Legal

Privacy Policy

This policy explains what personal data Zowkins Enterprise LTD collects, why we collect it, how we use and protect it, and your rights under Nigerian data protection law.

Last updated: July 2025NDPA 2023 compliantNo data sellingNo ad tracking

1. Who we are

Zowkins Enterprise LTD is the data controller responsible for your personal information. We are an IT hardware procurement company located in Abuja, Nigeria. Contact: contact@zowkins.com.

2. What information we collect

We collect: your full name, email address, phone number, delivery address, gender, and date of birth when you create a portal account or submit a quote; order history, product selections, and transaction amounts; OTP verification tokens (held in memory only, never stored); device and browser information needed to run the site; and messages you send us via email, contact forms, or WhatsApp.

3. Why we collect it

We collect your information to process and fulfil orders and quote requests; manage your customer portal account; verify your identity and email address via OTP; send order confirmations, delivery updates, and password reset emails; improve the site and our services; and comply with legal and regulatory obligations under Nigerian law.

4. Legal basis for processing

We process your personal data on the following bases under the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR): performance of a contract — to fulfil your order or quote request; your consent — for account creation and email verification; our legitimate interests — to operate, secure, and improve the business; and compliance with legal obligations.

5. How we use your data

Your data is used strictly for business operations: processing orders and payments, managing delivery, responding to support and quote requests, sending transactional emails (order confirmations, OTP codes, password resets), and maintaining your account. We do not use your data for unsolicited marketing or advertising without your explicit consent.

6. Payment data

Payments are processed by third-party payment providers. We do not store your card number, CVV, bank account details, or full payment credentials on our servers. We only retain transaction references and order amounts needed for business records. Payment processors operate under their own security and privacy standards.

7. Session tokens and local storage

When you log in to the customer portal, your access token is stored in your browser's localStorage to maintain your session. This token is cleared when you log out. We recommend using a private or trusted device when accessing your portal account. We do not use advertising cookies or tracking pixels.

8. Cookies

We use only essential browser storage (localStorage and session cookies) to maintain your login state and keep items in your cart. We do not use advertising, analytics, or third-party tracking cookies. No personal data is shared with advertising networks.

9. Sharing your information

We do not sell your personal data to any third party. We may share it only with: delivery and logistics partners to fulfil your order; payment processors to complete transactions; our backend API and hosting infrastructure providers to operate the platform; and law enforcement or regulatory bodies if required by Nigerian law or a valid court order. All third parties are required to handle your data securely and only for the stated purpose.

10. WhatsApp

If you choose to contact us or submit a quote via WhatsApp, your message and the information you provide will be received by our team through WhatsApp (operated by Meta Platforms). WhatsApp's own privacy policy governs how that data is handled on their platform. We use the information you send only to respond to your inquiry.

11. Data retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy. Account data is retained while your account is active. Order and transaction records are retained for a minimum of 6 years for tax and legal compliance under Nigerian law. You may request deletion of your account data at any time, subject to legal retention requirements.

12. Your rights

Under the Nigeria Data Protection Act 2023, you have the right to: access the personal data we hold about you; request correction of inaccurate or incomplete data; request deletion of your data where no legal obligation requires us to retain it; withdraw consent where processing is based on consent; object to processing in certain circumstances; and lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng. To exercise any of these rights, contact us at contact@zowkins.com.

13. Security

We use industry-standard security measures including HTTPS encryption, JWT-based authentication, OTP email verification, token refresh mechanisms, and access controls to protect your data. OTP codes are held in component memory only and are never written to localStorage, URLs, or logs. No system is completely secure, and we cannot guarantee absolute security, but we take all reasonable steps to protect your information.

14. Children

Our services are intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted personal data to us, please contact us at contact@zowkins.com and we will delete it promptly.

15. Third-party links

Our site may contain links to third-party websites including WhatsApp and payment providers. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before submitting any personal information.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The latest version will always be published on this page with the date it was last updated. Continued use of the site after changes are posted constitutes your acceptance of the updated policy.

Data controller

The data controller responsible for your personal information is Zowkins Enterprise LTD, Abuja, Nigeria. For all data-related requests, contact us at contact@zowkins.com.

Complaints

If you believe your data rights have been violated, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng. We ask that you contact us first so we can try to resolve the matter directly and promptly.

Response time

We will respond to all data rights requests within 30 days of receipt. Complex requests may take longer, in which case we will notify you of the expected timeline.