VILOXX

1. Data We Collect

We collect the following categories of personal data:

• Account data: Full name, email address, phone number, password (hashed).
• Vendor data: Business name, registration documents, KYC documents (ID, utility bill), bank/payout details.
• Transaction data: Order history, payment references, shipping addresses, wallet balances.
• Usage data: IP address, browser type, device information, pages visited, search queries.
• Communication data: Chat messages between buyers and vendors, support tickets, contact form submissions.
• Location data: GPS coordinates for store locator features (only when explicitly granted).

2. How We Use Your Data

We process your personal data for the following purposes:

• To create and manage your account and provide marketplace services.
• To process payments, manage escrow, and facilitate vendor payouts.
• To verify vendor identity and prevent fraud, money laundering, and terrorist financing.
• To deliver orders and provide customer support.
• To send order updates, delivery notifications, and important account alerts.
• To improve our platform, personalize recommendations, and analyze usage patterns.
• To comply with legal obligations under Nigerian law and NDPR.
• To send marketing communications (only with your explicit consent; you may opt out anytime).

3. Data Sharing

We may share your personal data with:

• Vendors: When you place an order, your name, shipping address, and phone number are shared with the vendor for fulfilment.
• Payment processors: Paystack and other approved gateways for transaction processing.
• Logistics partners: For delivery of orders (name, address, phone only).
• Service providers: Cloud hosting, email delivery, and analytics providers under data processing agreements.
• Regulatory authorities: When required by Nigerian law, court order, or government request.

We do not sell your personal data to third parties under any circumstances.

4. Cookies & Tracking Technologies

Viloxx uses cookies and similar technologies to enhance your browsing experience, remember your preferences, analyze platform traffic, and deliver relevant content.

• Essential cookies: Required for login, cart, and checkout functionality.
• Analytics cookies: Help us understand how users interact with the platform.
• Preference cookies: Remember your theme (dark/light), language, and currency settings.

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.

5. Data Retention

• Account data is retained for as long as your account is active.
• Transaction and order data is retained for a minimum of 7 years for tax and audit compliance.
• KYC documents are retained for the duration of the vendor relationship plus 5 years.
• Chat messages are retained for 2 years unless a dispute is open.
• Usage data (logs, analytics) is retained for 18 months.
• Upon account deletion, we will anonymize your data within 30 days, except where legal retention is required.

6. Your Rights Under NDPR

Under the Nigeria Data Protection Regulation, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data (subject to legal retention requirements).
• Right to object: Object to processing for marketing or profiling purposes.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to withdraw consent: Withdraw consent for marketing communications at any time.

To exercise any of these rights, contact us at the details in Section 7 below. We will respond to your request within 30 days.

7. Data Security

We implement industry-standard security measures to protect your personal data, including encrypted data transmission (SSL/TLS), hashed passwords, secure cloud hosting, access controls, and regular security audits. However, no method of internet transmission is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

Viloxx is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or platform notification. Continued use of Viloxx after changes are posted constitutes acceptance of the updated policy.