Privacy Policy

1. Data Controller Identification

Vayva Inc. ("Vayva," "we," "us," or "our") is the data controller responsible for the collection, processing, and protection of personal data obtained through the Vayva platform.

Contact Information:

Vayva Inc.
Email: privacy@vayva.shop
Data Protection Officer: dpo@vayva.shop

2. Types of Data Collected

We collect the following categories of personal data:

2.1 Account Information

• Full name
• Email address
• Phone number
• Business name and registration details
• Password (encrypted)

2.2 Business Transaction Data

• Customer names and contact information (as entered by you)
• Order details (products, quantities, prices)
• Payment information (amounts, dates, methods — we do not store payment card details)
• Delivery addresses and tracking information

2.3 Usage and Device Data

• IP address
• Browser type and version
• Device information
• Pages visited and features used
• Time and date of access
• Referring website

3. Lawful Basis for Processing

We process personal data based on the following lawful grounds under the NDPR:

3.1 Contractual Necessity

Processing is necessary to provide the Vayva service to you under our Terms of Service. This includes account management, order tracking, and platform functionality.

3.2 Legal Obligations

We process data to comply with Nigerian law, including tax regulations, anti-money laundering requirements, and law enforcement requests.

3.3 Legitimate Interests

We process data for legitimate business purposes, including fraud prevention, security, service improvement, and customer support. We balance these interests against your privacy rights.

3.4 Consent

For certain processing activities (e.g., marketing communications, non-essential cookies), we obtain your explicit consent.

4. How Data Is Used

We use your personal data to:

• Provide and maintain the Vayva service
• Process and track your business transactions
• Communicate with you about your account and service updates
• Provide customer support
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Improve and develop new features
• Send marketing communications (with your consent)

5. Data Sharing

We do not sell your personal data to third parties.

We may share your data with:

5.1 Service Providers

We share data with vendors who provide infrastructure, analytics, and support services. These vendors are bound by data processing agreements and may only use your data to provide services to Vayva.

5.2 Legal Authorities

We may disclose data when required by Nigerian law, court order, or government request. We will notify you of such requests unless prohibited by law.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you of any such transfer.

6. Data Retention

We retain personal data for the following periods:

• Account Data: For the duration of your account plus 2 years after closure
• Transaction Records: 7 years from the date of transaction (for tax and legal compliance)
• Usage Data: 12 months
• Marketing Data: Until you withdraw consent or 3 years of inactivity

After the retention period, we securely delete or anonymize your data.

7. Security Measures

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and authentication requirements
• Regular security audits and vulnerability assessments
• Employee training on data protection
• Incident response procedures

While we take reasonable precautions, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

8. Your Rights Under NDPR

As a data subject in Nigeria, you have the following rights:

8.1 Right of Access

You may request a copy of the personal data we hold about you.

8.2 Right to Correction

You may request correction of inaccurate or incomplete data.

8.3 Right to Deletion

You may request deletion of your data, subject to our legal retention obligations. Deleting your account will result in loss of access to the Service.

8.4 Right to Data Portability

You may request your data in a machine-readable format for transfer to another service.

8.5 Right to Object

You may object to processing based on legitimate interests or for marketing purposes.

8.6 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

To exercise your rights, contact: privacy@vayva.shop

We will respond to requests within 30 days.

9. Cross-Border Data Transfers

Your data may be processed on servers located outside Nigeria. When we transfer data internationally, we ensure adequate safeguards are in place, including:

• Data processing agreements with standard contractual clauses
• Vendor compliance with international data protection standards
• Encryption and security measures during transfer

10. Cookies and Tracking

We use cookies and similar technologies to provide and improve the Service. For detailed information about our use of cookies, please see our Cookie Management page.

You can control cookie preferences through your browser settings or our cookie consent tool.

11. Children's Privacy

The Vayva service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of the Service after such notice constitutes acceptance of the updated policy.

13. Complaints and Regulatory Contact

If you have concerns about how we handle your personal data, please contact us at privacy@vayva.shop. We will investigate and respond to your complaint.

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC):

Nigeria Data Protection Commission (NDPC)
Website: ndpc.gov.ng
Email: info@ndpc.gov.ng

14. Contact Information

For questions about this Privacy Policy or to exercise your data rights, please contact:

Vayva Inc.
Privacy Team: privacy@vayva.shop
Data Protection Officer: dpo@vayva.shop
General Support: support@vayva.shop