Privacy policy

1. Who we are

SecMart (“we”, “us”) runs an online marketplace in Nigeria where buyers and sellers trade with escrow protection and hand items over at partner filling stations (“Vaults”). We are the controller of the personal information described here.

You can reach us about privacy at hello@secmartng.com.

2. What we collect

• Account details: your name, email address, phone number, role (buyer or seller) and a password, which we store only in scrambled (hashed) form.
• Listings and photos: what you sell, its price, condition, location (city and state) and the photos you upload.
• Orders and activity: orders, which Vault is used, the timeline of each handoff (drop-off, check-in, inspection, release), disputes and the messages you give us about them.
• Location at drop-off: if you are a seller and allow your browser to share it, the approximate GPS position when you mark an item as dropped off. You can refuse, and the drop-off still works.
• Payout details: if you withdraw earnings, your bank name, account number and account name.
• Payment records: the reference, amount and status of your Paystack payment. We never see or store your card number.
• Technical data: your IP address and basic request information, used to keep the service secure and to limit repeated login attempts.

3. How we use it

• To create and secure your account, and to confirm your email address.
• To run escrow orders: holding payments, coordinating Vault handoffs, releasing or refunding money and paying out sellers.
• To send you emails about your orders, disputes, withdrawals and account (for example “payment received” or “item ready for pickup”). These are service messages, not marketing.
• To investigate disputes and to detect and prevent fraud, fake listings and abuse.
• To meet our legal obligations and to improve the reliability of the service.

4. Why we're allowed to

Under the Nigeria Data Protection Act 2023 we rely on: contract (we need your details to provide the marketplace you signed up for), legitimate interests (security, fraud prevention and dispute handling), legal obligation, and consent where we ask for it, such as sharing your location at drop-off.

5. Who we share it with

We do not sell your personal information. We share it only as needed to run the service:

• The other party in your order. They see only what is needed to complete the trade, for example the seller’s name on a listing and the order status. SecMart staff, not the other party, see the contact details needed to resolve a dispute.
• Vault partners. Staff at the pickup station see the order reference and item so they can check it in and hand it over.
• Paystack, our payment processor, which handles card and bank payments and refunds under its own privacy policy.
• Service providers that help us run the platform, such as hosting and email delivery, who may only use your data for us.
• Authorities when we are legally required to, or to protect people from fraud or harm.

6. How long we keep it

We keep your account information while your account is open. We keep order, payment and dispute records for as long as needed to resolve disputes, prevent fraud and meet financial record-keeping and legal obligations, then delete or anonymise them. Listing photos are deleted when a listing is removed.

7. Your rights

You can ask us to:

• give you a copy of the personal information we hold about you;
• correct information that is wrong or out of date;
• delete your information, where we have no legal reason to keep it;
• restrict or object to certain uses of your information;
• withdraw consent you gave us, such as location sharing, at any time.

Email hello@secmartng.com from the address on your account. We may need to confirm it is really you before acting. If you are unhappy with our response you can complain to the Nigeria Data Protection Commission.

8. Keeping it safe

Passwords are hashed, connections to SecMart are encrypted, pickup and release codes are never sent by email, and access to admin tools is limited by role. No system is perfectly secure, so please use a strong, unique password and never share your codes.

9. Cookies and similar storage

We keep you signed in using your browser’s local storage. Details are on our Cookies & storage page.

10. Children

SecMart is for people aged 18 and over. We do not knowingly collect information from anyone under 18.

11. Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and, for significant changes, tell you by email or in the app before they take effect.