Privacy Policy

• Order details — your name, WhatsApp number, optional alternative phone, state, LGA/city, address, landmark, chosen chat app and the items you order.
• Account details (only if you sign in) — phone number or email, saved addresses and order history.
• Technical data — pages visited, ad campaign tags (UTM, fbclid) and a one-way hash of your IP address used to stop spam and abuse.

We never collect card numbers, PINs, OTPs, BVNs or bank login details on this website. Payments are arranged in chat with our staff, who only record that a payment was received.

• To process, confirm and deliver your order, and contact you about it — performance of a contract.
• To prevent fraud, fake orders and abuse (e.g. rate limits, duplicate-order checks) — legitimate interest.
• To keep records required for tax and accounting — legal obligation.
• To measure which adverts bring customers (Meta Pixel and Conversions API, where enabled) — consent / legitimate interest. You can block these with your browser or ad settings.

We do not sell your personal data.

• Dispatch riders and delivery partners — only the details needed to deliver your order.
• Hosting and database providers that store our data securely on our behalf.
• Messaging providers (WhatsApp, SMS and email) used to send your order updates.
• Meta (Facebook/Instagram), when ad measurement is enabled — hashed contact details only.
• Authorities, when the law requires it.

Some providers process data outside Nigeria. Where that happens we rely on the safeguards allowed under the NDPA and only use providers with strong security commitments.

Order records are kept for up to 6 years for accounting and warranty purposes. Unconfirmed orders that were cancelled are deleted or anonymised sooner. Abuse-prevention data (hashed IPs) is kept for a few days.

Data is encrypted in transit (HTTPS), access is limited by staff role, and every payment record is audit-logged. No system is perfect: if a breach affects you, we will notify you and the Nigeria Data Protection Commission as the NDPA requires.

You can ask us to:

• give you a copy of your data, or send it to another provider;
• correct data that is wrong or incomplete;
• delete your data where we no longer need it;
• restrict or object to some processing, including marketing;
• withdraw consent at any time (this doesn't affect earlier processing).

We respond within 30 days. If you are unhappy with our answer you can complain to the Nigeria Data Protection Commission (NDPC).

MUBAZZAR Nigeria Ltd., Lekki Expressway, Victoria Island, Lagos, Nigeria. Email support@mubazzar.ng with the subject “Data request”, or chat with us on WhatsApp. See also our Terms of Service.