Privacy

Privacy Policy

Effective date: 1 January 2026

Last updated: 16 August 2026

Table of Contents

1. Who We Are
2. Data We Collect
3. How We Collect Data
4. How We Use Your Data
5. Legal Bases for Processing
6. Sharing & Disclosure
7. International & Cross-Border Transfers
8. Data Security
9. Data Retention
10. Your Rights
11. Children's Privacy
12. Cookies & Tracking
13. Third-Party Links
14. Changes to This Policy
15. Contact & Complaints

1. Who We Are

FoodOne NG is a digital agricultural marketplace based in Lagos, Nigeria. We act as the "Data Controller" for personal data you provide to us, and as a "Data Processor" when we handle data on behalf of sellers for order fulfilment. Our designated contact for privacy matters is our Data Protection Officer (DPO).

2. Data We Collect

We collect the following categories of personal data:

• Identity & contact data: name, email address, phone number, business name, and delivery address.
• Account & profile data: login credentials (hashed), role, verification documents, and preferences.
• Transaction data: orders, cart contents, delivery details, and (for subscription plans) billing records.
• Communications: messages between buyers and sellers, support tickets, and dispute records.
• Technical & usage data: IP address, device type, browser, pages visited, and referring URLs.
• Financial data: payment references and subscription amounts (full card numbers are handled by our PCI-DSS compliant gateway and are never stored on our servers).

3. How We Collect Data

We collect data you provide directly (registration, forms, listings), automatically through cookies and similar technologies, and from third parties such as our payment and logistics partners who confirm transactions and deliveries.

4. How We Use Your Data

We use your information to: provide and operate the Platform; process orders, deliveries, and subscriptions; verify sellers; communicate with you; provide customer and dispute support; prevent fraud and abuse; comply with legal obligations; and analyse and improve our services and security.

5. Legal Bases for Processing

Under the NDPA, we process your data on the following bases: performance of a contract (to deliver the services you request); your consent (for optional marketing communications and non-essential cookies); legitimate interests (fraud prevention, analytics, and platform security); and compliance with legal obligations (tax, record-keeping, and lawful requests by authorities).

6. Sharing & Disclosure

We share personal data only where necessary: with sellers/buyers to enable a transaction; with service providers (payment, logistics, hosting, analytics) under confidentiality obligations; with professional advisers and regulators where required by law; and in connection with a merger, acquisition, or sale of assets. We never sell your personal information.

7. International & Cross-Border Transfers

Some of our service providers may process data outside Nigeria. Where we transfer personal data across borders, we rely on appropriate safeguards recognised under the NDPA, including contractual clauses and the provider's certified compliance programs, to ensure an adequate level of protection.

8. Data Security

We implement industry-standard technical and organisational measures to protect your data, including encryption in transit (TLS/SSL), password hashing, access controls, network firewalls, and regular security reviews. While we work hard to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy and to comply with legal, accounting, and reporting requirements. Account data is retained while your account is active and for a reasonable period afterwards; transaction records are retained for the period required by Nigerian tax and consumer law.

10. Your Rights

Subject to applicable law, you have the right to: access the personal data we hold about you; correct inaccurate or incomplete data; request deletion of your data ("right to be forgotten"); object to or restrict certain processing; withdraw consent at any time (without affecting prior lawful processing); and request portability of your data. To exercise these rights, contact our DPO using the details below. We will respond within the timeframe required by the NDPA.

11. Children's Privacy

The Platform is not intended for individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can delete it.

12. Cookies & Tracking

We use cookies and similar technologies to operate the Platform, remember your preferences, and understand usage. You can manage non-essential cookies through your browser settings. See our Cookie Policy for details.

13. Third-Party Links

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing any personal data.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you via email or an in-Platform notice and update the "Last updated" date above.

15. Contact & Complaints

For privacy-related inquiries, to exercise your rights, or to contact our Data Protection Officer, please email privacy@foodone.ng or hello@foodone.ng. If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).