Privacy Policy

Cobbyvia Technologies Ltd is a technology company incorporated and operating in Nigeria, with its principal place of business in Lagos. We build digital products, platforms and infrastructure for consumers and businesses, with Vendigo as our flagship digital commerce platform. This Privacy Policy applies to the Cobbyvia corporate website, the Vendigo platform (including the Vendigo website at vendigo-nigeria.com, the Vendigo mobile applications, and any related tools, dashboards or services we operate from time to time), and any other product or service that links to this policy.

This policy does not apply to the practices of third parties that we do not own or control, including sellers and buyers on Vendigo, payment processors, escrow providers, delivery partners, social media platforms, or other independent services. Where a third party processes your information in connection with a Vendigo transaction, for example when you pay through a payment processor or when funds are held by an escrow provider, that third party's own privacy policy governs how they handle your data. We encourage you to read the policies of any third party you interact with through our services.

By using our websites or any of our products, you agree to the collection, use and disclosure of your information as described in this policy. If you do not agree with this policy, you should not use our websites or products. Where additional product-specific terms or notices apply, those terms are incorporated by reference and apply alongside this policy.

We collect information that you provide directly to us, information collected automatically when you use our services, and information we receive from other sources. The categories of personal information we may collect include identification and contact data such as your full name, email address, phone number, username or handle, profile photograph, and any other details you choose to add to your profile; account and verification data such as your password (stored in hashed form), government-issued identification details submitted during seller or user verification, business registration information, and bank or wallet details you provide to receive payouts; and transaction data such as your order history, listings, messages with other users, offers, ratings and reviews.

We also collect device and usage data automatically. This includes internet protocol (IP) addresses, device identifiers, browser type and version, operating system, time zone settings, the pages you visit, the features you use, the actions you take, page response times, duration of visits, and general usage statistics. We collect this data using cookies, log files, analytics tools and similar technologies described further below. When you use location features on Vendigo, such as discovering products or sellers near you, we may collect approximate or precise location information derived from your device, with your consent where required.

When you interact with others on Vendigo, for example by messaging a seller or leaving a review, the information you share in those interactions may be visible to the other party and, where relevant, to us for safety, support and dispute purposes. You should be mindful not to share sensitive personal information, such as financial details or identification numbers, in public fields like product reviews or public profiles. Where we ask you to submit documents for verification, we collect only what is reasonably necessary to confirm your identity or business legitimacy.

We collect information in three principal ways. First, you provide it directly when you register an account, create or edit a profile, list a product on Vendigo, place an order, send a message, submit a review, contact our support team, subscribe to updates, or otherwise complete a form or interact with features that request information. Second, we collect it automatically through cookies, web beacons, pixels, server logs and analytics tools when you visit our websites or use our applications, allowing us to record how the service is used and to troubleshoot and improve performance. Third, we receive it from other sources, such as third-party services that help us deliver the platform, including identity verification providers, payment and escrow processors, delivery and logistics partners, and marketing or analytics platforms, as well as from other Vendigo users who, for example, mention you in a message or review.

We may also combine information we collect from different sources to give you a more seamless and secure experience. For example, we may match information you provided during registration with information collected automatically from your device to detect suspicious activity, or we may combine your transaction history with verification status to determine eligibility for certain features. Where we combine information, we treat the combined dataset in accordance with this policy and the purposes for which it was collected.

We use your personal information to provide, operate and improve our websites and products, including to create and manage your account, display relevant products and sellers, process orders and payments, hold funds in escrow as described below, facilitate delivery, and enable communication between buyers and sellers. We use it to verify identity and business legitimacy, to prevent fraud and other prohibited activity, and to enforce our terms and community standards. We use it to respond to your enquiries, provide customer support, investigate disputes and resolve claims. We use it to send service notifications, security alerts, and important administrative messages, and, where you have agreed, to send marketing communications that you can opt out of at any time. We use it to analyse and improve our products, measure usage, understand trends, personalise content and recommendations, and develop new features and infrastructure.

We use it to comply with our legal obligations, such as record-keeping requirements and responding to lawful requests from competent authorities. We use it to establish, exercise or defend legal claims, and to protect the rights, property and safety of Cobbyvia, our users and others. Our legal bases for processing your information include your consent, the performance of a contract with you, compliance with a legal obligation, the protection of your vital interests, our legitimate interests as a business operating a digital commerce platform, and the performance of a task carried out in the public interest. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

We and our service providers use cookies and similar technologies such as web beacons, pixels, local storage and tags to operate and secure our websites and products, remember your preferences, measure and analyse how the service is used, deliver relevant content and advertising, and detect and prevent fraud. Cookies are small text files placed on your device. Some are essential and allow core functionality such as keeping you logged in or maintaining the contents of your cart; others are functional, analytical or marketing cookies that you can control through your browser or device settings.

You can manage or delete cookies through your browser settings, and in many browsers you can choose to block cookies or alert you when cookies are being sent. If you disable essential cookies, some features of our services may not work correctly. We may also use third-party analytics and advertising technologies that set their own cookies to help us understand traffic patterns and show relevant offers. These third parties process the information they collect under their own privacy policies. We do not knowingly use cookies to collect sensitive personal information, and we limit the use of marketing cookies to what is reasonably necessary to measure and improve our communication with you.

To use certain features of Vendigo, you must register an account. During registration we collect the details necessary to create and secure your account, such as your name, email address, phone number and a password. We may verify your email and phone number to confirm that you control them and to protect against automated abuse. To become a seller or to access features that require trust, we may collect additional information and documents for verification, including identification documents, business registration details and bank or wallet information so that we can pay out funds you earn.

Verification is a core part of how Vendigo builds trust. When you submit to verification, you confirm that the information and documents you provide are accurate and belong to you. We may share submitted information with licensed verification partners who help us confirm identity and business legitimacy, and we may retain verification records for as long as reasonably necessary to comply with legal obligations and to protect against fraud. You are responsible for keeping your account credentials secure and for all activity that occurs through your account, and you should notify us immediately if you suspect any unauthorised access.

When you buy or sell on Vendigo, we collect and use transaction data to fulfil the transaction, including the listing details, the agreed price, the chosen delivery or collection method, communications between the parties, and the outcome. For buyers, we use this data to process your order, track delivery, and allow you to confirm receipt and leave a review. For sellers, we use it to display your listings, manage orders, release your funds once the transaction completes, and help you understand your business performance. We also use transaction data to detect and investigate suspicious activity, to resolve disputes between buyers and sellers, and to improve how the marketplace matches people with what they need.

Messages exchanged between buyers and sellers on Vendigo are processed to deliver the conversation and to provide safety and support. We may review message content where we have a legitimate reason to do so, for example to investigate a dispute, a report of misconduct, a suspected scam, or a legal request. We do not sell your message content to third parties, and we limit access to it to authorised personnel and systems where there is a clear, purpose-driven need. Transaction and communication data may be retained after a transaction closes so that we can provide support, resolve disputes, detect repeat offenders, and meet legal record-keeping requirements.

A defining feature of Vendigo is the way payments are handled to protect both buyers and sellers. When a buyer pays for an order, the payment is not sent directly to the seller. Instead, the funds are held securely in escrow by our licensed payment and escrow partners while the order is in progress. The funds remain in escrow until the buyer confirms that they have received the product in the expected condition, or until a defined confirmation or dispute window expires. Only then are the funds released to the seller. This escrow arrangement is designed to give buyers confidence that they can raise a problem before their money is released, and to give sellers confidence that funds for an order have been secured before they ship or deliver.

To operate escrow, we share the information reasonably necessary with our payment and escrow partners, such as transaction identifiers, amounts, the parties' account details, and the status of the order, including delivery confirmation and dispute outcomes. The escrow provider processes this information under its own terms and privacy policy to hold, reconcile and release funds. We do not store full card numbers or sensitive payment credentials; these are handled entirely by the payment and escrow providers. Where a dispute arises, we may use transaction data, messages, and evidence submitted by both parties to assess the claim and instruct the escrow provider to release, refund or partially settle the funds in line with our dispute process. The escrow process may be paused, extended or reversed where a dispute is open, where we are required to by law, or where we detect fraud or unusual activity.

We do not sell your personal information. We share it only as described in this policy or as required to operate the platform. We share information with other Vendigo users as necessary to complete transactions, for example by showing a buyer the seller's store name and verified status, or by allowing a seller to see the delivery details of a confirmed order. We share information with our payment and escrow providers so that funds can be held and released; with identity verification providers so we can confirm who you are; with delivery and logistics partners so orders can be fulfilled; and with hosting, analytics, communications and other service providers who help us run the business, each under contractual obligations to protect the information and to use it only for the purpose we instruct.

We may share information where we believe it is necessary to comply with a legal obligation, to respond to a lawful request from a competent authority, to protect the safety, rights or property of Cobbyvia, our users or the public, or to investigate fraud or other misconduct. In connection with a sale, merger, reorganisation or other business transaction involving all or part of Cobbyvia, we may transfer information to the acquiring or successor entity, subject to appropriate confidentiality and continued protection. We may also share aggregated or de-identified information that cannot reasonably be used to identify you, for analytics, improvement and public reporting purposes.

We design our products with security in mind from the start. We use a combination of administrative, technical and physical safeguards designed to protect personal information against unauthorised access, alteration, disclosure or destruction. These safeguards include encryption in transit, restricted access controls, segregation of duties, logging and monitoring, secure development practices, and regular review of our systems and processes. Access to personal information is limited to authorised personnel who need it to perform their duties, and who are subject to confidentiality obligations.

No system or method of transmission over the internet is completely secure, and we cannot guarantee absolute security. If we become aware of a security breach that is reasonably likely to affect your rights or freedoms, we will take reasonable steps to investigate, contain and remediate it, and we will notify you and the relevant authorities where we are legally required or otherwise determine it is appropriate to do so. You also play a role in security: keep your account credentials private, do not reuse passwords across services, and report any suspicious activity to us promptly.

We keep your personal information only as long as we need it for the purposes described in this policy, to comply with legal obligations, to resolve disputes, and to enforce our agreements. The retention period depends on the type of information and the reason it was collected. Account data is kept while your account is active and for a reasonable period after closure, unless a longer period is required by law. Transaction and escrow records may be retained for longer to satisfy legal and accounting requirements and to support dispute resolution. Verification documents are retained only as long as reasonably necessary to confirm identity and protect against fraud.

When we no longer need your information, we delete it or render it irreversibly anonymous. Where deletion is not immediately possible, for example because of backup cycles or legal hold requirements, we store the information securely and restrict its use until it can be deleted. If you close your Vendigo account, we will deactivate it and begin the process of removing your data, while retaining certain records as described above. You can also ask us to delete your data subject to the rights described below.

Depending on where you live and the law that applies to you, you may have rights over your personal information, including the right to access the information we hold about you, to request that it be corrected if it is inaccurate or incomplete, to request that it be deleted, to ask us to restrict or object to certain processing, to receive a copy of your information in a structured and portable format, to withdraw consent you have given, and to complain to a data protection authority. To exercise any of these rights, contact us using the details at the end of this policy. We may need to verify your identity before responding and may refuse or limit a request where the law permits, for example where fulfilling it would affect the rights of others or conflict with a legal obligation.

You can also control certain things yourself. You can update your profile from within your account settings, manage notification preferences, opt out of marketing communications by following the unsubscribe link in our emails or by changing your settings, and manage cookies through your browser. Where we rely on your consent for processing, withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal, and it may limit features that depend on that processing.

Cobbyvia operates in Nigeria and may use service providers and partners located in other countries. As a result, your personal information may be processed in a country different from your own, including countries that may have different data protection laws. Where we transfer your information internationally, we take steps designed to ensure it remains protected in line with this policy and applicable law, for example by relying on providers that demonstrate appropriate safeguards, by using approved transfer mechanisms, or by limiting the data shared to what is strictly necessary.

If you are in a region with specific cross-border transfer requirements, we will respect those requirements to the extent they apply to us. We will not transfer more of your personal information than is reasonably necessary to provide the service or to meet the purposes described in this policy, and we will remain responsible for the information we transfer and for ensuring appropriate protection wherever it is processed.

Our services are intended for adults. Vendigo accounts and transactions are not available to individuals under the age of eighteen, and we do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information without the consent of a parent or guardian, we will take reasonable steps to delete that information. Sellers and other users must not list items or direct content at children, and listings intended for minors must be made by or through a parent or guardian where required.

We also encourage all users to take care when sharing information with others on the platform. Where a user may be vulnerable, for example due to age, disability or circumstances, we may apply additional safeguards, including limiting certain features or requiring additional verification. If you believe someone has used our services in a way that puts a vulnerable person at risk, please contact us so we can investigate and take appropriate action.

Our websites and products may contain links to, or integrations with, third-party websites, services, applications and content that we do not control. These may include payment and escrow providers, delivery partners, social media platforms, advertising networks, analytics tools and external seller tools. This policy does not cover how those third parties handle your information, and we are not responsible for their practices. When you follow a link to a third party or use an integrated service, you become subject to that third party's terms and privacy policy.

We recommend that you review the terms and privacy policies of any third party you interact with, especially where you will share personal or financial information. We try to work with reputable partners, but we cannot guarantee the practices of third parties. If you experience a problem with a third party connected to a Vendigo transaction, such as a payment, escrow or delivery partner, you may contact us and we will try to help where we reasonably can.

We may update this Privacy Policy from time to time to reflect changes in our products, technology, legal obligations or practices. When we make material changes, we will take reasonable steps to notify you, for example by updating the "last updated" date at the top of the policy, showing a prominent notice within the service, or sending a notification where appropriate. We encourage you to review this policy periodically. Your continued use of our services after a change takes effect means you accept the updated policy.

Where a change significantly affects how we use your information or expands the categories of information we collect, we may seek your consent where it is appropriate or required to do so. We will keep previous versions available on request so you can understand what has changed.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us. You can reach us through the contact details published on our website or via the contact page. We will make every reasonable effort to respond promptly and to address your concerns. Where you have a right to complain to a data protection authority, you may do so in the jurisdiction relevant to you.

Cobbyvia Technologies Ltd is responsible for the personal information we collect and process as described in this policy. When you contact us about a privacy matter, please provide enough detail so that we can identify you and your concern, and we will handle your request in accordance with applicable law and this policy.