business address, and payout or bank account details.
• Information you submit in reviews, questions, support tickets, messages, forms, or uploaded files.
• Service, device, and security information, such as IP address and browser or device details recorded with account security events, and information about how you use relevant marketplace features.
• Campaign attribution details, such as a referring page, landing page, or campaign source, where the relevant campaign feature is used.

We use information to create and manage accounts; authenticate users and protect accounts; operate the marketplace and vendor tools; maintain carts and checkout; process orders, payments, delivery, returns, and refunds; provide support and communications; display reviews or other submitted content; verify vendors where required; prevent, detect, and investigate misuse; maintain service reliability and security; and understand or improve how relevant features are used. We may also use information to meet legal obligations and establish, exercise, or defend legal claims.

Under the Nigeria Data Protection Act 2023 and other applicable data-protection requirements, processing may rely on the ground relevant to the purpose, such as providing a service or taking steps you request, meeting a legal obligation, protecting a legitimate interest, or your consent. Where we rely on consent, you may withdraw it; withdrawal does not make earlier processing unlawful and may not affect processing that has another lawful ground.

Depending on the payment method available for an order, payment processing may involve Stripe, Paystack, or Flutterwave. These providers may collect and process payment information under their own terms and privacy notices. ZumaFlix order records may include the provider, amount, currency, status, transaction or provider references, and related payment metadata. Do not send passwords, full payment-card details, or payment credentials to us by email or support message.

We share information only as needed for the purposes described in this policy, including with:

• The seller responsible for an order and delivery participants involved in fulfilment, who may need relevant order, recipient, contact, or delivery details.
• Payment providers, such as Stripe, Paystack, or Flutterwave, when a selected payment method uses them.
• Service providers that help operate the platform, such as providers for email delivery, storage, hosting, security, or technical infrastructure. They should handle information for their service to us and subject to applicable safeguards.
• Other users where you choose to publish or share content, for example a product review or public profile information, subject to the feature and your settings.
• Authorities, regulators, courts, or other parties where disclosure is required by law or reasonably necessary to protect rights, safety, or the service.

We do not make personal information available to unrelated recipients merely because they request it.

Cookies and browser storage support sign-in and session security, checkout continuity, preferences, and other service functions. The platform also uses a campaign-attribution cookie to remember campaign or referral details for up to 90 days when that feature is used. Your browser settings can restrict cookies or clear stored information, but account or checkout features may not work properly as a result.

Some service providers may process information in a country other than Nigeria. Where personal information is transferred across borders, we will use the transfer grounds and safeguards required by applicable data-protection law. Third-party services are governed by their own terms and privacy notices; review those notices when you use their services.

We keep personal information for as long as it is reasonably needed for the purpose for which it was collected, including operating accounts and transactions, providing support, maintaining security, resolving disputes, and meeting legal or regulatory obligations. Retention periods vary by record type and circumstances. Closing an account or making a deletion request may not remove records that we are required or otherwise permitted to retain; where appropriate, retained information may be restricted or de-identified.

We use measures intended to protect information, including password hashing, authenticated sessions, and access controls. No internet transmission or storage system can be guaranteed completely secure. Keep your credentials private and contact us promptly if you believe your account or information has been accessed without authorization.

Subject to applicable law and its conditions or exceptions, you may have rights to request access to your personal information, correction of inaccurate information, erasure, restriction of processing, objection to processing, or a portable copy. You may also withdraw consent where processing is based on consent. These rights are not absolute and may depend on the circumstances and other lawful requirements.

You can review the privacy and communication choices available in your account through Privacy Settings. To make a privacy request, ask a question, or raise a concern, contact us at support@zumaflix.com. We may ask for information needed to verify your identity and understand your request before acting on it.

If you are in Nigeria and are not satisfied with how a concern is handled, you may also complain to the Nigeria Data Protection Commission.

The marketplace is intended for people who can lawfully use its services. We do not knowingly seek personal information directly from children without the authorization required by applicable law. If you believe a child has provided personal information inappropriately, contact us so we can review the matter.

We may update this policy when the service or its information practices change, or when required. The current version will be posted here with its updated date. If a change requires notice under applicable law, we will provide notice through an appropriate channel.

For questions or privacy requests, email support@zumaflix.com. Please do not include passwords or full payment credentials in your message.