Privacy Policy — Samz Megamart

Your privacy matters to us. This policy explains what data we collect, how we use it, and your rights. We never sell your personal information to third parties.

Contents

Who We Are
Information We Collect
How We Use Your Information
Information Sharing
Data Storage & Security
Cookies & Tracking
Your Rights
Children's Privacy
Changes to This Policy
Contact Us

1. Who We Are

Samz Megamart is an online grocery store based in Lagos, Nigeria. We operate the website at samzmegamart.com.ng. This Privacy Policy describes how we collect, use, and protect information about you when you use our services.

For any privacy-related questions, you may contact us at the details provided in Section 10.

2. Information We Collect

Information You Provide Directly

Account information — name, email address, phone number, and password when you register
Order information — delivery address, payment details (processed by Paystack, not stored by us), and order history
Communications — messages you send us via WhatsApp, email, or our contact channels
Newsletter subscription — email address if you subscribe to our updates

Information Collected Automatically

Usage data — pages visited, products viewed, search terms, and time spent on our site
Device information — browser type, operating system, and device identifiers
Session data — cart contents stored locally on your device via browser localStorage

Information from Third Parties

Google Sign-In — if you use Google to sign in, we receive your name, email, and profile picture from Google
Payment processors — Paystack may share transaction status and reference numbers with us to confirm payment

3. How We Use Your Information

Purpose	Legal Basis
Processing and fulfilling your orders	Contract performance
Sending order confirmations and delivery updates	Contract performance
Managing your account and providing customer support	Contract performance
Sending promotional emails (if subscribed)	Consent
Improving our website and product offerings	Legitimate interest
Preventing fraud and ensuring platform security	Legitimate interest
Complying with legal obligations	Legal obligation

We will never use your information for purposes incompatible with those listed above without first obtaining your consent.

4. Information Sharing

We do not sell, rent, or trade your personal information. We may share your information with:

Service Providers

Supabase — our database and authentication provider
Paystack — our payment processor. Your card details are handled directly by Paystack and are never stored on our servers
Resend — our transactional email provider, used to send order confirmations and newsletters
Netlify — our website hosting provider

All service providers are bound by data processing agreements and are required to handle your information securely and only for the purposes we specify.

Legal Requirements

We may disclose your information if required to do so by law, court order, or regulatory authority, or if we believe disclosure is necessary to protect the rights or safety of Samz Megamart, our customers, or others.

5. Data Storage & Security

Your data is stored securely on Supabase infrastructure. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

These measures include:

Encrypted data transmission (HTTPS/TLS)
Row-level security policies on our database
Hashed and salted passwords — we never store your password in plain text
Access controls limiting who can view customer data

Data Retention

We retain your account and order information for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it.

6. Cookies & Tracking

We use browser localStorage (not traditional cookies) to store your cart contents, session information, and preferences locally on your device. This data does not leave your device unless you place an order.

We do not currently use third-party advertising cookies or cross-site tracking technologies. If this changes, we will update this policy and request your consent where required.

7. Your Rights

You have the following rights regarding your personal information:

Access — request a copy of the personal data we hold about you
Correction — update or correct inaccurate information via your account settings
Deletion — request deletion of your account and associated personal data
Portability — request your data in a structured, machine-readable format
Opt-out — unsubscribe from marketing emails at any time using the link in our emails or by contacting us
Withdrawal of consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us using the details in Section 10. We will respond within 30 days.

8. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised effective date.

For material changes, we will notify registered customers via email. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have a privacy concern, please contact us: