Privacy Policy

1. Data we collect

Account data: name, email address, phone number, account type (client or shopper), password credentials (stored hashed) and role assignment.

Transaction data: shopping lists, destination city, postal code and country, quotes, payment method, payment references, uploaded proof-of-payment documents, receipts, referral codes, shipping and delivery dates.

Verification data for Shoppers: identity documents and any KYC information we are required to collect.

Technical data: IP address, device and browser information, session tokens, and usage logs used for security and fraud prevention.

2. How we use your data

To create and secure your account; to match requests with Shoppers; to process quotes, payments, refunds and payouts; to arrange shipping and customs documentation; to detect and prevent fraud; to resolve disputes; and to comply with legal obligations.

To send transactional notifications about quotes, payments and fulfilment. Marketing messages are only sent with your consent and can be withdrawn at any time.

3. Lawful bases

Performance of a contract (operating your Orders), legal obligation (tax, anti-money-laundering, customs), legitimate interests (platform security, fraud prevention, service improvement) and consent (marketing, optional cookies).

4. Sharing your data

With the Shopper handling your request (limited to the information needed to buy and ship: items, destination and contact details) and with shippers, customs authorities and couriers as required for delivery.

With payment providers and banks to process payments and refunds; with cloud hosting, database, email and analytics processors bound by contract; and with regulators, law enforcement or courts where legally required.

We never sell your personal data.

5. Cross-border transfers

Delivering goods internationally requires transferring limited personal data (name, address, phone, contents description) to the destination country and its customs authorities. Where data leaves Nigeria, we rely on adequacy, contractual safeguards or your explicit consent as permitted by the NDPA.

6. Retention

Account and transaction records are retained for at least 6 years after the last transaction to meet Nigerian tax, accounting and anti-money-laundering requirements. Proof-of-payment files are retained for the same period. Technical logs are retained for up to 12 months. Data no longer required is deleted or irreversibly anonymised.

7. Your rights

You may request access to, correction of, or deletion of your personal data; object to or restrict certain processing; withdraw consent; request portability; and lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Send requests to privacy@kaswana.com. We respond within 30 days. Deletion requests may be limited where we must retain records by law or to conclude an open Order or dispute.

8. Security

We use encryption in transit, role-based access controls, row-level database security, signed time-limited links for payment proofs, and audit logging. No system is perfectly secure; report any suspected breach to security@kaswana.com immediately. We notify affected users and the NDPC of reportable breaches as required by law.

9. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in, remember your cart and preserve your account session. Optional analytics are used only where permitted. You can clear storage in your browser, though this will sign you out.

10. Children

The Platform is not intended for anyone under 18. We do not knowingly collect data from children and will delete such data on discovery.

11. Governing law

This Privacy Policy is governed by the laws of the Federal Republic of Nigeria and forms part of our Terms and Conditions.