Privacy Policy

1Information We Collect

Personal Information

When you create an account, place an order, or contact us, we may collect:

• Full name and email address
• Phone number
• Delivery address (street, city, state, postal code)
• Payment information (processed securely through Paystack; we do not store card details)
• Account login credentials (passwords are hashed and never stored in plain text)

Automatically Collected Information

When you browse our website, we automatically collect:

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, time spent on pages, and click patterns
• Referring URL and search terms used to find our site
• Cookies and similar tracking technologies

2How We Use Your Information

We use your personal information for the following purposes:

• Order Processing: To fulfill your orders, process payments, and arrange delivery
• Account Management: To create and manage your account, including order history and wishlist
• Communication: To send order confirmations, delivery updates, and respond to your inquiries
• Service Improvement: To analyze usage patterns and improve our website, products, and services
• Personalization: To tailor product recommendations and shopping experience to your preferences
• Security: To detect and prevent fraud, unauthorized access, and other illegal activities
• Legal Compliance: To comply with Nigerian laws and regulations, including the Nigeria Data Protection Regulation (NDPR)

3Data Sharing & Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:

• Payment Processing: With Paystack (our payment processor) to securely process your transactions. Paystack is PCI DSS compliant and does not share your card details with us.
• Delivery Partners: With logistics companies (e.g., GIG Logistics, Fedex, DHL) to deliver your orders. We share only the information necessary for delivery (name, phone, address).
• Cloud Infrastructure: With our cloud hosting and database providers for data storage and processing. All providers are contractually obligated to protect your data.
• Legal Requirements: If required by law, court order, or government regulation, we may disclose your information to the relevant authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.

4Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience:

• Essential Cookies: Required for the website to function (session management, cart persistence, authentication)
• Analytics Cookies: Help us understand how visitors interact with our site (page views, popular products, traffic sources)
• Preference Cookies: Remember your settings (theme, language, recently viewed products)

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of our website.

5Data Security

We implement industry-standard security measures to protect your personal information:

• SSL/TLS encryption for all data in transit (HTTPS)
• Encrypted data storage with access controls
• Regular security audits and vulnerability assessments
• Two-factor authentication for admin access
• Employee training on data protection best practices

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law:

• Account Data: Retained while your account is active and for 2 years after deletion
• Order Data: Retained for 6 years for tax and regulatory compliance
• Communication Records: Retained for 2 years
• Analytics Data: Anonymized after 26 months

7Your Rights

Under the Nigeria Data Protection Regulation (NDPR) and applicable laws, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Restriction: Request that we limit how we process your data
• Data Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing of your data for direct marketing purposes
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@buysolar.ng. We will respond to your request within 30 days.

8Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us immediately.

9International Transfers

Your information may be transferred to and processed in countries other than Nigeria. We ensure that appropriate safeguards are in place, including standard contractual clauses and adequate levels of data protection in the receiving country, in compliance with the NDPR.

10Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on our website with an updated "Last updated" date. We encourage you to review this policy periodically.

11Contact Us

If you have any questions or concerns about this privacy policy or our data practices, please contact us: