Privacy Policy for Spavox Marketplace
Effective Date: April 26, 2026
Last Updated: April 26, 2026
Spavox Marketplace (“Spavox”, “we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal data of Customers, Vendors, and Visitors who use our website, mobile app, and related services (“Platform”).
By using Spavox, you consent to the practices described here. If you do not agree, please do not use the Platform.
1. Who We Are
Spavox Marketplace is a Nigerian technology platform that connects Customers with local Vendors.
Data Controller: Spavox Marketplace
Contact: privacy@spavox.com
Address: [Insert business address], Aba, Abia State, Nigeria
3. How We Collect Data
3.1 Directly from you: When you sign up, place orders, become a Vendor, contact Support, or fill forms.
3.2 Automatically: Through cookies, device permissions, and analytics tools when you use the app/website.
3.3 From third parties: Payment processors, delivery partners, and ID verification services may share data to complete transactions.
4. How We Use Your Data
4.1 To provide the service: Match Customers with Vendors, process orders, payments, and delivery.
4.2 To communicate: Send order updates, security alerts, and Support replies via SMS, email, in-app, or WhatsApp.
4.3 For safety & legal: Verify identity, prevent fraud, resolve disputes, comply with NDPR, FCCPA, and law enforcement requests.
4.4 To improve Spavox: Analytics, bug fixes, new features, and user research.
4.5 For marketing: Only if you opt in. You can unsubscribe anytime.
We do not sell your personal data.
5. Legal Basis for Processing – NDPR
We process your data under these NDPR grounds:
• Contract: To fulfill orders and Vendor Agreement. • Consent: For marketing, cookies, and location. You can withdraw anytime. • Legal Obligation: For tax, anti-fraud, and KYC laws. • Legitimate Interest: To secure the Platform and prevent abuse, balanced against your rights. 6. How We Share Your Data
6.1 With Vendors: Customers’ name, phone, and delivery address are shared only to fulfill orders.
6.2 With Customers: Vendor’s business name, store location, and phone may be shown for pickup or support.
6.3 Service Providers: Payment processors like Paystack/Flutterwave, delivery partners, cloud hosting, SMS gateways, analytics. They are bound by confidentiality.
6.4 Legal & Safety: If required by court order, EFCC, NITDA, or to protect rights, property, and safety of users.
6.5 Business Transfer: If Spavox is acquired or merged, user data may transfer to the new owner with notice.
7. Data Retention
7.1 We keep your data as long as your account is active or needed to provide services.
7.2 After account deletion, we retain some data for 5 years to comply with tax, legal, and anti-fraud obligations, then delete or anonymize it.
7.3 Chat and transaction records may be kept longer for dispute resolution.
8. Your Rights Under NDPR
You have the right to:
• Access: Request a copy of your data. • Rectification: Correct inaccurate data in your profile. • Erasure: Delete your account and data, subject to legal limits. • Object/Restrict: Opt out of marketing or limit processing. • Data Portability: Get your data in a readable format. • Withdraw Consent: Where processing is based on consent.
To exercise rights, email privacy@spavox.com. We will respond within 30 days as required by NDPR. You may also complain to NITDA if unsatisfied.
9. Cookies & Tracking
9.1 We use cookies for login, cart, analytics, and personalization.
9.2 You can disable cookies in browser settings, but some features may break.
9.3 We use Google Analytics and Meta Pixel for app insights. See their policies for opt-out.
10. Data Security
10.1 We use encryption, access controls, and secure servers to protect data.
10.2 Payment card details are processed by PCI-DSS compliant partners. We do not store full card numbers.
10.3 Despite safeguards, no system is 100% secure. Report breaches to security@spavox.com.
11. Children’s Privacy
Spavox is not for users under 18. We do not knowingly collect data from children. If you believe a child has registered, contact us for deletion.
12. International Transfers
Data is stored on servers in Nigeria and/or secure cloud providers that may be outside Nigeria. Where data leaves Nigeria, we ensure adequate protection under NDPR via contracts or adequacy decisions.
13. Third-Party Links
Vendor stores or ads may link to external sites. We are not responsible for their privacy practices. Review their policies before sharing data.
14. Changes to This Policy
We may update this Policy. We’ll post the new date and notify you by email or in-app for major changes. Continued use means you accept the update.
15. Contact Us
Data Protection Officer: [Name if appointed]
Email: privacy@spavox.com
Phone:
Address: [Insert business address], Aba, Abia State, Nigeria[Insert]
For complaints to the regulator: National Information Technology Development Agency (NITDA), www.nitda.gov.ng