Privacy Policy

Please read this policy carefully. It explains your privacy rights and how we handle personal information on Shopmi.ng.

Last revised: 14 September 2026

When this Policy mentions “Shopmi.ng”, “we,” “us”, or “our”, it refers to the operator of the platform that is responsible for protection of your personal information in line with this Privacy Policy (the “Data Controller” for platform-level processing).

This Privacy Policy (“Policy”) explains how we process information that can be used to directly or indirectly identify an individual (“Personal Data”) collected on our website, seller storefronts, dashboards, APIs, and related communications (together, the “Platform”).

We process Personal Data in accordance with applicable privacy and data-protection laws. Where a law such as the EU GDPR applies to you, we aim to handle your data consistently with its core principles (lawfulness, fairness, transparency, purpose limitation, minimization, accuracy, storage limitation, integrity, and confidentiality).

For questions about this Policy or requests regarding Personal Data, contact [email protected].

• Lawfulness, fairness, and transparency — we process Personal Data lawfully and explain our practices in plain language.
• Purpose limitation — we collect and process Personal Data for specified, explicit, and legitimate purposes and do not further process it in incompatible ways.
• Data minimization — Personal Data is adequate, relevant, and limited to what is necessary.
• Accuracy — we take reasonable steps to keep Personal Data accurate and up to date.
• Storage limitation — we keep Personal Data in identifiable form only as long as needed for the purposes described here (and legal retention duties).
• Integrity and confidentiality — we use appropriate technical and organizational measures to protect Personal Data.

Information stored on the Platform is treated as confidential and accessed only by authorized personnel and processors who need it to operate the service.

Account signup and profile. When you create an account we require an email address and password (stored as a hash — we never store plain-text passwords). You may also provide name, phone, WhatsApp number, country, state, and other profile fields. Your role may be buyer, seller, and/or administrator.

Shop and listing data. Sellers provide shop name, slug, branding (colors, logos, banners), product titles, descriptions, prices, images, inventory, policies, FAQs, and published contact details.

Order and checkout details. When you place an order we process items, quantities, amounts, currency, fulfillment status, invoices, and delivery-related notes you submit. Card numbers and full payment credentials are collected by Paystack; we store payment references and status, not full card PAN or CVV.

Communications. Messages via platform or shop contact forms, verification submissions, support emails, and similar inquiries.

Verification and trust. Documents or details you submit for shop verification or abuse investigations (processed only as needed to review eligibility and safety).

Optional AI tools. If a seller requests AI-generated product descriptions or related jobs, we process the prompts and listing content needed to run that job.

Job or partnership inquiries. Information you send when applying for roles or partnerships via email or forms.

Failing to provide data that is necessary to perform a contract (for example account email or checkout details) may mean we cannot provide the related feature.

Legal bases for this processing typically include: performance of a contract; our legitimate interests in operating a secure marketplace; compliance with legal obligations; and consent where you voluntarily submit optional information or enable optional features.

3.2 Information we collect when you use the Platform

Log and device data. IP address, browser type, device/OS characteristics, approximate timestamps, and security-related events when you access the Platform (including as a guest).

Cookies and sessions. Essential cookies and similar storage for signed-in sessions (httpOnly access/refresh tokens) and guest cart identifiers. These are required for core functionality, not advertising cookies. Blocking them may prevent login or cart persistence.

Usage data. Pages viewed, search and filter queries, category browsing, and similar interactions needed to run and improve the catalog experience.

Geo-related data. Approximate location derived from country/state you select or, where applicable, coarse signals used for localized experience and fraud prevention — not precise GPS tracking by default.

Abuse-prevention signals. Patterns related to payments, account activity, suspensions, and device/session metadata to detect fraud, spam, and Terms violations.

• Identify you and operate your account, shops, and roles.
• Provide marketplace browsing, storefronts, favorites, carts, and checkout.
• Process payments via Paystack and generate invoices and order status updates.
• Send transactional messages (order, verification, security, and support) via email providers such as Resend.
• Run optional seller tools, including AI description and watermark jobs when requested.
• Create and maintain a trusted environment: verify shops, detect fraud/abuse, and enforce our Terms.
• Diagnose technical issues, secure infrastructure, and improve product performance.
• Produce aggregated, non-identifying statistics about marketplace usage.
• Comply with applicable laws and respond to lawful requests.
• Contact you about your account, disputes, surveys that improve the service, or material policy changes.

We do not sell Personal Data.

Sellers must only use customer data to fulfill orders and provide related support, keep it secure, and honour correction or deletion requests that relate to their shop. Shop-specific privacy pages may sit alongside this Policy. Where a seller is the controller of customer data for their own fulfilment, Shopmi.ng may act as a processor or hosting provider for that subset of data; the seller remains responsible for their own compliance.

If you are a customer of a particular shop and want that shop to change how it uses your order data, contact the shop as well as [email protected] for platform-level requests.

• Paystack (payments).
• Resend or similar providers (transactional email).
• Optional AI providers when a seller explicitly requests generation jobs.
• Hosting, database, storage, and queue infrastructure vendors.
• The relevant seller when you order from their shop.
• Professional advisers or authorities when required by law or to protect rights, safety, and integrity of the Platform.

We require processors to protect Personal Data under appropriate contractual terms. We do not sell Personal Data to third parties for their own marketing.

Marketing or promotional messages, if we send them, are based on consent or legitimate interest where permitted. You may unsubscribe via the link in the message or by emailing [email protected].

Contact form submissions (name, email, optional phone, and message) are stored so we can deliver and troubleshoot support mail. We aim to delete these inquiry records from our database after about 180 days, unless a longer period is needed for an active dispute or legal obligation. Copies may remain temporarily in our email processor (Resend or similar) according to that provider’s retention settings.

You may request account deletion by emailing [email protected]. You may also ask us to delete contact-form inquiries associated with your email. Some records may be retained in anonymized or limited form where law requires, or where needed to resolve disputes and prevent fraud.

You can often update profile details directly in your account settings.

We do not currently offer a self-serve data-export or automated rights portal; requests are handled manually through [email protected]. Platform operators may look up and delete contact inquiries by email when fulfilling a verified request.