Privacy Policy

FinStore Technologies ("FinStore", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. This policy applies to both merchants and their customers transacting on FinStore-powered stores.

We comply with the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR) issued by the National Information Technology Development Agency (NITDA).

For Merchants:

• Full name, email address, phone number, and business details.
• Bank Verification Number (BVN) and/or National Identification Number (NIN) for KYC compliance.
• Business registration details (CAC number) where applicable.
• Payment and withdrawal transaction data.
• Store configuration, product listings, and inventory data.
• Device information, IP address, and usage analytics.

For Customers (shoppers on merchant stores):

• Name, email, and phone number provided during checkout.
• Shipping address and delivery preferences.
• Order history and payment confirmation details.

We use your information to:

• Create and manage your merchant account.
• Verify your identity and comply with KYC/AML regulations.
• Process payments and withdrawals through Fintava.
• Send transactional emails (order confirmations, withdrawal alerts, refund notifications).
• Improve the Platform through usage analytics and feedback.
• Detect and prevent fraud, abuse, and unauthorised access.
• Comply with legal obligations under Nigerian law.

We do not sell your personal data. We may share your information with:

• Fintava - our payment processing partner, to facilitate transactions and comply with financial regulations.
• NITDA / Regulatory Authorities - where required by law or court order.
• Service Providers - trusted third parties who assist us in operating the Platform (email delivery, hosting, analytics) under strict confidentiality agreements.
• Merchants (for customer data) - customer order data is shared with the relevant merchant to fulfil orders. Merchants are bound by their own privacy obligations.

We retain your personal data for as long as your account is active and for a period of 7 years thereafter to comply with Nigerian financial regulations. Transaction records are kept for a minimum of 5 years as required by the Central Bank of Nigeria (CBN).

You may request deletion of your account data by contacting us at support@finstore.africa. Note that we may retain certain records where legally required.

FinStore uses cookies and similar tracking technologies to maintain your session, remember your preferences, and understand how the Platform is used. You can disable cookies in your browser settings, though this may affect Platform functionality.

We use anonymised analytics data to improve the Platform. No personally identifiable information is shared with analytics providers.

We implement industry-standard security measures including TLS encryption, hashed passwords, CSRF protection, and regular security audits to protect your data. However, no system is completely secure, and we cannot guarantee absolute security.

If you believe your account has been compromised, contact us immediately at support@finstore.africa.

Under the NDPA 2023, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data (subject to legal retention requirements).
• Object to or restrict processing of your data.
• Data portability - receive your data in a machine-readable format.
• Lodge a complaint with NITDA if you believe your rights have been violated.

To exercise these rights, email us at support@finstore.africa with the subject line "Data Rights Request".

Merchant stores powered by FinStore are independent businesses. We are not responsible for the privacy practices of third-party stores or websites linked from the Platform. We encourage you to review the privacy policy of any site you visit.

The Platform is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe we have collected data from a child, please contact us immediately.

We may update this Privacy Policy periodically. We will notify you of significant changes by email or via a notice in your merchant dashboard. Your continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

For privacy-related enquiries or to exercise your rights: