Privacy Policy

1. Who we are

Yasmine Mart ("Yasmine", "we", "us") operates the online store at yasminemart.com, our home delivery service, and the pickup stations across Lagos listed on our site. Our head office is at 57 Oduntan Street, Kosofe, Lagos, Nigeria. We are the data controller for the personal information described in this policy.

This policy is written to comply with the Nigeria Data Protection Act 2023 (NDPA) and the regulations issued under it. Where you access our services from outside Nigeria, local laws may also apply.

2. Information we collect

We collect the following information when you create an account, place an order (with or without an account), or contact us:

• Account details: first name, last name, email address, phone number, and a password (stored only as a secure hash). You may optionally tell us your gender and country.
• Order details: your name, phone number and email, the products you buy, whether you chose pickup (and which station and day) or home delivery, order totals, how you paid, and the status of each order.
• Delivery addresses you enter at checkout or save to your account for convenience.
• Bank transfer receipts: if you pay by bank transfer, the photo, screenshot or PDF of your receipt that you upload, which may show your name, bank and account details.
• Reviews and ratings you leave on products, including the display name you give. You do not need an account to leave a review.
• Messages you send us by email, WhatsApp, or through the site.
• Technical data such as your IP address, browser type, and pages visited, used to keep the site secure and working.

If you sign in with a social account such as Google, we receive your name, email address and profile picture from that provider. We do not receive your social account password.

We do not collect or store your card details. Card, wallet and gateway payments are handled entirely by our payment partners (see "Who we share your information with").

3. How we use your information

We use your information to:

• Create and manage your account and verify your identity when you sign in.
• Process your orders and take payment, including matching bank transfers to orders using the receipts you upload.
• Confirm your order by SMS and email, and email you when it is ready for pickup or out for delivery, and send invoices on request.
• Deliver your order to the address you give us, or hand it over at your chosen pickup station.
• Provide customer support and respond to your enquiries.
• Publish product reviews you choose to leave, after moderation.
• Keep records required by tax and accounting law.
• Detect and prevent fraud, abuse and unauthorised access.
• Improve our products, stations and website.

We rely on the performance of our contract with you (fulfilling your order), our legal obligations, and our legitimate interest in running a safe and efficient business as the legal bases for this processing. Where we send marketing messages we will ask for your consent first, and you can withdraw it at any time.

4. Cookies and browser storage

We use a small number of strictly necessary cookies to keep you signed in and to protect the site against cross-site request forgery. We also use your browser's local storage to remember the items in your cart and the contact details you enter at checkout, so you do not have to type them again next time.

We do not use advertising or third-party tracking cookies. You can clear cookies and local storage through your browser settings, but you may need to sign in again and your cart may be emptied.

5. Who we share your information with

We share personal information only with service providers who help us run the store, and only as much as they need:

• Payment processors (Paystack and OPay) to take and confirm payment. They process your card, wallet or bank details under their own privacy policies.
• SMS and email providers (Termii and Resend) to send order confirmations, order updates, invoices and account emails.
• Our hosting and database providers, who store our data on secure servers, and our file storage provider (Cloudinary), which stores the bank transfer receipts you upload.
• WhatsApp (Meta), if you choose to chat with us there.
• Social sign-in providers such as Google, if you choose to sign in that way.
• Station staff and delivery riders, who see your name, phone number, order details and (for delivery) your address so they can hand over your order.

We may also disclose information when required by law, a court order, or a lawful request from a Nigerian regulator or law-enforcement agency. We never sell your personal information.

6. International transfers

Some of our service providers store data on servers outside Nigeria. When this happens we make sure the transfer is covered by adequate safeguards permitted under the NDPA, such as the provider's contractual commitments to protect your data.

7. How long we keep your information

We keep your account information for as long as your account is active. Order and payment records are kept for at least six years after the order to meet Nigerian tax and accounting requirements. Reviews remain published until you or we remove them. When information is no longer needed, we delete it or anonymise it.

8. Keeping your information secure

All traffic between your browser and our site is encrypted with HTTPS. Passwords are hashed and never stored in plain text. Access to customer data inside our business is limited to staff who need it to do their job. No system is completely secure, so if we become aware of a breach that affects you we will notify you and the Nigeria Data Protection Commission as the law requires.

9. Your rights

Under the NDPA you have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete. You can edit most details yourself on your account profile page.
• Ask us to delete your information, subject to records we must keep by law.
• Object to, or ask us to restrict, certain processing.
• Receive a copy of the information you gave us in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Nigeria Data Protection Commission.

To exercise any of these rights, email hello@yasminemart.com from the address on your account. We will respond within 30 days.

10. Children

Our store is intended for adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has created an account with us, contact us and we will remove it.

11. Changes to this policy

We may update this policy from time to time. The effective date at the top shows when it was last changed. If the changes are significant we will notify you by email or with a notice on the site before they take effect.