Privacy Policy

1. Introduction

Wazobia List ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online marketplace platform.

This policy complies with:

• Nigerian Data Protection Regulation (NDPR) 2019
• European General Data Protection Regulation (GDPR)
• International privacy best practices

2. Information We Collect

2.1 Personal Information You Provide

2.2 Information We Collect Automatically

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages visited, time spent, clicks, search queries
• Location Data: General location based on IP address (not precise GPS)
• Cookies: Session cookies, preference cookies, analytics cookies

2.3 Information from Third Parties

• Social Login: If you use Google OAuth, we receive basic profile information
• Payment Processors: Transaction data from payment providers (when implemented)
• Analytics Services: Aggregated usage statistics

3. How We Use Your Information

3.1 Primary Uses

• Platform Operation: Provide marketplace services, process listings
• Account Management: Create accounts, authenticate users, manage profiles
• Communication: Send notifications, respond to inquiries, facilitate messaging
• Trust & Safety: Verify identities, prevent fraud, enforce policies

3.2 Secondary Uses

• Improvement: Analyze usage patterns to improve our platform
• Marketing: Send promotional emails (with your consent)
• Legal Compliance: Comply with Nigerian laws and regulations
• Research: Conduct anonymized research on marketplace trends

4. Legal Basis for Processing (GDPR)

5. Information Sharing and Disclosure

5.1 With Other Users

• Profile information (name, photo, verification status)
• Listing information (photos, descriptions, contact details when shared)
• Public reviews and ratings

5.2 With Service Providers

• Cloud Storage: AWS/Filebase for file storage
• Email Service: Mailgun for transactional emails
• Analytics: Google Analytics for usage statistics
• Hosting: Render.com for platform hosting

5.3 Legal Disclosures

We may disclose your information when required by:

• Nigerian law enforcement agencies
• Court orders or legal processes
• Government regulatory bodies
• Emergency situations involving safety

5.4 Business Transfers

If Wazobia List is acquired or merged, your information may be transferred to the new entity with appropriate safeguards.

6. Data Security

6.1 Technical Safeguards

• Encryption: HTTPS encryption for all data transmission
• Password Protection: Bcrypt hashing for password storage
• Access Controls: Role-based access to sensitive data
• Regular Updates: Security patches and system updates

6.2 Organizational Safeguards

• Staff Training: Privacy and security training for all team members
• Access Limitation: Need-to-know basis for data access
• Incident Response: Procedures for handling security breaches
• Regular Audits: Periodic security assessments

6.3 Document Security

• Verification documents stored with private access controls
• Signed URLs for temporary document access
• Automatic deletion of rejected documents after 90 days

7. Data Retention

8. Your Rights

8.1 NDPR Rights (Nigerian Users)

• Right to Information: Know what data we collect and how we use it
• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Deletion: Request deletion of your data
• Right to Object: Object to certain types of processing

8.2 GDPR Rights (EU Users)

• Right to Portability: Receive your data in a structured format
• Right to Restriction: Limit how we process your data
• Right to Withdraw Consent: Withdraw consent for marketing
• Right to Complain: File complaints with supervisory authorities

8.3 How to Exercise Your Rights

9. Cookies and Tracking

9.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality
• Preference Cookies: Remember your settings (theme, language)
• Analytics Cookies: Help us understand platform usage
• Security Cookies: Protect against fraud and abuse

9.2 Cookie Management

You can control cookies through:

• Browser settings (disable/delete cookies)
• Our cookie preference center (when available)
• Third-party opt-out tools for analytics

10. International Data Transfers

Your data may be processed in:

• Nigeria: Primary data processing location
• United States: Cloud storage and hosting services
• European Union: Analytics and support services

We ensure appropriate safeguards for international transfers through standard contractual clauses and adequacy decisions.

11. Children's Privacy

• Our platform is not intended for users under 18
• We do not knowingly collect data from minors
• Parents can contact us to remove minor's data
• Age verification may be required for certain features

12. Changes to This Policy

• We may update this policy to reflect legal or operational changes
• Users will be notified of significant changes via email
• Continued use constitutes acceptance of updated policy
• Previous versions archived for reference

13. Contact Information

14. Regulatory Compliance

We are committed to complying with:

• NITDA: Nigerian Information Technology Development Agency
• NDPR: Nigerian Data Protection Regulation
• GDPR: For European users
• Industry Standards: ISO 27001, SOC 2 compliance goals