Privacy Policy

Plotrise Depot is a Nigerian building materials marketplace. This policy explains what information we collect when you browse, quote or order, why we need it, how we keep it safe, and the rights you have over it under the Nigeria Data Protection Act.

Last updated: August 2026

1. Information We Collect

Identity and contact details you give us: full name, phone number, email address, delivery and billing addresses, and company or project name where you order on behalf of a business.
Order information: items requested, quantities, quotations, delivery notes, site access instructions, and communications with our sales and logistics teams.
Payment information: bank transfer references and the confirmation details returned by our payment partners. We do not store full card numbers, CVVs or bank passwords on our systems.
Account information: your login email, an encrypted password hash, and — for staff accounts — assigned roles and permissions.
Technical information collected automatically: IP address, device and browser type, pages viewed, referring links and approximate location derived from your IP.
Optional content you submit: product reviews, quote request forms, enquiries, and photographs sent in support of a return or warranty claim.

2. Why We Collect It

To create and manage your account, process orders and quotations, and issue invoices and receipts.
To arrange delivery, haulage and site offloading, which requires sharing addresses and phone numbers with our drivers and logistics partners.
To provide customer care: answering enquiries, handling returns, refunds and warranty claims.
To keep the marketplace safe — detecting fraudulent orders, payment abuse and unauthorised access.
To meet legal, tax and accounting obligations in Nigeria.
To improve our product range, pricing and website experience, and — only with your consent — to send offers and product updates.

3. How We Use Your Information

We use your information only for the purposes described in this policy, or for a closely related purpose you would reasonably expect.
Our lawful bases are: performance of your contract with us, our legitimate business interests, compliance with legal obligations, and your consent where consent is required (for example, marketing messages and non-essential cookies).
We do not sell your personal information, and we do not rent or trade customer lists.
We do not make decisions about you by purely automated means that would have a legal or similarly significant effect.

4. How We Protect Your Information

All traffic between your device and our website is encrypted in transit using HTTPS/TLS.
Customer data is stored in access-controlled managed databases with encryption at rest, row-level security rules and audited administrative access.
Staff access is granted on a least-privilege basis through named accounts and role-based permissions, and is revoked promptly when a role changes or ends.
Passwords are stored only as salted one-way hashes; no member of our team can read your password.
We keep backups and review our security configuration regularly. If a breach affects your personal data and poses a risk to you, we will notify you and the Nigeria Data Protection Commission as required by law.
No system is perfectly secure, so please protect your own account by using a strong, unique password and never sharing your login details.

5. When We Share Information With Trusted Services

Logistics and delivery partners — name, phone number and delivery address, so your materials reach the correct site.
Payment processors and banks — the details needed to take payment, confirm transfers and issue refunds.
Hosting, database and email providers — who process data on our instructions to run the website, store records and send transactional notifications such as order confirmations and quote acknowledgements.
Suppliers and manufacturers — limited details where a warranty claim or technical assessment requires it.
Professional advisers, auditors and insurers, and law-enforcement or regulatory authorities where we are legally required to disclose.
Every provider is bound by contract to protect your data, use it only for the service they provide to us, and delete or return it when the engagement ends. Where a provider is outside Nigeria, we ensure an adequate level of protection through appropriate contractual safeguards.

6. Cookies & Similar Technologies

Essential cookies keep you signed in, remember your cart and protect against fraud. The site cannot work without them.
Preference cookies remember choices such as your selected category, filters and display settings.
Analytics cookies help us understand which pages and products are useful so we can improve them. These are aggregated and never used to identify you personally.
Marketing cookies may be used to measure the performance of campaigns. We only set these with your consent.
You can clear or block cookies in your browser settings at any time. Blocking essential cookies will break checkout, cart and login features.

7. Your Privacy Rights

Access — request a copy of the personal information we hold about you.
Correction — ask us to fix information that is inaccurate or incomplete.
Deletion — ask us to erase your information where we no longer have a lawful reason to keep it.
Objection and restriction — object to processing based on our legitimate interests, or ask us to pause processing while a dispute is resolved.
Withdraw consent — unsubscribe from marketing at any time using the link in our emails or by contacting us; this will not affect order-related messages.
Portability — receive your information in a commonly used, machine-readable format.
Complain — raise a concern with us first, or with the Nigeria Data Protection Commission if you remain dissatisfied.
We respond to verified requests within 30 days and will never charge you for making one.

8. Data Retention

Order, invoice and payment records are kept for at least 6 years to satisfy Nigerian tax, accounting and audit requirements.
Account details are kept for as long as your account is active, and for up to 24 months after your last activity, after which inactive accounts are deleted or anonymised.
Quote requests and enquiries that do not convert are kept for 12 months so we can follow up and reference prior pricing.
Marketing contact details are kept until you unsubscribe, plus a short suppression record so we do not contact you again in error.
Technical logs are kept for up to 12 months for security and troubleshooting.
When a retention period ends we securely delete the data or irreversibly anonymise it for statistical use.

9. Children's Privacy

Our marketplace is intended for adults aged 18 and above, and for businesses.
We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it promptly.

10. Changes To This Policy

We may update this policy to reflect changes in our services, technology or the law. The revision date at the top of this page always shows the current version.
Where a change materially affects your rights, we will notify you by email or through a prominent notice on the website before it takes effect.