1. Who we are
BuyerSafeCart Nigeria ("BuyerSafeCart", "we", "us", "our") operates the e-commerce escrow platform at buyersafecart.com. We are registered in Nigeria and committed to protecting the privacy of all users — buyers, sellers, and affiliates — on our platform.
This Privacy Policy explains what personal data we collect, how we use it, and your rights in relation to that data.
2. Data we collect
When you register
- Full name, email address, phone number
- WhatsApp number (for order notifications)
- Delivery address (for buyers)
- Password (stored as an encrypted hash — we never see your plain password)
When you complete KYC (sellers only)
- National Identification Number (NIN)
- Government-issued ID (National ID, Voter's Card, Passport, or Driver's Licence)
- Bank account number, bank name, and bank code
- CAC registration number (Level 3 only, for business sellers)
- We do NOT collect BVN — Bank Verification Number is not required on BuyerSafeCart
When you place or receive an order
- Order details, product information, quantities, prices
- Delivery address
- Tracking number and order status updates
- Confirmation method (dashboard or WhatsApp)
Automatically collected data
- IP address, browser type, device information
- Pages visited, time spent, referral source
- WhatsApp interaction logs (if using our WhatsApp ordering system)
3. How we use your data
- To process orders and payments — escrow management, payout processing
- To verify seller identity — KYC review and fraud prevention
- To send notifications — order updates, payment confirmations, tracking via email and WhatsApp
- To calculate trust scores — seller performance metrics based on delivery and ratings
- To resolve disputes — providing evidence to our dispute resolution team
- To improve our platform — analytics and product development
- To comply with legal obligations — Nigerian data protection and financial regulations
We do not use your data for targeted advertising. We do not sell your personal data to third parties.
4. Who we share your data with
- Paystack — to process payments. Paystack is PCI-DSS compliant. See Paystack's privacy policy.
- Meta / WhatsApp — when you interact via WhatsApp Business API. See WhatsApp's privacy policy.
- Buyers ↔ Sellers — limited information is shared between parties when an order is placed (name, order details). We do not share phone numbers without consent.
- Law enforcement — if required by Nigerian law or court order.
We do not share your data with advertisers or data brokers.
5. KYC & identity verification
For sellers, we collect identity documents to verify who we are doing business with and to prevent fraud. This is required under Nigerian financial regulations.
KYC documents (NIN, Government ID, bank details) are:
- Stored securely with encryption at rest
- Accessible only to authorised BuyerSafeCart admin staff
- Not shared with buyers or third parties except where legally required
- Retained for a minimum of 5 years after account closure (regulatory requirement)
We do not require BVN. We believe sellers should be able to verify their identity without sharing their most sensitive banking credential with a new platform.
6. Payment data
BuyerSafeCart does not store card numbers, CVV codes, or full bank account details for buyers. All payment processing is handled by Paystack, which is PCI-DSS Level 1 certified.
We retain transaction records (amounts, reference numbers, timestamps) for legal and audit purposes for 7 years.
7. WhatsApp communications
If you use our WhatsApp ordering or notification system, your WhatsApp number and message content are processed to deliver order updates, tracking information, and confirmation prompts.
We log WhatsApp messages in our system for order management purposes. We do not use your WhatsApp history for marketing.
You can opt out of WhatsApp notifications in your account settings at any time.
8. Cookies
We use essential cookies to keep you logged in and maintain your session. We also use analytics cookies (Google Analytics) to understand how our platform is used.
We do not use advertising cookies. You can disable cookies in your browser settings, but this may affect platform functionality.
9. Your rights
Under the Nigeria Data Protection Act (NDPA) 2023, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your data (subject to legal retention requirements)
- Restriction — request restriction of processing in certain circumstances
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interests
To exercise any of these rights, contact us at privacy@buyersafecart.com or via our contact page.
10. Data security
We protect your data using industry-standard measures including:
- HTTPS/SSL encryption for all data in transit
- Bcrypt password hashing (your password is never stored in plain text)
- Database encryption at rest
- Regular security audits
- Access controls — staff only see data they need for their role
- Two-factor authentication for admin accounts
In the event of a data breach that affects your rights, we will notify you within 72 hours as required by the NDPA.
11. Data retention
- Account data: retained while your account is active, deleted 90 days after account closure (request)
- Transaction records: 7 years (legal requirement)
- KYC documents: 5 years after account closure (regulatory requirement)
- Order communications: 2 years