1. Who we are
Trade-Hub ("we", "us") runs the marketplace at thetradehubstore.com, where independent vendors sell products and services to buyers. For the personal data described here we are the data controller, and we process it under the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation 2019 (NDPR).
Vendors on Trade-Hub are separate businesses. When a vendor uses your details to fulfil your order, they are responsible for how they handle them too.
Contact for anything in this policy: info@thetradehubstore.com.
2. What we collect
- Your details: name, email address, phone number and delivery address, from your account, checkout, a booking or a message.
- Orders and payments: what you bought or booked, from whom, the amounts, delivery choices and the payment references our payment provider gives us. We never see or store your full card details.
- Bookings: the service, the day and time, and the address when the provider comes to you.
- Messages: what you write to a shop and what the shop replies.
- Requests: when you ask us to find something, your description, the photos and videos you upload, and how to reach you.
- Reviews and likes you leave on products and shops.
- Vendors and affiliates: business and contact details; for vendors who verify, the type and number of an identity document (NIN, driver's licence or passport) and images of it; bank details for payouts; and a record of when you accepted our terms.
- Technical information: IP address, browser and device type, the pages you visit and the cookies described in our Cookie Policy.
3. Why we use it, and our lawful basis
The NDPA allows personal data to be processed only on a lawful basis. Ours, for each purpose:
| What we do | Lawful basis |
|---|---|
| Run your account; take and fulfil orders, bookings and digital downloads; send receipts, delivery updates and replies | Performing our contract with you |
| Take payments, pay vendors and affiliates, and keep tax and accounting records, including VAT | Contract, and our legal obligations |
| Book couriers and give them what they need to deliver to you | Contract |
| Verify vendors' identity before paying them out, and prevent fraud | Our legitimate interest in a safe marketplace, and legal obligations where they apply |
| Keep the marketplace safe, including messages, listings and payments, and resolve disputes | Our legitimate interest in protecting buyers and sellers from fraud and abuse |
| Find a seller for something you asked us to look for | Taking the steps you asked for before a purchase; you can withdraw the request at any time |
| Keep the site secure: limits on repeated attempts, checks for automated sign-ups, security logs | Legitimate interest |
| Count visits with a cookie, and remember referrals for 30 days | Your consent, which you can withdraw at any time |
We do not sell personal data, and we do not use it for advertising by other companies.
4. Who we share it with
- The vendor you buy from or book with receives your name, phone number, delivery or service address and any note you leave for them, to fulfil your order. A shop you message sees your name and your messages.
- Our payment provider processes your payment.
- Our delivery partners and their couriers receive your name, phone number and address to deliver your order.
- An address lookup service receives the address text you type, to suggest matching addresses.
- The providers that host the site, send its emails and deliver its fonts and images handle the information needed to do that.
- Sellers who may have what you asked for may be shown the description, photos and videos from your request, but not your contact details unless you agree.
- Authorities, when the law requires it, or to protect people from harm or fraud.
5. Transfers outside Nigeria
Some of the providers above may store or process data outside Nigeria. Where they do, we transfer it only as the NDPA permits, with the safeguards it requires.
6. How long we keep it
- Orders, payments and receipts: for at least seven years, for tax and accounting, as our Terms say.
- Your account: while it is open. When you ask us to close it, we delete or anonymise what we are not required to keep.
- Messages and requests, with their photos and videos: as long as needed to deal with them and to resolve any dispute, and you can ask us to delete them sooner.
- Vendors' identity documents: while the vendor account is open, unless the law requires them to be kept longer.
7. Keeping it safe
The site runs over encrypted connections, passwords are never stored in readable form, and documents and uploads are stored securely and seen only by the people who need them. If a breach of personal data puts you at risk, we will tell you and the Nigeria Data Protection Commission as the NDPA requires.
8. Your rights
Under the NDPA you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct anything that is wrong or incomplete;
- delete it, where we have no lawful reason to keep it;
- restrict how we use it, or object to our using it on the basis of our legitimate interests;
- give it to you, or to another organisation, in a common machine-readable format;
- stop using it for anything you consented to (withdrawing consent does not affect what we did before);
- not subject you to decisions made only by automated means that significantly affect you. We do not make any.
Email info@thetradehubstore.com from the address on your account. We may ask you to confirm who you are before acting, and we answer without undue delay. If you are not satisfied, you can complain to the Nigeria Data Protection Commission.
9. Children
Trade-Hub is for people aged 18 and over, as our Terms say. We do not knowingly collect personal data from children. If you believe a child has given us their details, tell us and we will delete them.
10. Changes and contact
When what we collect or share changes, this page changes with it, and the date at the top moves. For a significant change we will tell you by email or on the site. Questions: info@thetradehubstore.com.