1. Scope and responsibility
This policy applies to Ordyvia’s website, marketplace accounts, seller portal, checkout, messaging and support services. Sellers may separately be responsible for information they receive to fulfil an order and must use it only for that purpose.
2. Information we handle
We handle information users submit, records created through marketplace activity, and limited technical information necessary to deliver and protect the service.
- Account email and authentication records managed through Supabase.
- Customer delivery name, phone number, address, selected delivery zone, cart, order and payment-reference records.
- Seller application, business, store, payout-record and KYC information. Raw identity numbers submitted through the current KYC flow are used to create a protected fingerprint; the application stores the fingerprint and final characters rather than the raw number in the seller profile.
- Product listings, images, inventory, messages, reviews, support requests and moderation history.
- Security and operational information such as timestamps, request metadata, authentication sessions, CAPTCHA results and fraud or audit events where produced by our providers or systems.
3. Why we process information
We use information to create and protect accounts, operate the marketplace, verify sellers, moderate listings, calculate and fulfil orders, verify payments, provide delivery and support, prevent fraud, resolve disputes, maintain records, enforce policies and improve reliability.
5. Browser storage and cookies
Ordyvia uses browser storage for functions including cart, wishlist, recently viewed products, authentication sessions and pending-payment continuity. hCaptcha, Supabase, Paystack or hosting infrastructure may use necessary cookies or similar technologies. See the Cookie Policy for details.
6. Retention
We retain information only for as long as reasonably needed for accounts, orders, seller verification, security, disputes, financial reconciliation, legal obligations and enforcement. Retention periods vary by record. A deletion request may not require deletion of records that must be preserved for a lawful or overriding purpose.
7. Security
Ordyvia uses authentication, CAPTCHA, role checks, server authorization, database row-level security, payment verification, audit records and access restrictions. No service can promise absolute security. Users should protect passwords and immediately report suspected account compromise.
8. Your privacy rights
Subject to applicable law and appropriate identity verification, you may request access, correction, information about processing, restriction, objection, portability or deletion where available. You may also complain to the Nigeria Data Protection Commission. Some rights have lawful limitations, including protection of other users and retention of transaction or fraud-prevention records.
9. Children
Ordyvia accounts and seller services are not directed to children who cannot lawfully enter the relevant transaction. A parent or guardian should contact us if they believe a child supplied personal information without appropriate authority.
10. International processing
Some infrastructure or service providers may process information outside Nigeria. Where this occurs, Ordyvia should use providers and safeguards appropriate to the information and applicable Nigerian data-protection requirements. This transfer framework requires professional legal review before launch.
11. Requests and changes
Send privacy requests to support@ordyvia.com. We may verify identity before acting. Material changes will be published with a revised date; continued use after an effective change is subject to applicable law.