Hadiya Technology Solutions Ltd (“Hadiya Souq”, “we”, “our”, or “us”) is committed to safeguarding your privacy and ensuring the protection of personal data in accordance with the Nigeria Data Protection Regulation (NDPR) 2019 issued by the National Information Technology Development Agency (NITDA).
This Privacy Policy outlines how we collect, use, store, disclose, and protect the personal data of users (“you” or “your”) when you access or use the Hadiya Souq platform.
1. Data Controller
Hadiya Technology Solutions Ltd (operating as Hadiya Souq)is the data controller of all personal data processed through the Hadiya Souq platform.
Registered Office: 21 Olufemi Road, Off Ogunlana Drive, Surulere, Lagos, Nigeria
Phone: 07080075871
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity Data: Full name, gender, date of birth, government-issued ID (where applicable)
- Contact Data: Email address, phone number, delivery address
- Financial Data: Bank account details (vendors), payment card information (via secure payment gateways)
- Transaction Data: Order history, fulfilment records, refunds, and complaints
- Technical Data: Device information, IP address, browser type, geolocation, access times
- Profile Data: Login credentials, preferences, saved items
- Communication Data: Emails, chats, messages, customer service interactions
We do not knowingly collect data from children under the age of 13 without parental or guardian consent.
3. Lawful Basis for Processing
We process your data based on one or more of the following lawful grounds:
- Consent (e.g., when you sign up or subscribe to updates)
- Performance of a Contract (e.g., facilitating purchases, order fulfilment)
- Legal Obligation (e.g., tax compliance, anti-fraud regulations)
- Legitimate Interest (e.g., improving our services, analytics, fraud prevention)
You have the right to withdraw your consent at any time without affecting the lawfulness of prior processing.
4. Purpose of Data Processing
We use your data to:
- Register your user or vendor account
- Process and manage orders, payments, and deliveries
- Facilitate communication between buyers, vendors, and Hadiya Souq
- Provide customer service and resolve disputes
- Comply with regulatory obligations
- Send promotional and transactional communications (with your consent)
- Maintain platform security and detect fraud
- Analyse usage trends and improve our offerings
5. Data Sharing and Disclosure
We do not sell your personal data.
However, we may share your data with:
- Vendors (only when necessary for order fulfilment)
- Payment Processors (secure, PCI-compliant gateways)
- Logistics Partners (for delivery and returns)
- IT and Cloud Service Providers
- Regulatory or law enforcement authorities (if legally required)
All third-party processors are under strict confidentiality and data protection obligations.
6. International Data Transfers
We may transfer your personal data outside Nigeria (e.g., to cloud service providers). When we do so, we ensure appropriate safeguards in compliance with the NDPR, such as standard contractual clauses or data processing agreements.
7. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes stated above, and to comply with legal, accounting, or regulatory obligations. Typically:
- Account information: retained until account closure
- Transaction records: retained for at least 6 years (in line with tax/legal obligations)
- Customer service records: retained for 2 years after resolution
8. Data Subject Rights
In accordance with the NDPR, you have the following rights:
- Right to Access your personal data
- Right to Rectification of inaccurate or incomplete data
- Right to Erasure (“Right to be forgotten”)
- Right to Restrict Processing
- Right to Object to processing for direct marketing
- Right to Data Portability
- Right to lodge a complaint with NITDA if you believe your rights have been violated
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure.
Examples include:
- Encrypted data transmission (HTTPS/SSL)
- Access controls and role-based permissions
- Regular vulnerability scanning and software updates
- Employee data protection training
10. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience, analyse site traffic, and personalise content. You can manage your cookie preferences through your browser settings.
11. Third-Party Links
Our Platform may contain links to third-party websites. We are not responsible for the content, terms, or privacy practices of such external sites.
12. Changes to this Privacy Policy
We reserve the right to update or modify this Policy at any time. If material changes are made, we will provide reasonable notice through the Platform or via email.
Your continued use of the Platform constitutes your acceptance of the revised Privacy Policy.
13. Contact Us
For questions or concerns regarding this Privacy Policy or your personal data, please contact us.
Hadiya Technology Solutions Limited Ltd
1B Olabanji Olajide, of Rahman Adeboyejo, Lekki, Lagos, Nigeria
+234 (0) 708 007 5871