Privacy Policy
This Privacy Policy explains how OBTINZ TECH collects, uses, stores, shares and protects personal data when you visit the website, create an account, purchase a product, communicate with us, submit a service request, apply as a seller or otherwise use our services. We process personal data in accordance with applicable Nigerian data-protection requirements, including the Nigeria Data Protection Act 2023.
1. Personal Data We Collect
Depending on how you interact with us, we may collect your name, telephone number, email address, account credentials, delivery and billing details, order history, returns, warranty requests, support communications, service-enquiry information, company information and preferences. Seller onboarding may require business, identity, payment and compliance information appropriate to the marketplace relationship.
We may also collect device and technical data such as IP address, browser type, operating system, referring pages, timestamps, pages viewed, cookie identifiers and security logs. If you upload an attachment for a service enquiry or support request, the file and its metadata may be processed for that purpose.
2. Payment Information
Payments may be handled by banks and payment processors. They may collect payment-card or bank information directly under their own privacy and security obligations. We generally receive a transaction reference, status, amount and limited payment metadata needed to reconcile the order. Customers should not send card PINs, passwords or one-time codes through forms, email or support messages.
3. How We Use Personal Data
We use personal data to create and secure accounts, process and deliver orders, confirm payments, provide customer support, manage returns and warranties, respond to enquiries, prepare technology-service proposals, deliver agreed projects, communicate transaction updates, detect fraud, improve the website, maintain records, comply with law and enforce our terms. With the appropriate basis, we may also send product or service updates that can be opted out of.
4. Lawful Bases
Processing may be based on performance of a contract or steps requested before a contract, compliance with a legal obligation, consent, protection of vital interests where relevant, or legitimate interests that are not overridden by your rights. Legitimate interests may include platform security, fraud prevention, service improvement, record management and responding to customer needs. Where consent is the basis, it may be withdrawn without affecting earlier lawful processing.
5. Cookies and Similar Technologies
Cookies and similar technologies may keep you signed in, remember cart or language preferences, support essential checkout functions, measure website performance and help prevent abuse. Browser controls may block some cookies, but disabling essential cookies can affect account, cart or checkout functionality. Where required, optional technologies are used according to the consent choices made available on the website.
6. When We Share Data
We may share only the data reasonably needed with marketplace sellers fulfilling an order, delivery partners, payment processors, hosting and cloud providers, communications providers, analytics or security vendors, professional advisers and contractors working under appropriate obligations. We may also disclose information where required by law, court order or a competent authority, or where necessary to protect customers, the public, our rights or platform security.
7. Marketplace Orders
Where a third-party seller fulfils an order, that seller may receive customer and delivery information needed for fulfilment, support, warranty or returns. Sellers must use that information only for legitimate marketplace purposes and in line with applicable law and platform obligations.
8. International Processing
Some service providers may process data outside Nigeria. Where personal data is transferred across borders, we take reasonable steps to use a lawful transfer mechanism and appropriate safeguards required by applicable data-protection law.
9. Data Security
We use administrative, technical and organisational measures designed to protect personal data, including access controls, authentication, secure transmission where supported, logging, backups and restricted administrative access. No method of storage or transmission is completely secure. Customers should use a strong, unique password and promptly report suspected account compromise.
10. Retention
We retain personal data only for as long as reasonably necessary for the purpose collected, including fulfilment, support, warranty, accounting, tax, dispute resolution, fraud prevention, legal compliance and enforcement. Retention periods vary by record type. Data that is no longer required is deleted, anonymised or securely restricted where deletion is not immediately possible.
11. Your Rights
Subject to applicable law and valid exceptions, you may request information about processing, access to personal data, correction of inaccurate data, deletion, restriction, objection, portability where applicable, and withdrawal of consent. You may also object to direct marketing at any time. We may ask for information needed to verify identity before acting on a request.
12. Automated Decisions
Security and fraud controls may automatically flag transactions for review. Where applicable law grants a right concerning a decision based solely on automated processing that has legal or similarly significant effects, you may request appropriate information or human review.
13. Children
The online store and professional services are not directed to children who cannot lawfully provide consent or enter the relevant transaction. A parent or legal guardian should supervise any purchase or submission involving a child. If personal data was provided without appropriate authority, contact us so it can be reviewed.
14. Marketing Preferences
Where marketing communications are sent, you may use the unsubscribe method provided or contact us to change your preference. Transactional messages about accounts, orders, security or active projects may still be sent when necessary to provide the service.
15. Third-Party Links
The website may link to third-party websites or services. Their privacy practices are controlled by their own notices, and customers should review them before providing personal data.
16. Changes to This Policy
We may update this Policy when our services, technology or legal obligations change. The current version is published on this page, and significant changes may be communicated through an appropriate channel.
17. Contact and Complaints
Privacy questions and rights requests may be submitted through the contact details displayed on this website. Please describe the request clearly and do not include passwords or payment authentication codes. If you remain dissatisfied, you may lodge a complaint with the Nigeria Data Protection Commission or seek another remedy available under Nigerian law.
