1. Identity of the Data Controller

The entity responsible for your personal data is:
Vetra Marketplace
Physical / Registered Office: No 20 Tokunbo Ajala Street, Ojodu Lagos, Nigeria
Contact Email: privacy@vetramarketplace.com / support@vetramarketplace.com
Telephone: (+234) 915 764 8587

2. Information We Collect

We collect information directly provided by you, as well as data automatically generated when you browse our services:

• Identity & Contact Information: Full name, email address, telephone number, shipping/delivery address, and billing address.
• Account Credentials: Username, encrypted passwords, purchase history, order status, saved items (wishlist), and user preferences.
• Payment & Transaction Information: Order details, amount paid, transaction currency (including United States Dollar - USD, British Pound Sterling - GBP, Euro - EUR, and Nigerian Naira - NGN), payment reference, and transaction timestamps. Important: All electronic card and international payments are processed via our PCI-DSS Level 1 certified payment gateway partner, Flutterwave. Vetra Marketplace does not store or process complete credit/debit card numbers or CVV security codes on its servers.
• Technical & Browsing Data: IP address, browser type and version, device identifier, time zone, geolocation, referral URLs, operating system, and interaction logs.
• Customer Support Communications: Records of inquiries, dispute communications, feedback, and customer support messages.

3. How We Use Your Information

We process customer personal data only where there is a lawful legal basis (contractual necessity, legitimate business interests, legal compliance, or consent):

• Order Fulfillment & Delivery: To receive, verify, pack, route, and deliver products purchased through verified vendors on our marketplace.
• Payment Processing: To authenticate transactions, process local and international card payments in supported currencies (including GBP, USD, Euro, and NGN), execute secure transfers, detect fraud, and disburse merchant settlements and customer refunds.
• Account Management & Security: To manage your user profile, maintain system safety, verify user identity, and guard against unauthorized access.
• Customer Service: To respond to inquiries, process returns/cancellations under our Refund Policy, and handle customer requests.
• Legal & Regulatory Compliance: To satisfy tax, accounting, anti-money laundering (AML), and consumer protection obligations.
• Marketing Communications: To send newsletters, seasonal offers, and updates where you have opted in. You can opt out at any time.

4. Security & Secure Data Handling

Protecting your data is of paramount importance to us. We implement industry-leading technical, physical, and administrative measures to secure your personal details:

• SSL/TLS Encryption: All data transmitted between your web browser and Vetra Marketplace is protected using modern 256-bit Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption protocols.
• PCI-DSS Compliance: Payment card processing conforms to the strictest Payment Card Industry Data Security Standards (PCI-DSS) administered by our licensed payment provider, Flutterwave. Payment details are tokenized securely.
• Server & Infrastructure Protection: Our databases and application servers utilize modern firewalls, encrypted backups, restricted physical and administrative access, and regular vulnerability audits.
• Data Minimization: We only collect information that is strictly necessary to provide and continually improve our marketplace services.

5. Sharing & Disclosure of Personal Data

We do NOT sell, rent, lease, or trade your personal information to third parties for marketing purposes.

We only share necessary customer data with trusted third-party service providers who assist us in operating our platform:

• Payment Processors: Licensed payment gateway partners (such as Flutterwave and Paystack) to securely process card payments, bank transfers, and international customer transactions.
• Logistics & Delivery Carriers: Courier services (including Speedaf Logistics and authorized delivery personnel) to deliver your parcels to your specified address.
• Marketplace Vendors: Vendors receive only customer name, item details, and destination address strictly needed to prepare your package for courier dispatch.
• Legal & Law Enforcement Bodies: Disclosures made strictly in response to valid court subpoenas, warrants, or legal processes to comply with statutory law or prevent fraudulent activities.

6. Cookies and Tracking Technologies

We utilize cookies and similar technologies to improve your user experience on our site:

• Essential Cookies: Required for fundamental site operations such as session management, authentication, cart retention, and currency selection.
• Performance & Analytics Cookies: Help us measure site traffic, identify navigation bottlenecks, and improve overall system performance.

You can adjust your web browser settings to refuse cookies or alert you when cookies are sent; however, disabling certain cookies may affect platform functionality (such as cart persistence).

7. Your Legal Privacy Rights

Under applicable data protection laws (including NDPR and GDPR), you possess the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can update or correct incomplete or inaccurate personal information via your account profile or by contacting our team.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where there is no ongoing legal reason for its retention.
• Right to Restrict or Object: You have the right to object to direct marketing communications and certain automated processing.
• Right to Data Portability: You may request the transfer of your personal data to another service provider in a structured, commonly used format.

To exercise any of these rights, please contact us at privacy@vetramarketplace.com. We respond to all verified requests within thirty (30) days.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, tax, or fraud monitoring requirements. Once the retention period expires, records are securely deleted or anonymized.

9. Changes to this Privacy Policy

We may periodically update this Privacy Policy to reflect operational, legal, or regulatory updates. Any changes will be posted on this page with an updated "Effective Date". Continued use of the platform following revisions signifies your acknowledgement of the updated terms.

10. Contact Us & Data Protection Inquiries

If you have any inquiries, requests, or privacy concerns, please contact our Data Protection Officer: