ORRANET Privacy Policy

Last updated: 16/09/2026

1. Introduction

This Privacy Policy explains how ORRANET ("we," "us") collects, uses, shares, and protects personal information belonging to vendors and customers who use the Platform, in accordance with the Nigeria Data Protection Act, 2023 (NDPA).

2. Information We Collect

From Vendors: business name, email address, phone/WhatsApp number, password (stored securely, never in plain text), store description and logo, bank account name, account number, and bank name (for receiving customer payments via Paystack).

From Customers: name, phone number, email address, and delivery address, provided at checkout on a vendor's storefront.

Automatically: basic usage data such as store views, product views, and general browsing activity on storefronts, used to power the analytics shown to vendors.

3. How We Use Information

We use the information collected to: create and manage vendor and customer accounts; process orders and payments; enable communication between vendors and customers (including via WhatsApp); send transactional emails (account verification, password resets, order confirmations) through our email provider, Brevo; display store analytics to vendors; maintain the security and proper functioning of the Platform; and comply with legal obligations.

4. Sharing of Information

We share information with third parties only as necessary to operate the Platform:

• Paystack (payment processor) receives transaction details necessary to process payments and, for vendor sales, split payment directly to the vendor's registered bank account.
• Brevo (email service provider) receives email addresses and names necessary to send account-related emails.
• Vendors receive the name, phone number, delivery address, and order details of customers who purchase from their store, since fulfilling the order requires this.

We do not sell personal information to third parties.

5. Data Storage and Security

Passwords are stored using industry-standard hashing and are never visible to ORRANET staff in plain text. We take reasonable technical measures to protect stored data, but no system is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain account and order information for as long as the account is active and for a reasonable period afterward to comply with legal, tax, and dispute-resolution obligations.

7. Your Rights

Under the NDPA, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data, subject to legal retention obligations; and withdraw consent where processing is based on consent. To exercise these rights, contact us at shopwithorranet@gmail.com.

8. Cookies

The Platform may use cookies or similar technologies necessary for login sessions and basic functionality. We do not use cookies for third-party advertising.

9. Children's Privacy

The Platform is not intended for individuals under 18. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or by email where appropriate.

11. Contact

For privacy-related questions or requests, contact us at shopwithorranet@gmail.com.