At BestPrice.ng, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains in detail how we collect, use, disclose, and safeguard your information when you visit our website (www.bestprice.ng) or make a purchase from us.
1. INFORMATION WE COLLECT
A. Personal Information You Provide
When you interact with our site, we may collect:
- Contact Details: Name, email address, phone number, shipping/billing address.
- Account Information: Username, password, profile preferences.
- Payment Data: Credit/debit card details (processed securely via Paystack/Flutterwave), bank transfer info.
- Order History: Products purchased, returns, exchanges.
- Communications: Customer service inquiries, feedback, survey responses.
B. Automatically Collected Data
- Device Information: IP address, browser type, operating system.
- Usage Data: Pages visited, time spent, click patterns (via Google Analytics).
- Cookies & Tracking: Session cookies, persistent cookies (see Section 5).
C. Third-Party Data
- Social Media: If you log in via Facebook/Google, we may access your public profile.
- Marketing Partners: Data from ad platforms (e.g., Facebook Pixel) for retargeting.
2. HOW WE USE YOUR INFORMATION
Purpose | Legal Basis |
---|---|
Process orders & payments | Contractual necessity |
Deliver products | Legitimate business interest |
Fraud prevention | Legal compliance |
Send promotions | Consent (opt-in required) |
Improve website experience | Legitimate interest |
Comply with laws | Legal obligation |
3. DATA SHARING & DISCLOSURE
We do not sell your data but may share it with:
A. Service Providers
- Payment Processors: Paystack, Flutterwave (for transaction completion).
- Logistics Partners: Delivery companies (e.g., DHL, GIG Logistics) for shipping.
- IT & Security: Cloud hosting providers (AWS, Google Cloud).
B. Legal Requirements
- Government Authorities: If required by Nigerian law (e.g., FCCPC, NDIC).
- Fraud Investigations: To prevent chargebacks or scams.
C. Business Transfers
- In case of merger/acquisition, user data may be transferred to the new entity.
4. DATA RETENTION & SECURITY
Retention Period
- Active accounts: Retained while you use our services.
- Inactive accounts: Deleted after 2 years of inactivity.
- Order records: Kept for 5 years (for tax/compliance).
Security Measures
- Encryption: SSL/TLS for data transmission.
- Access Controls: Strict employee permissions.
- PCI DSS Compliance: Secure payment processing.
5. COOKIES & TRACKING TECHNOLOGIES
Types of Cookies Used
Cookie Type | Function |
---|---|
Essential | Login, cart functionality |
Analytics | Traffic measurement (Google Analytics) |
Advertising | Retargeting ads (Facebook Pixel) |
Managing Cookies
- Browser Settings: Disable via Chrome/Firefox/Safari preferences.
- Opt-Out Tools: Google Analytics Opt-Out Browser Add-on.
6. USER RIGHTS (UNDER NDPR 2019)
You have the right to:
- Access – Request a copy of your data.
- Rectification – Correct inaccurate information.
- Erasure – Ask for deletion (“right to be forgotten”).
- Restriction – Limit how we use your data.
- Portability – Receive your data in a structured format.
- Object – Opt out of marketing communications.
To exercise these rights, email privacy@bestprice.ng with proof of identity.
7. CHILDREN’S PRIVACY
- Our services are not directed at children under 13.
- If we discover underage data collection, we’ll delete it immediately.
8. INTERNATIONAL DATA TRANSFERS
- Data is primarily stored in Nigeria.
- Third-party providers (e.g., AWS) may process data globally under NDPR safeguards.
9. POLICY UPDATES
- We’ll notify users of changes via email or website banners.
- Last Updated: [Insert Date]
10. CONTACT US
For privacy-related inquiries:
📧 Email: privacy@bestprice.ng
📞 Phone: +234 806 583 3184
📍 Address: 8 kodesoh street , Ikeja Lagos, Nigeria
Implementation Recommendations
- Cookie Consent Banner: Use a tool like CookieYes for GDPR/NDPR compliance.
- Data Protection Officer (DPO): Appoint a DPO if processing large-scale data.
- Regular Audits: Conduct annual security audits with IT teams.
This policy aligns with:
- Nigeria Data Protection Regulation (NDPR 2019)
- General Data Protection Regulation (GDPR) principles