This Privacy Policy explains how OSHEYY ("we," "us," "our"), operating the OSHEYY service ("Service"), collects, uses, shares, and protects information when you use OSHEYY whether as a Business Owner, an Agent, or a visitor to a Site published on OSHEYY.com.
We aim to handle personal data in a manner consistent with the Nigeria Data Protection Act 2023 ("NDPA") and guidance from the Nigeria Data Protection Commission ("NDPC").
1. Information We Collect
a) Information you give us
- Account details: name, email address, WhatsApp number, and password.
- Business information: business name, description, address, product or service listings, prices, and images you upload.
- Payment information: billing name and transaction details, processed by our third-party payment processor (we do not store your full card number).
- Communications: messages you send us for support, and any information you provide when contacting us.
b) Information collected automatically
- Usage data: pages visited, features used, and actions taken within the Service.
- Device and log data: IP address, browser type, device identifiers, and access timestamps.
- Cookies and similar technologies, used to keep you signed in and understand how the Service is used.
c) Information about your customers
Customers who browse your Site may view your product listings and click through to WhatsApp to message you. We do not intercept, read, or store the content of conversations that take place on WhatsApp between you and your customers those conversations happen on WhatsApp's platform, governed by WhatsApp's own terms and privacy practices.
2. How We Use Information
- To create and operate your account and Site;
- To process payments and manage subscriptions;
- To provide customer support and respond to enquiries;
- To maintain, secure, and improve the Service;
- To send you service related communications, such as trial expiry or billing notices;
- To detect, prevent, and address fraud, abuse, or violations of our Terms of Service;
- To comply with legal obligations.
We do not sell your personal data. We do not use your business content or customer information to advertise unrelated products.
3. Legal Basis for Processing
Where the NDPA applies, we process personal data on one or more of the following bases: performance of our contract with you (providing the Service), your consent (for example, for optional marketing communications), our legitimate interests (such as securing and improving the Service), and compliance with legal obligations.
4. Sharing of Information
We share information only as needed to operate the Service:
- Payment processors, to process one-time and subscription payments;
- Hosting and infrastructure providers, to host your Site and store data securely;
- Agents, where you have engaged an Agent to build or manage your Site on your behalf;
- Legal or regulatory authorities, where required by law, court order, or to protect our rights or the safety of others;
- Successors, in the event of a merger, acquisition, or sale of assets, subject to this Policy continuing to apply to your information.
We do not share your personal data with third parties for their own independent marketing purposes without your consent.
5. Data Published on Your Site
Any content you choose to add to your Site such as your business name, WhatsApp number, product listings, and images is publicly visible to anyone who visits your Site's link. Please only include information you're comfortable making public.
6. Data Retention
We retain account and Site information for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or dispute resolution obligations. You may request deletion of your account and associated personal data as described in Section 8 below, subject to information we are required to retain by law.
7. Data Security
We use reasonable technical and organizational measures — including encrypted connections (SSL) and access controls to protect your information. No system is completely secure, and we cannot guarantee absolute security of information transmitted to or stored by the Service.
8. Your Rights
Subject to applicable law, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; and request a copy of your data in a portable format. To exercise these rights, contact us using the details on the Service. We will respond within a reasonable timeframe consistent with NDPA requirements.
9. Cookies
We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings, though disabling them may affect how the Service functions.
10. Children's Privacy
The Service is intended for business use by adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
11. International Data Transfers
Some of our hosting or processing providers may store or process data outside Nigeria. Where this occurs, we take reasonable steps to ensure such transfers are consistent with NDPA requirements for cross-border data transfer.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated effective date above, and where appropriate, we will provide additional notice.
13. Contact
For questions about this Privacy Policy or to exercise your data rights, contact us at osheyyhq@gmail.com or message us on WhatsApp.
These Terms are provided for general information and may be updated as OSHEYY develops. Please contact us if you have questions about how they apply to your use of the Service.