Privacy Policy

Welcome to Vendbaze. We value your privacy and are committed to protecting your personal information.

This Privacy Policy explains how Vendbaze ("we", "our", or "us") collects, uses, processes, stores, and protects personal information when you visit our website, create an account, operate an online store, or interact with a store powered by Vendbaze.

By using Vendbaze, you acknowledge that you have read this Privacy Policy. Where consent is required by applicable law, we will request it separately.

The information we collect depends on how you interact with Vendbaze.

2.1 Information from merchants

When you register and use Vendbaze as a merchant, we may collect:

• Full name and business name.
• Email address and phone number.
• Account authentication and verification information.
• Store name, store URL, and business details.
• Product information, descriptions, images, and uploaded files.
• Order, sales, and transaction records.
• Subscription and billing information.
• Store settings, preferences, and configuration details.
• Affiliate referral and payout information, where applicable.

2.2 Information from customers

When customers purchase products from a Vendbaze-powered store, we may process:

• Customer name.
• Email address and phone number.
• Billing and delivery information, where applicable.
• Products purchased and order details.
• Payment references and transaction status.
• Information required to deliver digital products.

2.3 Technical information

We may automatically collect certain technical information, including:

• IP address and approximate location.
• Browser type and operating system.
• Device information.
• Pages visited and interactions with our platform.
• Cookies, session identifiers, and similar technologies.

We use personal information for legitimate business purposes, including:

• Creating and managing merchant accounts.
• Verifying email addresses and securing accounts.
• Providing storefront creation and management services.
• Processing and managing customer orders.
• Facilitating payments through supported payment providers.
• Delivering digital products and purchase-related information.
• Managing subscriptions and platform access.
• Providing customer support and resolving disputes.
• Monitoring platform performance and improving our services.
• Detecting fraud, abuse, and unauthorised activities.
• Managing affiliate referrals and eligible payouts.
• Sending important service updates and notifications.
• Complying with applicable legal and regulatory obligations.

We process personal information only where we have a valid legal basis under applicable data protection laws.

Depending on the circumstances, these bases may include:

• Contractual necessity: To provide the services requested when you use Vendbaze.
• Consent: Where you have explicitly agreed to a particular use of your information.
• Legitimate interests: To maintain platform security, prevent abuse, and improve our services, where permitted by law.
• Legal obligations: To comply with applicable laws, regulations, and lawful requests.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before the withdrawal.

Vendbaze integrates with third-party payment providers, including Paystack, to facilitate payments and transactions.

When a customer makes a payment through a Vendbaze-powered store, relevant transaction information may be shared with the payment provider to complete, process, and verify the transaction.

Depending on the transaction, payment information may also be processed to facilitate payment splitting and the settlement of merchant proceeds to designated payment destinations.

Payment providers process sensitive payment credentials, such as card details, under their own privacy and security policies. Vendbaze does not intend to store customers' complete payment card numbers or card security codes.

Vendbaze may receive payment references, transaction status, amounts, merchant settlement information, and other details necessary to manage orders and payments.

For further information about payment data processing, please review the privacy policy of the payment provider involved.

Vendbaze allows merchants to create and operate online stores. Merchants may collect personal information from their customers through their storefronts.

Merchants are responsible for determining how they use customer information for their own business activities and for providing appropriate privacy information to their customers.

Vendbaze processes customer information on behalf of merchants where necessary to provide services such as order management, storefront functionality, payment facilitation, and digital product delivery.

If you purchase from a store powered by Vendbaze, you should also review that merchant's privacy policy or contact the merchant directly regarding their handling of your personal information.

Vendbaze allows merchants to upload and sell digital products, including documents, ebooks, audio, video, and other supported digital files.

Uploaded files may be stored and processed through our infrastructure and third-party storage providers to make them available to eligible customers after a purchase.

We may process customer email addresses, order references, purchase information, and download activity where necessary to provide digital product access and manage purchases.

Merchants are responsible for ensuring that digital files they upload do not unlawfully contain or disclose another person's personal information.

We do not sell your personal information. We may share information with trusted third parties where necessary to operate Vendbaze.

These parties may include:

• Supabase: For database infrastructure, authentication, and storage services.
• Paystack: For payment processing, transaction verification, and settlement-related services.
• Cloudflare: For hosting, content delivery, and platform infrastructure.
• Analytics and marketing providers: Where enabled, to understand platform usage and measure marketing performance.
• Professional advisers: Where reasonably necessary for legal, accounting, or business purposes.
• Government and regulatory authorities: Where disclosure is required by law or a valid legal process.

Third-party service providers may process information in accordance with their applicable obligations and the services they provide to us.

Vendbaze may use cookies and similar technologies to support essential platform functionality.

These technologies may be used to:

• Maintain secure login sessions.
• Remember user preferences.
• Improve website functionality and performance.
• Understand how visitors interact with the platform.
• Measure marketing campaigns where applicable.

You can manage cookies through your browser settings. Disabling certain cookies may affect the functionality of some platform features.

Where required by law, we will obtain consent before using non-essential cookies or tracking technologies.

Vendbaze may provide merchants with VendTag, an NFC-enabled feature that allows a physical NFC tag to direct visitors to a merchant's chosen online destination.

When a visitor interacts with a VendTag, their device may connect to the configured destination through a redirect service.

Depending on the technical implementation and destination, limited technical information such as IP address, browser information, and device information may be processed.

Merchants are responsible for ensuring that their configured destinations and any information collected through those destinations comply with applicable privacy requirements.

Vendbaze may operate an affiliate programme that allows participants to earn commissions from eligible merchant referrals.

If you participate in the programme, we may collect and process:

• Your name and contact information.
• Referral links and referral activity.
• Commission and earnings records.
• Bank name and bank account number.
• Verified account name and payout information.

This information is used to track referrals, calculate eligible earnings, verify payout destinations, prevent fraudulent activity, and process withdrawals.

Banking information may be shared with relevant financial service providers where necessary to verify account details or facilitate payments.

We implement reasonable technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss, or destruction.

These measures may include:

• Secure authentication and account access controls.
• Encrypted communication through HTTPS.
• Access restrictions and permission controls.
• Infrastructure and security monitoring.
• Use of reputable third-party infrastructure providers.

However, no online service or method of electronic storage can be guaranteed to be completely secure. We cannot guarantee absolute security of information transmitted or stored through the internet.

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, provide our services, resolve disputes, and meet applicable legal obligations.

Retention periods may vary depending on the type of information, the nature of the service, and applicable legal requirements.

If a merchant cancels a subscription or stops using Vendbaze, certain account and store information may remain stored to support account administration, restore access where applicable, resolve disputes, or comply with legal obligations.

Requests to delete personal information may be submitted through our privacy contact email. We will assess and respond to requests in accordance with applicable data protection laws.

Where information is no longer required, we will take reasonable steps to delete, anonymise, or securely dispose of it, subject to applicable legal and operational requirements.

Some of our infrastructure and service providers may process or store personal information outside Nigeria.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is conducted in accordance with applicable data protection laws and that suitable safeguards are in place.

Subject to applicable laws, you may have the following rights regarding your personal information:

• Right to be informed: To understand how your information is collected and used.
• Right of access: To request access to your personal information.
• Right to rectification: To request correction of inaccurate or incomplete information.
• Right to erasure: To request deletion of your personal information where applicable.
• Right to restrict processing: To request that certain processing activities be restricted.
• Right to object: To object to certain types of personal information processing.
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent.
• Right to data portability: To request your information in a structured, commonly used format where applicable.
• Right to complain: To lodge a complaint with the relevant data protection authority.

To exercise these rights, contact us using the details provided in the Contact Us section.

We may need to verify your identity before processing certain requests. Some requests may be subject to lawful exceptions.

Vendbaze may contain links to external websites, applications, or services that are not operated by us.

We are not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review their privacy policies before sharing personal information with them.

Vendbaze is intended for business owners and other users who are legally capable of entering into agreements under applicable law.

We do not knowingly collect personal information directly from children in violation of applicable data protection laws.

If you believe that a child has provided personal information to us unlawfully, please contact us so that we can investigate and take appropriate action.

We maintain procedures intended to identify, investigate, and respond to personal data breaches.

Where a personal data breach occurs, we will take appropriate steps to contain and address it and notify the relevant data protection authority and affected individuals where required by applicable law.

We may update this Privacy Policy from time to time to reflect changes in our services, business operations, technology, or applicable laws.

When we make changes, we will update the effective date displayed on this page. Where required, we will provide additional notice of significant changes.

We encourage you to review this page periodically.

If you have questions about this Privacy Policy, how we process personal information, or wish to exercise your privacy rights, please contact us:

If you are not satisfied with how we handle your request, you may also lodge a complaint with the Nigeria Data Protection Commission (NDPC).