Zigaara Privacy Policy

Effective date: July 11, 2025

1. Introduction

Welcome to Zigaara

Zigaara Limited (“Zigaara”, “we”, “us”, or “our”) operates the website https://zigaara.com and its related services and applications. This Privacy Policy outlines how we collect, use, and share personal data when you access or use our platform.

We collect your information to provide and improve the services we offer. By using Zigaara, you agree to the practices described in this Privacy Policy.

Zigaara is committed to protecting the privacy and security of your personal data. This Policy explains how we collect, use, disclose, and store your personal data when you use our platform or services.

We believe that your data should be handled with care, kept secure, and only used in ways that directly support your experience. That’s why we take a thoughtful approach to data collection collecting only what’s necessary to help you create and manage your store, and improving our services responsibly. Where possible, we minimize, anonymize, or delete data we no longer need.

2. Scope

This Policy applies to all personal data collected through our platform, website, mobile application, or any other services offered by Zigaara. Personal data is any information that relates to an identified or identifiable individual.

3. Data We Collect

We may collect the following types of personal data:

Account Information: When you create an account with Zigaara, we may collect your name, email address, phone number, business name, and other business-related information.
Banking Information: When you connect your store to receive payments, we may collect your bank account details or other financial information required to process payouts and complete transactions.
Transaction Information: When you use our platform to manage orders or facilitate transactions, we may collect information about your orders, such as product details, order value, and payment information.
Usage Data: We may collect data about your use of our platform, such as the pages you visit, the features you use, and the time you spend on the platform.
Device Information: We may collect information about the device you use to access our platform, such as the device type, operating system, IP address, and browser type.
Mailing and Billing Information: We may collect your mailing and billing address to process orders, issue invoices, or comply with financial and legal obligations.
Cookies and Similar Technologies: We may use cookies and similar technologies to collect information about your activity on our platform; and
Any other information you provide.

4. Legal Basis for Data Processing

We will only process your personal data on the following legal basis:

Consent: In some cases, we may ask for your explicit consent to collect and process your personal data.
Contract: We may need to process your personal data to fulfil our contractual obligations with you.
Legal Obligation: We may be required by law to collect and process your personal data.
Legitimate Interests: We may process your personal data to pursue our legitimate interests, such as improving our platform and services, preventing risk and fraud, providing and improving our products and services and testing out features or additional services.

5. Use of Data

We may use your personal data for the following purposes:

To provide and improve our platform and services: We use your data to operate, maintain, and improve our platform, process your orders, and provide you with customer support.
To personalize your experience: We may use your data to personalize your experience on our platform, such as recommending products or services that may be of interest to you.
To send you marketing communications: With your consent, we may send you marketing communications about our products and services.
For security and compliance purposes: We may use your data to protect our platform and services from fraud and abuse, and to comply with applicable laws and regulations.

6. Data Sharing and Disclosure

We may share your personal data with third-party service providers who help us operate our platform and provide our services. These third-party service providers will be contractually obligated to protect your personal data and use it only for the purposes we have specified.

If we or our subsidiaries are involved in a merger, acquisition or asset sale, your Personal Data may be transferred.

We may also disclose your personal data if we are required to do so by law, or if we believe it is necessary to protect the rights, property, or safety of ourselves or others. Where appropriate and legally permissible, we will make reasonable efforts to inform you in advance of such disclosures.

7. Cross-Border Data Transfers

Zigaara is located in Nigeria. To operate our business, your personal data may be transferred to and processed in countries other than Nigeria. These countries may have different data protection laws than Nigeria. However, we will take all necessary steps to ensure that your personal data is transferred in accordance with applicable law and is adequately protected.

8. Data Retention

We will retain your personal data for as long as it is necessary to fulfil the purposes outlined in this Policy unless a longer retention period is required or permitted by law. If you stop using our services or if you delete your account with us,or we terminate your account, we retain store information for two years before we begin the deletion process.

9. Data Subject Rights

At Zigaara, we believe in empowering our users with control over their personal data. In line with the Nigerian Data Protection Regulation (NDPR), you are entitled to a number of rights that ensure transparency, accountability, and fairness in how your data is handled. These rights give you the ability to understand and influence how your personal information is collected, processed, stored, and shared. Please note that a number of these rights apply only in certain circumstances, and all of these rights may be limited by law.

We are committed to upholding these rights and providing mechanisms for you to exercise them. They include:

Right to be Informed
Right of Access
Right to Rectification
Right to Erasure (Right to Be Forgotten)
Right to Object
Right to Data Portability
Right to Restriction of Processing
Right to Withdraw Consent
Right to Avoid Automated Decision-Making and Profiling
Right to Lodge a Complaint

If you’ve interacted with or made a purchase from a store powered by our platform, we encourage you to reach out directly to the store owner or merchant for any requests related to your personal data. If you submit a request to us, we will forward it to the appropriate merchant on your behalf.

To help protect your data and maintain the security of our platform, we may need to confirm your identity before processing any requests. This could include asking for additional details such as your email address or a valid government-issued ID to ensure the request is legitimate.

10. Behavioral Remarketing and Advertising

We may use remarketing services to advertise to you on third-party websites after you have visited or used Zigaara. These services use cookies, pixels, and similar technologies to inform, optimize, and serve ads based on your past interactions with our platform.

This allows us to show you more relevant ads and promotions, improve your experience, and track the effectiveness of our marketing campaigns. Third-party vendors, including advertising partners, may use cookies and other tracking tools to display ads based on your browsing behavior.

You can manage or opt out of personalized advertising by adjusting your browser settings or visiting the privacy settings of the platforms you use (such as Google or Facebook).

11. Payment Information

When you make or receive payments through Zigaara, we may collect certain payment-related information, such as your preferred payment method, transaction details, and billing address. Please note that we do not store full card or account details on our servers.

All payment processing is handled by trusted third-party payment providers who are PCI-DSS compliant and authorized to handle sensitive financial information securely. These providers may collect and store your payment details in accordance with their own privacy policies.

We only share necessary information with them to complete transactions and ensure smooth payout and settlement processes.

12. Security

Zigaara takes reasonable steps to protect your personal data from unauthorised access, disclosure, alteration, or destruction. However, no security measures are perfect, and we cannot guarantee the complete security of your personal data.

13. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or to comply with applicable laws. We will notify you of any material changes to this Policy by posting a notice on our platform or by contacting you directly.

We encourage you to review this policy periodically to stay informed about how we protect your information. Continued use of our services after any changes to the policy constitutes your acceptance of those changes.

14. Contact Us

If you have any questions about this Policy or our Privacy practices, please contact us at [email protected]