Zweka Technologies Ltd
Privacy policy
This Privacy Policy explains how Zweka Technologies Ltd (“Zweka”, “we”, “us”) processes personal data when you use our websites, apps and services in Nigeria.
· Governing law: Federal Republic of Nigeria
1. Data controller
The data controller is Zweka Technologies Ltd, operating from Lagos, Nigeria, Federal Republic of Nigeria. Contact: privacy@zweka.ng.
We process personal data in line with the Nigeria Data Protection Act, 2023 (“NDPA”), Nigeria Data Protection Regulation guidance, and other applicable law.
2. Scope
This Policy covers visitors, registered users, sellers, buyers, applicants to giveaways, and anyone who contacts support. Separate notices may apply to employees or candidates.
3. Categories of personal data
- Identity & contact: name, email, phone, password hashes, profile photo, business name and registration details where provided.
- Verification: NIN or other ID references (stored hashed where designed), verification status, provider reference IDs, selfie/liveness metadata from our KYC partner.
- Listings & transactions: listing content, offers, bids, orders, delivery addresses, parcel details, dispute evidence.
- Payments: amounts, currency, processor customer/authorization IDs, payout account names and masked account numbers, coin purchases and balances.
- Communications: in-app chat (including system events), support emails, push tokens, notification preferences.
- Device & usage: IP address (may be hashed for security), user agent, approximate location when you opt in, search queries, favourites, saved searches.
- Safety signals: reports, solicitation flags, ban/closure records we must retain to prevent evasion.
4. Sources
Data comes from you; from your device; from other users in a trade (e.g. messages); from payment, KYC, courier and messaging providers acting on our instructions; and from public sources where needed for fraud prevention.
5. Purposes and legal bases
- Provide the Platform (contract): accounts, listings, search, offers, auctions, escrowed payment flows, delivery coordination, notifications.
- Seller verification & fraud prevention (legitimate interests / legal obligation): KYC, scam detection, chargeback defence, ban enforcement.
- Customer support & disputes (contract / legitimate interests): reviewing chat and order evidence.
- Safety & legal compliance (legal obligation / legitimate interests): NDPA, tax, law-enforcement requests, record keeping.
- Product improvement (legitimate interests): aggregated analytics; we do not sell personal data.
- Marketing (consent where required): optional product updates; you may opt out of non-essential messages.
7. International transfers
Some vendors may process data outside Nigeria. Where we transfer personal data internationally, we use appropriate safeguards required by the NDPA (such as contractual clauses and vendor due diligence).
8. Retention
- Account data: for the life of the account, then deleted or anonymised subject to below.
- Orders, ledger, payouts and tax-relevant records: typically up to 6–7 years or as law requires.
- Chat and dispute files: retained while needed for disputes, chargebacks and safety.
- Ban / fraud markers: may survive account closure so the same person cannot re-open under a new identity.
- Location cookie: up to 30 days unless cleared earlier.
See also our account closure flow in Settings and the erasure rules described in product documentation mirrored in support practice.
9. Security
We use access controls, encryption in transit, hashed secrets where designed (e.g. NIN), least-privilege admin roles, and audit logs for sensitive actions. No method is perfectly secure; please use a strong password and enable available account protections.
10. Your rights under the NDPA
Subject to exemptions, you may request to:
- Access personal data we hold about you
- Correct inaccurate data
- Delete data (erasure), with legal retention exceptions
- Restrict or object to certain processing
- Data portability where applicable
- Withdraw consent where processing is consent-based
Email privacy@zweka.ng with enough detail to verify your identity. We aim to respond within the statutory timelines.
11. Children
The Platform is not directed at children under 18. We do not knowingly create accounts for minors. If you believe a minor has registered, contact us to remove the account.
13. Changes
We may update this Policy. Material changes will be posted on this page with a new effective date. Continued use after the effective date constitutes notice of the update where permitted by law.
14. Contact and complaints
Privacy requests: privacy@zweka.ng. You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been infringed.
Frequently asked questions
- Does Zweka sell my personal data?
- No. We do not sell personal data to data brokers. We share data with processors (payments, KYC, hosting, couriers) only as needed to run the Platform, and with authorities when the law requires it.
- How is my NIN or ID handled?
- Seller verification uses identity partners. Where designed, sensitive identifiers are stored hashed or as provider references rather than raw reusable copies. Verification status is kept to enforce one-person rules and fraud prevention.
- Can I delete my account and data?
- Yes, from Settings subject to open orders. We erase personal details we are not required to keep. Order, ledger, dispute and ban-evasion records may be retained for legal, tax and safety periods described in this Policy.
- Who do I contact about privacy?
- Email privacy@zweka.ng. You may also complain to the Nigeria Data Protection Commission (NDPC) if you believe your rights were infringed.