Privacy Policy

We collect the following categories of information when you use TradeDeck:

Account information: Name, email address, phone number, and password when you register.

Identity verification (sellers): NIN (National Identification Number), one photo ID, a selfie, a proof-of-address bill, a bank statement and a bank or trade reference letter. We do not collect your BVN (Bank Verification Number).

Business information: CAC registration number, market stall details, and bank account information for seller payouts.

Transaction data: Order history, payment records, delivery addresses, and dispute logs.

Device and usage data: IP address, browser type, device identifiers, pages visited, and interactions with our platform.

Location data: Approximate location (city/state) derived from IP address; precise GPS location only if you grant permission via the app.

Communications: Messages sent through our in-app support chat, email, or WhatsApp channels.

We use your information to:

- Create and manage your TradeDeck account - Process orders and payments securely - Verify seller identities and market affiliations - Deliver purchased goods and track shipments - Send transactional notifications (order confirmations, delivery updates) - Provide customer support and resolve disputes - Detect and prevent fraud, abuse, and unauthorised access - Comply with Nigerian law, CBN directives, and NDPA obligations - Improve our platform through anonymised analytics - Send marketing communications (only with your consent; opt-out any time)

We do not sell your personal data. We share information only in the following circumstances:

With sellers/buyers: When you place an order, your delivery name, address, and phone number are shared with the relevant seller to fulfil the order.

Payment processors: We share payment data with licensed processors in Nigeria (and with a PECH wallet product if that app is later enabled) to complete charges. Those processors are bound by their own privacy policies and CBN licensing conditions.

Logistics partners: When a seller books or hands off a parcel, delivery name, address, and phone may be shared with that courier or logistics partner to fulfil delivery. Live GPS tracking is not a TradeDeck marketplace feature until Pech Mobility is connected.

Legal obligations: We may disclose information to law enforcement, regulatory bodies (including NITDA, CBN, EFCC), or courts when required by Nigerian law.

Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity with notice to you.

All third parties with whom we share data are required to maintain appropriate security standards.

We use cookies and similar technologies to:

- Keep you logged in between sessions - Remember your cart and preferences - Analyse traffic and product usage (via privacy-respecting analytics tools) - Prevent fraud and bot activity

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of TradeDeck. We do not use third-party advertising cookies.

We implement industry-standard security measures including:

- TLS/HTTPS encryption for all data in transit - AES-256 encryption for sensitive data at rest - Role-based access controls limiting employee access to your data - Regular security audits and penetration testing - NIN and identity documents kept in private, access-controlled storage, shown only to trained reviewers, and every reviewer view is logged

While we take every reasonable precaution, no system is 100% secure. If you suspect unauthorised access to your account, contact us immediately at security@tradedeck.app.

Under the Nigeria Data Protection Act 2023 (NDPA), you have the right to:

- Access: Request a copy of the personal data we hold about you - Rectification: Correct inaccurate or incomplete data - Erasure: Request deletion of your data (subject to legal retention obligations) - Portability: Receive your data in a structured, machine-readable format - Objection: Object to processing based on legitimate interests or for marketing - Withdrawal of consent: Withdraw any consent you have given at any time

To exercise any of these rights, email privacy@tradedeck.app. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).

If you have questions about this policy or our data practices, contact:

TradeDeck Privacy Team Email: privacy@tradedeck.app Address: PECH Group, Victoria Island, Lagos, Nigeria WhatsApp: +234 806 070 0813

Our Data Protection Officer (DPO) can be reached at dpo@tradedeck.app.