In short
- We collect what we need to take your order, deliver it and handle problems: your name, phone number, email and delivery address.
- The vendor and our delivery partners get your details so they can fulfil your order. We do not sell your data.
- We do not see or store your full card, bank or other payment details. Our payment partners handle payments.
- If you comment an item code on Instagram or Facebook, we receive your username and comment so we can message you the product.
- You can ask to see, correct or delete your data at any time, and complain to the Nigeria Data Protection Commission.
1.Who we are
Zono Africa Limited (“Zono”, “we”, “us”) is a company registered in Nigeria (RC 9497047), Lagos Nigeria. We run Zono’s website and related services (the “Platform”).
We are the data controller for the personal data described in this policy, and we handle it under the Nigeria Data Protection Act 2023 (“NDPA”). For any question about how we handle your data, contact us at zono@zonoafrica.com.
2.What we collect
What you give us
- Your name, phone number, email address and delivery address when you check out, sign up or contact us.
- If you have an account: your name, your contact details, the items you save, the vendors you follow and your orders. We send one-time codes by SMS or email to sign you in, and we keep a record that a code was sent.
- Your orders, and any messages, photos or videos you send us, such as an unboxing video for a return.
- Your email or phone number if you ask us to remind you about live sales.
- Ratings and reviews you post. They are shown publicly.
What we collect when you use the Platform
On Zono Pro, video calls with a vendor happen through the call button on a product page. Your phone number and email are not shared with the vendor, and the vendor’s are not shared with you. Zono does not record the call.
- Technical data such as your device, browser, IP address and the pages you view.
- Items kept in your browser so the site works: your bag, recently viewed products, saved items, the vendors you follow, your light or dark setting, your sign-in on this device, and any reminder you saved. See Section 8.
- Delivery updates from our delivery partners.
When you use the Instagram and Facebook comment feature
- Your public username or ID, the comment that contained the item code, and the messages between you and Zono’s automated reply. We receive these from Meta’s messaging services.
From our payment partners
- The status and reference of your payment. Depending on how you pay, this could be by card, bank transfer or another method. We do not see or store your full card, bank or other payment details.
We do not record live sales, and we do not store the chat messages sent during them.
3.How we use it, and why
| What we do | Our lawful basis under the NDPA |
|---|---|
| Process your order, take payment, arrange delivery and send order updates | To carry out our contract with you |
| Handle returns, refunds and disputes | To carry out our contract with you, and our legitimate interest in resolving problems fairly |
| Prevent fraud and abuse, and keep the Platform secure | Our legitimate interests, and legal obligations |
| Keep records for tax, regulatory and legal reasons | Legal obligation |
| Send you a live sale reminder | Your consent, which you can withdraw at any time |
| Improve the Platform and understand how it is used | Our legitimate interests |
Where we rely on legitimate interests, we balance them against your rights. We do not sell your personal data.
5.Sending data outside Nigeria
Some of our service providers, including hosting and messaging providers, may handle data outside Nigeria. When that happens, we take steps that the NDPA requires to keep your data protected, for example by using providers that give an adequate level of protection or by putting suitable contract terms in place.
6.How long we keep it
- Order, payment and dispute records: up to 6 years after your last order, for tax, regulatory and legal reasons. [CONFIRM: retention period against NDPA and tax rules]
- Return evidence such as photos and videos: [CONFIRM: retention period, for example 90 days after the return is closed].
- Live sale reminders: until you tell us to stop, or until the reminder has been sent.
- Account details: until you delete your account. After that we keep only the records we must keep.
When we no longer need data, we delete it or make it anonymous.
7.Your rights
Under the NDPA you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data, where we do not need to keep it;
- ask us to limit how we use your data;
- object to our use of your data, including for direct marketing;
- receive your data in a common format, or ask us to send it to another provider, where this applies;
- withdraw your consent at any time, where we rely on it; and
- ask for a human to review a decision made only by automated means. Our comment-to-order replies are automated, but they only send you product information and a checkout link.
To use a right, write to zono@zonoafrica.com. We may need to check who you are first. We will reply within the time the law requires.
If you are unhappy with how we handle your data, please tell us first. You may also complain to the Nigeria Data Protection Commission (NDPC).
9.Keeping your data safe
We use technical and organisational measures to protect your data, such as encrypted connections, restricted access and payment handling by our payment partners. No system is completely secure. If a breach puts your rights at risk, we will act as the NDPA requires, including telling the NDPC and you where necessary.
10.Children
Zono is for people who are 18 or older. We do not knowingly collect data from children. If you think a child has given us their data, please write to us and we will delete it.
11.Changes to this policy
We may update this policy. We will tell you about material changes by email or on our website before they take effect, and we will show the date of the latest version at the top of this page.
12.Contact us
Zono Africa Limited, a company registered in Nigeria (RC 9497047), Lagos Nigeria.
Email: zono@zonoafrica.com