Privacy Policy

At Unimart ("we," "our," or "us"), we are committed to protecting your personal data and privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website or mobile application (collectively, the "Platform"). If you do not agree with this policy, please do not use the Platform.

1. Information We Collect

A. Information you provide directly

• Account & profile data: Name, email address, phone number, campus affiliation, and profile photo.
• Listing & brand data: Item photos, descriptions, prices, and the details of any brand storefront you create.
• Ratings & reviews: Ratings and written feedback you leave about other users, and those other users leave about you, which are displayed publicly on the Platform.
• In-app messages and safety reports: Message content, conversation participants, timestamps, read status and reports or blocks submitted through Unimart. We store this information to deliver messages and investigate abuse. Authorised moderators can review reported conversations.
• Support communications: Correspondence you send us by email or through in-app feedback.

B. Information collected automatically

• Device & usage data: IP address, browser and device type, operating system, pages viewed, and features used.
• Campus preference: The campus you select, stored on your device so we can show you nearby listings. We do not collect GPS or precise location data.
• Push notifications: Device registration tokens and platform information used to send account and message notifications. You can manage notification permission in your iPhone or Android settings.
• Diagnostics: Crash reports and performance data used to diagnose faults.
• Interaction events: When you tap to contact a seller on WhatsApp, we record that the interaction occurred so sellers can see how their listings perform.

2. How We Use Your Information

• To provide the Platform — creating and managing your account and letting you list, browse, buy, and sell. Legal basis: performance of a contract with you.
• To process payments for listing boosts and brand subscriptions. Legal basis: performance of a contract.
• To keep the Platform safe — detecting and investigating fraud, abuse, and unauthorised access. Legal basis: our legitimate interest in protecting users.
• To communicate with you — account notices, security alerts, and support replies. Legal basis: contract and legitimate interest.
• To improve the Platform — analysing usage and fixing faults. Legal basis: consent, where required, and our legitimate interest.

3. How We Share Your Information

We do not sell or rent your personal data. We share it only in these circumstances:

• Publicly on the Platform: your display name, campus, profile photo, listings, brand details, and the ratings you have received are visible to other users. If you choose to contact a seller through WhatsApp, your phone number becomes visible under WhatsApp's settings. In-app messages are shared with the other conversation participant.
• Paystack — our payment processor. When you purchase a boost or subscription you are directed to Paystack, which handles your payment details directly. We never store your full card details.
• Amazon Web Services — hosting and storage of uploaded images.
• Sentry — error and crash monitoring, which may capture technical context about a fault.
• Google Analytics — website usage measurement.
• Google Firebase Cloud Messaging and Apple Push Notification service — delivery of mobile notifications using device tokens and notification payloads, which may include message previews.
• WhatsApp (Meta): when you tap to message a seller through WhatsApp, you leave our Platform and that conversation is handled under WhatsApp's privacy policy. Messages sent inside Unimart are handled by Unimart as described above.
• Legal and regulatory bodies where required by Nigerian law, court order, or a valid request from law enforcement, and to enforce our Terms of Service.

4. International Data Transfers

Some of our service providers store and process data outside Nigeria. In particular, images you upload are stored on servers located in the European Union. Where personal data is transferred outside Nigeria, we rely on the recipient country or provider offering an adequate level of protection under the Nigeria Data Protection Act, supported by contractual safeguards with those providers.

5. Cookies

We use cookies to keep you signed in and to remember your preferences. These are essential to the Platform functioning. Analytics cookies help us understand how the Platform is used. You can clear or block cookies in your browser settings, but doing so will sign you out and may break parts of the Platform.

6. Account Deletion and Data Retention

In the iPhone or Android app, open Account and select Delete account. You can also request deletion of your account and associated personal data at any time, without signing in, at shopunimart.ng/delete-account. Both app and website flows use an emailed confirmation code to verify ownership. You can also email shopunimartng@gmail.com with the subject "Account Deletion Request", from the address linked to your Unimart account so we can verify it.

Once verified, your profile, listings, and credentials are permanently deleted or irreversibly anonymised within 30 days. We may retain limited transaction and payment records for up to 7 years where Nigerian tax and financial regulations require it, and fraud-prevention records for up to 2 years. Retained records are not used for any other purpose. Account deletion also removes your Unimart conversations and their messages, notifications, push tokens and points history. Copies already received outside Unimart, such as WhatsApp messages or saved screenshots, are not removed by this process.

7. Security of Your Data

We use industry-standard safeguards including HTTPS encryption in transit, hashed passwords, and restricted database access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Children's Privacy

The Platform is intended for university students and others aged 18 or over. We do not knowingly collect personal data from anyone under 18. If we learn that we have done so, we will delete that data promptly. If you believe a minor has provided us with personal data, contact us at shopunimartng@gmail.com.

9. Your Rights under the Nigeria Data Protection Act

As a data subject in Nigeria, you have the right to:

• Request a copy of the personal data we hold about you.
• Have inaccurate or incomplete data corrected.
• Request erasure of your data where it is no longer needed ("right to be forgotten").
• Object to or restrict how we process your data.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, where processing is based on consent. This does not affect processing carried out before you withdrew.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been infringed.

To exercise any of these rights, contact shopunimartng@gmail.com. We respond within 30 days.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal obligations. We will revise the "Last Updated" date above and, for material changes, notify you by email or through the Platform.