1. Data controller
NOVEXA HUB TRADE MANAGEMENT LTD (RC 9478786), 11, Adewole Street, Egbeda, Lagos State, Nigeria. Privacy enquiries: idowodoc@gmail.com.
2. Information we collect
- Account data: name, email, password (hashed), phone number.
- Order data: products purchased, amounts, timestamps, delivered gift codes.
- Payment data: handled by our licensed payment gateway. We receive only the transaction status and a tokenized reference — never your full card number or CVV.
- Technical data: IP address, browser, device, pages visited, cookies.
- Communications: emails or messages you send to support.
3. How we use your data
- To process orders and deliver gift card codes.
- To create and manage your account.
- To send transactional emails (receipts, code delivery, password resets).
- To prevent fraud, money laundering, and abuse.
- To comply with Nigerian tax, accounting, and regulatory obligations.
- To improve the Site and our services.
4. Legal basis
We process personal data on the bases of (a) contract performance (to fulfil your order), (b) legal obligation (tax, AML), (c) legitimate interest(fraud prevention, service improvement), and (d) consent (marketing, optional cookies — which you can withdraw at any time).
5. Sharing your data
We share personal data only with:
- Payment processors (e.g. Paystack, Flutterwave, Stripe) to authorize transactions.
- Cloud hosting and email providers acting as data processors under written agreements.
- Law-enforcement or regulators where legally required.
We never sell your personal data.
6. International transfers
Some processors may be located outside Nigeria. In such cases we ensure appropriate safeguards in line with Section 41 of the Nigeria Data Protection Act 2023 (NDPA).
7. Data retention
- Account records: while the account is active, plus 6 years for tax and audit.
- Order and payment records: 6 years (statutory accounting retention).
- Marketing data: until you withdraw consent.
8. Your rights
Under the NDPA 2023 and applicable laws, you have the right to:
- Access a copy of your personal data.
- Request correction of inaccurate data.
- Request erasure (subject to legal retention obligations).
- Object to or restrict processing.
- Withdraw consent at any time.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
To exercise any of these rights, email idowodoc@gmail.com.
9. Security
We use TLS encryption in transit, hashed passwords, role-based access controls, and regular security reviews. No system is 100% secure, but we follow industry best practice.
10. Cookies
We use strictly necessary cookies (login session, cart) and basic analytics cookies. You can control cookies through your browser settings.
11. Children
The Site is not intended for users under 18. We do not knowingly collect data from minors.
12. Changes
We will update this policy as needed and revise the "Last updated" date above. Material changes will be announced via email or a prominent Site notice.