Privacy policy

Sotechy Shop (No. 20 Etete Road, Benin City, Nigeria) is responsible for the personal data described here. We follow the Nigeria Data Protection Act 2023. Questions or requests: hello@sotechy.shop.

What we collect

• Account details: name, email, phone number, username, and your Google profile if you sign in with Google.
• Orders: what you buy, delivery addresses, payment status and receipts. We don't store card numbers.
• Stores selling on Sotechy: business and registration details, documents, owners' identity checks (ID and a selfie, done by our verification partner) and payout bank details.
• Using the app: device and notification tokens, and basic logs to keep the service secure.

Why we use it

• To take and deliver your orders, process payments and refunds, and send order updates by email, push notification or WhatsApp.
• To verify stores, prevent fraud and meet legal and tax obligations.
• To run your token wallet, reviews and support.
• To send offers, only if you've agreed; you can stop them at any time.

Who we share it with

We never sell your data. We share only what's needed with:

• The store you buy from, for your order and delivery.
• Payment and payout partners, to take payments and pay stores.
• Our identity-verification partner, for store owners' ID checks.
• Service providers for email, notifications, address lookup and hosting, under contract.
• Authorities, when the law requires it.

How long we keep it

We keep account data while your account is open, and order and payment records for as long as the law requires (usually six years). Verification documents are kept while a store sells on Sotechy and for the period the law requires after.

Your rights

You can ask to see, correct or delete your personal data, object to its use, or ask for a copy. Email hello@sotechy.shop and we'll reply within 30 days. You can also complain to the Nigeria Data Protection Commission.

Security

Data is encrypted in transit, private documents are stored encrypted and only seen by our review team, and staff access requires two-step sign-in.