1. Who We Are
Vendoor is operated by Vendoor Commerce Technologies Ltd. (“Vendoor”, “we”, “us”, “our”), a company registered in the Federal Republic of Nigeria. Vendoor provides social commerce infrastructure and software tools that enable merchants to set up online storefronts, list product catalogs, accept secure payments, manage fulfillment, and be discovered in the Vendoor marketplace.
Questions regarding privacy: privacy@vendoor.org.ng • General Support: support@vendoor.org.ng.
2. Who This Policy Covers
- Customers: People who browse or buy from a storefront on Vendoor, with or without an account.
- Sellers (Merchants): Individuals or businesses that register a Vendoor account to operate a storefront.
- Visitors: Anyone visiting our marketing website, marketplace, or public resources.
3. Our Role and the Seller’s Role
When you buy from an independent store on Vendoor, the seller is the Data Controller responsible for fulfilling your order, delivery, returns, and how they handle your customer details. We process those order details strictly on the seller’s behalf as a Data Processor.
Vendoor is the Data Controller for personal data we use for platform accounts, sign-in credentials, platform security, fraud prevention, billing, and marketplace discovery.
4. Information We Collect
Customers
Name, phone number, email address, physical delivery address, order line items, amounts paid, fulfillment milestones, and public order tracking tokens. One-time login passcodes (OTPs) are stored strictly as salted, short-lived SHA-256 hashes.
Sellers
Name, email address, phone number, bcrypt-hashed passwords, store details (name, slug handle, logo, banner, products, pricing, categories), settlement bank details (bank code, account number, Central Bank/NIBSS-verified account holder name), and subscription records.
What We Do NOT Collect
We do not collect or store full credit/debit card numbers (PAN/CVV), BVN, NIN, or biometric imagery. All card entries occur directly on PCI-DSS certified payment modals hosted by our payment partners.
5. Who We Share Information With
- Sellers: Receive order contact and delivery information for purchases placed in their specific storefront.
- Licensed Payment Providers: Paystack and Monnify process transactions and direct bank settlements.
- Messaging Providers: Termii (SMS) and secure SMTP services deliver transactional order notifications and login OTPs.
- Cloud Storage: S3-compatible cloud object storage hosts uploaded product images and digital assets.
6. Cookies
Vendoor uses strictly essential session cookies (vendo_session, vendo_customer_session, vendo_account_session) to maintain security, session state, and account authentication. Vendoor does not use third-party advertising or tracking cookies.
7. Data Retention
Sign-in codes expire automatically within 10 to 15 minutes. Unpaid checkout attempts are cancelled after 24 hours with stock restored. Order and financial records are maintained for statutory accounting durations as required by Nigerian law.
8. Your Rights
Under the Nigeria Data Protection Act 2023, you have the right to request access, correction, deletion, or portability of your personal data, and to withdraw consent. You can reach out directly at privacy@vendoor.org.ng or lodge a complaint with the Nigeria Data Protection Commission (NDPC).
9. Contact Us
Vendoor Commerce Technologies Ltd. • Lagos, Nigeria • Email: privacy@vendoor.org.ng