Legal

Privacy Policy

What we collect, why we collect it, how long we keep it and what you can make us do with it. Written to be read, not to be survived.

Last updated 1 September 2026

Who we are

Wakabuy, Plot 14 Admiralty Way, Lekki Phase 1, Lagos, Nigeria, is the data controller for the personal data described here. Questions go to hello@wakabuy.com.

This policy is written to meet the Nigeria Data Protection Act 2023 and the NDPR.

What we collect

Account details — your name, email address and password. The password is stored in a form we cannot read back.
Order details — what you bought, what you paid, the delivery address and phone number you gave, and the status history of the order.
Payment details — the method used, a reference, and the last four digits of a card. We never see or store a full card number; it goes directly to the payment provider.
Messages — anything you send us through the contact form, email or phone, so support can follow the thread.
Technical data — IP address, browser and device type, and the pages you visit, used to keep the site working and secure.

We do not collect special-category data, and we do not ask for your BVN, NIN or bank login for any reason. Anyone claiming to be Wakabuy and asking for those is not us.

Why we use it

To fulfil your order — take payment, deliver it, handle returns and warranty. This is the performance of our contract with you.
To run the business — fraud prevention, accounting, security and support. This is our legitimate interest, balanced against your rights.
To meet the law — tax and consumer-protection records we are required to keep.
To market to you — only with your consent, which you give by subscribing and can withdraw from any newsletter in one click.

We do not sell your personal data. We do not build advertising profiles from it, and we do not share it with data brokers.

Only the parties who need it to complete something you asked for:

Delivery partners — your name, delivery address and phone number, so they can hand the parcel to you.
Payment providers — the amount and a reference. They handle card details; we do not.
Service providers — hosting, email and analytics, under contracts that bind them to use the data only for us.
Authorities — where we are legally required to, and only to the extent required.

Some of these providers are outside Nigeria. Where data leaves the country we rely on contractual safeguards that hold the recipient to the same standard.

How long we keep it

Account data — while your account is open, then 12 months after you close it.
Order and payment records — 6 years, which is what tax and consumer-protection law requires. Closing your account does not delete these, and we cannot make an exception.
Support messages — 24 months from the last message in the thread.
Marketing consent — until you withdraw it, plus a record of the withdrawal so we do not contact you again by mistake.

Your rights

You can ask us to:

Give you a copy of the personal data we hold about you.
Correct anything that is wrong — most of it you can edit yourself under My Account.
Delete your data, where we are not legally required to keep it.
Restrict or object to how we use it.
Port it to another provider in a machine-readable format.
Withdraw consent for marketing at any time.

Email hello@wakabuy.com and we will respond within 30 days, free of charge. If you are not satisfied with our answer you can complain to the Nigeria Data Protection Commission.

Cookies & storage

We use browser storage for the things the site cannot work without: your session, your cart, your wishlist and your saved preferences. These are set only after you interact with the site and are readable only by this site.

Clearing your browser's site data will sign you out and empty your cart. We use no third-party advertising cookies and no cross-site trackers.

Security

Traffic is encrypted in transit. Passwords are hashed. Access to customer data inside Wakabuy is limited to staff who need it for their role, and every admin account is individually identifiable.

No system is perfect. If a breach affects your data and creates a real risk to you, we will tell you and the regulator without undue delay, and we will tell you what to do about it.

Changes

When this policy changes we update the date at the top. If a change materially affects your rights we will email account holders before it takes effect rather than relying on you to notice.

Contact

Email hello@wakabuy.com, call +234 800 555 8899, or write to Plot 14 Admiralty Way, Lekki Phase 1, Lagos. You can also use the contact form.

This is prototype content prepared for review. Have it checked by a qualified Nigerian data-protection lawyer before the site goes live.