Legal

Privacy Policy

Last updated: [20th September 2026]

Japhini (“we,” “us,” “our”) respects your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the rights you have over it, in accordance with the Nigeria Data Protection Act 2023 (NDPA).

1. Information We Collect

When you browse, create an account, or place an order with us, we may collect:

• Account information: email address, password (encrypted), full name.
• Contact information: WhatsApp number, additional phone number(s), delivery address.
• Order information: items purchased, order history, payment confirmation status (we do not receive or store your card details — this is handled entirely by Paystack).
• Profile information: profile picture, products you follow.
• Marketing preference: whether you’ve opted in to receive product and drop updates via WhatsApp.

We do not knowingly collect information from anyone under the age of 18 without appropriate parental/guardian consent.

2. How We Use Your Information

We use your information for two distinct purposes, and we keep these separate:

a) Transactional purposes (necessary to serve you)

• Creating and managing your account.
• Processing and fulfilling your orders.
• Contacting you about your specific order (confirmations, delivery updates, issues).
• Verifying payment through Paystack.

b) Marketing purposes (only with your separate consent)

• Sending you WhatsApp messages about new drops, restocks, or offers.
• This only happens if you have explicitly opted in via the marketing consent checkbox at signup or in your account settings. Your WhatsApp number being on file for order purposes does not, by itself, mean you will receive marketing messages — these are two separate uses of your data, and we only act on the second with your clear consent.
• You can opt out of marketing messages at any time from your account page, with no effect on your ability to browse or order from Japhini.

3. Who We Share Your Information With

We do not sell your personal information. We share it only where necessary to run the service:

• Paystack — to process your payment securely. Paystack’s own privacy and security practices govern how they handle your payment data.
• Supabase — our backend infrastructure provider, which securely stores your account and order data on our behalf.
• Delivery/courier partners — your name, delivery address, and phone number are shared with the courier or dispatch rider handling your specific order, solely to complete delivery.

We do not share your information with third parties for their own marketing purposes.

4. Data Retention

We retain your personal information for as long as your account remains active, and for a reasonable period afterward to comply with legal, tax, or dispute-resolution obligations. You may request deletion of your account and associated data at any time (see Section 5).

5. Your Rights Under the NDPA

As a data subject under Nigerian law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or outdated data.
• Request erasure of your data, including data collected for marketing purposes specifically.
• Object to or withdraw consent for marketing processing at any time, without affecting other services we provide you.
• Request a copy of your data in a portable format.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data has been mishandled.

To exercise any of these rights, contact us at Business & Partnerships: jawwadjaphini@gmail.com or via WhatsApp at 2347062012986. We will respond within a reasonable timeframe as required by law.

6. Data Security

We take reasonable technical and organizational measures to protect your personal information, including encrypted password storage, access-controlled databases, and secure, PCI-compliant payment processing through Paystack. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies & Local Storage

Our site uses browser local storage to remember your cart contents and certain preferences (such as dismissed banners) so your experience is consistent across visits. This data stays on your device and is not used for cross-site tracking or advertising.

8. Jyva (In-App Chat)

• Jyva stores the messages you send, the images you send, your chat username and your short bio.
• Messages and their image files are deleted automatically after 60 days.
• You can delete your own messages at any time. The text and the image are removed; a “deleted” placeholder remains so both sides see the same thing.
• Messages to a Japhini channel can be read by Japhini admins and by staff members assigned to that channel. They see your username, profile photo and bio.
• Private chats between customers cannot be read by Japhini staff — unless a participant reports the chat. A report stores a copy of that chat’s last 20 messages (and any images in them) until it is resolved plus 60 days, and unresolved reports are deleted after 180 days.
• You can block and report other users. Blocking stops messages between you both; the other person is never told who blocked whom.
• Your username is visible to other users and is searchable.
• Deleting a chat only removes it from your own inbox. The other person — or, for a Japhini channel, the staff who can see that channel — keeps their copy until the automatic 60-day deletion, and a report can still include the last 20 messages of the chat even if you deleted your copy.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.

10. Contact Us

For any questions about this Privacy Policy or how we handle your data, contact us at Business & Partnerships: jawwadjaphini@gmail.com or via WhatsApp at 2347062012986.