Privacy Policy

1. Introduction

Tovend is a platform operated by its founder under their personal name. It enables merchants to create shareable online product catalogues and receive customer enquiries and orders through WhatsApp.

This Privacy Policy explains how Tovend collects, uses, stores, shares and protects personal information when you visit the website, create an account, manage a storefront or interact with a merchant through the platform.

Tovend aims to handle personal information in accordance with applicable data-protection laws, including the Nigeria Data Protection Act 2023.

2. Information We Collect

The information processed depends on how you use Tovend.

2.1 Account Information

When merchants register, we may collect their name, email address, phone number, authentication information, account preferences and related account details.

2.2 Storefront and Product Information

Merchants may provide store names, usernames, WhatsApp contact numbers, product names, descriptions, prices, photographs, variations, logos and other content needed to operate their storefronts.

Public storefront information may be viewed and shared by anyone who can access the relevant link.

2.3 Customer and Order Information

Customers can browse product catalogues and select products for an order.

Tovend prepares the selected products and quantities into a WhatsApp message that the customer can send to the relevant merchant. Customers should review the message before sending it.

The information included in the message is shared with the merchant. WhatsApp processes information associated with its service under its own terms and privacy policy.

Tovend's customer ordering flow is designed around preparing WhatsApp messages; it should not be understood as a promise that Tovend maintains a separate database of completed customer orders.

2.4 Technical and Usage Information

We may process technical information such as browser and device details, IP address, timestamps, pages visited, storefront interactions, referral information, diagnostic data and usage events, where these are collected by our systems or service providers.

2.5 Support Communications

If you contact Tovend for assistance, we may process your contact information and message contents to respond to your enquiry and address the issue.

3. Cookies, Analytics and Advertising Technologies

Tovend may use website analytics and advertising technologies, including Google Analytics, Meta Pixel or similar tools, where these are enabled on the website.

Depending on their configuration, these technologies may collect information such as page visits, interactions, device and browser information, referral sources, online identifiers and information used to measure advertising performance or website usage.

These tools may use cookies, pixels, scripts or similar technologies to recognise a browser or measure activity across pages or services. The information collected and the purposes of processing depend on which tools are actually active and how they are configured.

Where required by applicable law, Tovend will provide clear notice and obtain valid consent before activating non-essential analytics or advertising tracking technologies. Users should have an appropriate way to decline or withdraw consent and manage their preferences.

Further details about the specific technologies, purposes and available controls should be provided in Tovend's Cookie Policy.

4. How We Use Personal Information

We may use information to:

• Create and manage merchant accounts.
• Display storefronts and product catalogues.
• Prepare product selections for WhatsApp orders.
• Maintain account security and prevent abuse.
• Provide support and respond to enquiries.
• Understand website usage and improve the platform.
• Measure marketing and advertising performance where applicable.
• Manage subscriptions and payments when those features are available.
• Meet legal obligations and protect the rights and security of users and Tovend.

We will not process personal information for incompatible purposes unless permitted by applicable law.

5. Legal Basis for Processing

Where required by law, Tovend will rely on an appropriate legal basis for processing personal information. Depending on the circumstances, this may include fulfilling a contract, taking steps requested before entering a contract, complying with legal obligations, pursuing legitimate interests where permitted, or obtaining consent.

Where processing relies on consent, users may withdraw it. Withdrawal does not invalidate processing lawfully carried out before withdrawal.

6. How Information Is Shared

Tovend does not sell personal information.

Information may be shared in the following circumstances:

6.1 With Merchants

When a customer sends an order message, the information in that message is shared with the intended merchant.

6.2 With Service Providers

Tovend may use third-party services for hosting, databases, authentication, analytics, advertising, communications, security and payment processing. These providers may process relevant information to provide their services, subject to applicable requirements.

6.3 With Analytics and Advertising Providers

If enabled, tools such as Google Analytics or Meta Pixel may receive information about website activity and related technical identifiers. Their processing may be governed by their own privacy policies and service terms.

6.4 For Legal and Security Reasons

Information may be disclosed where necessary to comply with applicable law, respond to lawful requests, investigate suspected fraud or protect users, Tovend or other persons.

6.5 Business Transfers

If Tovend's business or relevant assets are transferred, personal information may be included in the transaction subject to applicable law and appropriate safeguards.

7. Public Storefronts and Merchant Responsibilities

Tovend storefronts are intended to be shared. Information that merchants publish publicly may be viewed, copied or redistributed by others.

Merchants must ensure they have an appropriate legal basis or permission to publish personal information and other content where required.

Merchants receive customer information that customers choose to send to them. Merchants may have their own privacy obligations concerning how they use, store and retain that information.

8. Data Retention

Tovend retains personal information for as long as reasonably necessary for the purposes for which it was collected, including account management, platform operations, security, dispute resolution and legal compliance.

Retention periods depend on the type of information and the purpose of processing.

Account deletion or a request to delete information may not remove information already received and retained independently by a merchant or third-party service. Requests will be assessed under applicable law.

9. Data Security

Tovend takes reasonable measures intended to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.

No online platform can guarantee absolute security. Users should protect their account credentials and notify Tovend if they suspect unauthorised access.

10. International Data Transfers

Some service providers may store or process personal information outside Nigeria. Where this occurs, Tovend will assess and apply the safeguards and legal requirements for international transfers that apply under relevant data-protection law.

The specific providers, processing locations and safeguards should be confirmed and documented before publication of the final policy.

11. Your Privacy Rights

Subject to applicable law, individuals may have rights to:

• Be informed about the processing of their personal information.
• Request access to personal information held about them.
• Request correction of inaccurate information.
• Request deletion in appropriate circumstances.
• Object to or request restriction of certain processing.
• Withdraw consent where consent is the legal basis.
• Request data portability where applicable.
• Lodge a complaint with the relevant data-protection authority.

Requests can be made through Tovend's official support or privacy contact. We may request reasonable information to verify the identity of the person making the request.

Some rights may be subject to legal exceptions.

12. Children's Privacy

Tovend is not intended to collect children's personal information unlawfully. If you believe a child has provided personal information to Tovend in circumstances that violate applicable law, contact us so we can assess and address the matter.

13. Third-Party Services

Tovend may link to or integrate with third-party services, including WhatsApp, analytics providers, advertising platforms and payment providers.

Those services may operate under their own privacy policies and terms. Tovend does not control independent processing carried out by third parties outside its control.

14. Changes to This Policy

Tovend may update this policy to reflect changes in its features, providers, data practices or legal obligations. Material changes will be communicated where required by law. The latest version will be published with its updated revision date.

15. Contact

For privacy questions or requests, contact Tovend through its official support email.

Platform: Tovend

Website: https://tovend.app

Operator: Tovend's founder, currently operating under their personal name

Official support email: support@tovend.app

If you believe your data-protection rights have been violated, you may also contact the Nigeria Data Protection Commission through its official website: https://ndpc.gov.ng/.