Ojaa Privacy Policy

1. Introduction

Welcome to Ojaa (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our online marketplace for farm produce in Nigeria. By using our platform, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly to us through your interactions with our platform.

For Customers: We collect your full name and contact information including email and phone number, along with your delivery address and billing information. Your payment information is processed securely through our payment partners, and we maintain records of your order history and preferences. Additionally, we store your account credentials and profile information to provide you with a personalized experience.

For Vendors/Farmers: We gather your business name and registration details, as well as contact person information and your business address and location. To facilitate payments, we collect your bank account details, and we maintain records of your product listings and descriptions. We also require business documentation and certifications to ensure marketplace quality and vendor verification.

2.2 Automatically Collected Information

Our system automatically collects device information such as your IP address, browser type, and operating system. We track usage data including pages visited, time spent on our platform, and click patterns to improve user experience. With your permission, we may collect location data, and we use cookies and similar tracking technologies to enhance platform functionality.

2.3 Information from Third Parties

We may receive social media profile information if you choose to connect your accounts with our platform. We also obtain information from payment processors to facilitate transactions and from delivery partners to ensure smooth order fulfillment and logistics coordination.

3. How We Use Your Information

3.1 Primary Uses

The primary purpose of collecting your information is to ensure smooth operation of our marketplace. We process and fulfill orders, facilitate communication between buyers and vendors, and manage all payment transactions including vendor payouts. Your information enables us to provide comprehensive customer support, send order confirmations and delivery updates, and verify vendor credentials to maintain marketplace quality and trust.

3.2 Secondary Uses

Beyond our core services, we use your information to continuously improve our platform and services based on user behavior and feedback. With your consent, we send promotional communications about new products, special offers, and platform updates. We conduct market research and analytics to better understand user needs and preferences, ensure platform security and prevent fraudulent activities, and comply with our legal obligations under Nigerian law.

4. Information Sharing and Disclosure

4.1 With Vendors

We share relevant customer information with vendors to fulfill orders effectively. This includes your name, delivery address, contact information, and order details necessary for vendors to process, prepare, and deliver your purchases. We ensure vendors understand their responsibilities in handling this information and require them to use it solely for order fulfillment purposes.

4.2 With Service Providers

We partner with trusted third parties who assist us in providing our services. These include payment processing companies that handle financial transactions securely, delivery and logistics partners who ensure your orders reach you safely, customer support services that help resolve any issues you may encounter, marketing and analytics providers who help us understand user behavior and improve our services, and IT services and security companies that protect our platform and your data.

4.3 Legal Requirements

We may disclose your information when required by Nigerian law and regulations, court orders, or legal processes. Government agencies such as NITDA (National Information Technology Development Agency) and CAC (Corporate Affairs Commission) may require access to certain information for regulatory purposes. We also reserve the right to disclose information when necessary to protect our rights and ensure the safety of our users and the integrity of our platform.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business transaction. We will ensure that any such transfer maintains the same level of privacy protection outlined in this policy and will notify users of any changes to data handling practices.

5. Data Security

We implement comprehensive technical and organizational measures to protect your information from unauthorized access, alteration, disclosure, or destruction. Our security measures include SSL encryption for all data transmission between your device and our servers, secure servers and databases with restricted access controls, multi-factor authentication systems for staff access, regular security audits and system updates to address potential vulnerabilities, and ongoing staff training on data protection best practices. However, we acknowledge that no method of transmission over the internet is completely secure, and while we strive to protect your personal information, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Control

You have the right to view and update your account information at any time through your user dashboard. You can request a copy of your personal data that we hold, and you may delete your account subject to legal requirements and ongoing transaction obligations. Additionally, you can opt-out of marketing communications while continuing to receive essential service-related messages.

6.2 Cookie Management

You can control cookies through your browser settings, allowing you to accept, reject, or delete cookies as you prefer. However, please note that disabling certain cookies may affect the functionality of our platform and limit your ability to use some features.

6.3 Communication Preferences

You have full control over your communication preferences and can manage them through your account settings or by contacting us directly. This includes choosing which types of notifications you receive and how frequently you hear from us.

7. Data Retention

We retain your information only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Customer data is typically retained for seven years after account closure to meet tax and legal compliance requirements under Nigerian law. Vendor information may be retained longer due to business documentation requirements and ongoing relationship management needs.

8. International Transfers

While we primarily operate within Nigeria and store data locally, some of our service providers may be located outside Nigeria. In such cases, we ensure that appropriate safeguards are in place for any international data transfers, including contractual protections and compliance with international data protection standards.

9. Children’s Privacy

Our platform is designed for adults and is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately so we can take appropriate action to remove such information from our systems.

10. Compliance with Nigerian Laws

This Privacy Policy is designed to comply with all applicable Nigerian data protection and privacy laws. We adhere to the Nigeria Data Protection Regulation (NDPR) 2019, respect privacy rights enshrined in the Nigerian Constitution, comply with relevant provisions of the Cybercrime Act 2015, and operate within the Consumer Protection Framework established by Nigerian regulatory authorities.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will notify you by posting the updated Privacy Policy on our platform, sending email notifications for significant changes that affect your rights, and providing prominent notice through our platform interface. We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at privacy@ojaa.com.ng. We are committed to addressing your inquiries promptly and transparently.

13. Vendor-Specific Provisions

13.1 Vendor Data Processing

Vendors who participate in our marketplace acknowledge that they may receive customer personal data as part of order fulfillment. By joining our platform, vendors agree to use customer data solely for order fulfillment purposes, implement appropriate security measures to protect customer information, refrain from using customer data for independent marketing without explicit consent, and delete customer data after order completion unless retention is required for legal compliance.

13.2 Vendor Responsibilities

Vendors are responsible for protecting any customer data in their possession and complying with all applicable data protection laws. They must promptly notify us of any data breaches or security incidents involving customer information and cooperate fully with any customer data requests or investigations. Vendors who fail to meet these responsibilities may be subject to account suspension or termination.

14. Dispute Resolution

Any disputes regarding privacy matters will be resolved through a structured process designed to provide fair and efficient resolution. We encourage direct communication and negotiation as the first step in resolving any concerns. If direct resolution is not possible, we support mediation through recognized Nigerian dispute resolution bodies. As a final resort, disputes may be resolved through Nigerian courts with appropriate jurisdiction, and we commit to cooperating fully with any legal proceedings while protecting user privacy to the extent possible under law.