Privacy Policy

This Privacy Policy explains how Zlotrak Ltd ("we", "us") handles personal information when businesses use Marketzlot Stores to run online stores, and when people shop on those stores. We follow the Nigeria Data Protection Act 2023 and, for stores and shoppers in other countries, the privacy laws that apply there (for example Canada's PIPEDA and the UK GDPR).

Two kinds of information

• About businesses (store owners and their staff): we decide how this is used — we are the "controller".
• About shoppers (the customers of each store): the store decides how this is used; we process it on the store's behalf to run its shop — we are a "processor". Each store has its own privacy policy for its customers, and shoppers should contact the store first.

What we collect

From businesses: name, email, phone, business name and address, login details, store settings, products and content, team members, payout details (bank name and account, or connected Stripe account), plan and billing history, and messages with our support.

From shoppers (for the store): name, phone, email, delivery address, order history and optional account details. Card and bank details are entered on Flutterwave's or Stripe's own pages — we never see or store full card numbers.

Automatically: basic technical information such as IP address, browser, pages visited and error logs, used to run and protect the service. We use only the cookies needed for logins, carts and security — no advertising cookies.

How we use it

• to provide Marketzlot Stores: run stores, process orders, show reports, send order and account emails;
• to take payments through our payment partners and calculate platform fees;
• to keep the platform secure, prevent fraud and abuse, and fix problems;
• to contact businesses about their account, plan, service changes and, if they agree, product news;
• to meet legal, tax and accounting duties.

Who we share it with

Only the service providers we need to run Marketzlot Stores, each bound to protect the data:

• Supabase (database and logins) and Vercel (website hosting) — servers in the United States;
• Flutterwave and Stripe (payments);
• Resend (emails);
• our sister product Zlotrak, which shares our login and back-office systems.

We may also share information when the law requires it, to protect people or the platform, or as part of a sale or merger of our business (with the same protections). We never sell personal information.

International transfers

Our providers store data outside Nigeria (mainly in the United States). We use providers with strong security and contractual protections for these transfers.

How long we keep it

We keep business account data while the account is open, and order and payment records for as long as tax and accounting laws require (usually up to 7 years). After that, data is deleted or anonymised.

Your rights

You can ask to see, correct, export or delete your personal information, object to or limit how it is used, or withdraw consent for marketing, by emailing support@example.com. Shoppers should usually contact the store they bought from; we will help the store respond. You can also complain to your data-protection authority (in Nigeria, the Nigeria Data Protection Commission).

Security

We use encrypted connections, access controls so each business sees only its own store, and trusted providers. No system is perfectly secure, but we act quickly on any issue and will tell affected people where the law requires.

Children

Marketzlot Stores is for businesses and is not meant for children under 18. Stores must not knowingly collect children's data without the consent the law requires.

Changes

We may update this policy and will show the date of the latest version below. Important changes will be announced by email or in the dashboard.

Contact

Zlotrak Ltd — support@example.com