Privacy Policy

MyTijaara Ltd ("MyTijaara", "we", "us", "our") operates the MyTijaara platform — a multi-service marketplace built for Nigerians. Registered in the Federal Republic of Nigeria. Contact: privacy@mytijaara.com.

• Account data — name, email address, phone number, and password hash when you register.
• Order & transaction data — items ordered, delivery address, payment method tokens (we never store full card numbers).
• Location data — with your permission, approximate GPS coordinates to show nearby vendors and calculate delivery routes.
• Device & usage data — IP address, browser type, pages visited, session duration, and referral source for analytics and security.
• Communications — messages you send to support or vendors through the platform.

• Fulfil and track your orders and bookings.
• Send transactional emails (order confirmation, delivery updates, welcome email).
• Improve the platform through aggregated analytics.
• Prevent fraud and comply with Nigerian law (including NDPR and FCCPC guidelines).
• Send you promotional messages only if you have opted in — you can unsubscribe at any time.

We process your data under the following legal bases per the Nigeria Data Protection Regulation (NDPR) 2019:

• Contract — processing necessary to deliver a service you requested.
• Legitimate interests — fraud prevention and platform security.
• Consent — marketing communications and optional analytics cookies.
• Legal obligation — complying with court orders or regulatory requests.

We do not sell your data. We share it only with:

• Vendors, riders, or artisans you transact with — limited to what they need to fulfil your order.
• Payment processors (e.g. Paystack, Flutterwave) under their own privacy policies.
• Cloud infrastructure providers who process data on our behalf under data processing agreements.
• Nigerian regulatory authorities when required by law.

Under the NDPR you have the right to access, correct, delete, or restrict processing of your personal data, and to object to direct marketing. To exercise any right, email privacy@mytijaara.com. We respond within 30 days.

We retain account data for as long as your account is active, plus 6 years after closure for tax and legal record-keeping. Analytics data is aggregated and anonymised after 24 months.

We use TLS 1.2+ in transit, AES-256 at rest, and bcrypt for passwords. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.

We will notify you of material changes via email or an in-app notice at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.

MyTijaara Ltd, Lagos, Nigeria. Email: privacy@mytijaara.com.