Privacy Policy

OmaGold (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This policy explains what we collect, why we collect it, how we use and protect it, and the rights you have. It is designed to align with the Nigeria Data Protection Regulation (NDPR) and general international data-protection good practice.

Information We Collect

• Account data: name, email address, phone number, and password (stored only as a secure hash).
• Order & delivery data: items purchased, delivery address, and order history.
• Payment data: processed securely by our payment partner (Paystack). We do not store your card number, CVV, or PIN.
• Seller/KYC data (for sellers only): business and identity verification details required to operate a store and receive payouts.
• Technical data: device/browser information, IP address, and cookie identifiers used to keep you signed in and to improve the service.

How We Use Your Information

• To create and manage your account and process your orders.
• To take payment, arrange delivery, and handle returns or refunds.
• To provide customer support and send service-related notifications.
• To keep the platform secure and prevent fraud and abuse.
• To comply with our legal and regulatory obligations.

Payments & Third Parties

Payments are processed by Paystack, a PCI-DSS compliant payment processor. Your card details are entered on and handled by the processor — they are never stored on OmaGold's servers. We share only the minimum data necessary with sellers (to fulfil your order) and with delivery and payment partners (to complete your purchase).

Cookies

We use essential cookies to keep you signed in and to remember your preferences, and non-essential cookies to understand and improve how the service is used. You can accept or decline non-essential cookies via the banner shown on your first visit, and most browsers let you manage cookies in their settings.

How We Protect Your Data

We use encryption in transit, hashed passwords, access controls, and audit logging to protect your information. No method of transmission or storage is perfectly secure, but we take reasonable measures to safeguard your data and to respond promptly to any incident.

Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you and request a copy (data export).
• Correct inaccurate or incomplete data from your account settings.
• Request deletion of your account and personal data (right to erasure), subject to legal retention requirements.
• Withdraw consent for non-essential cookies at any time.

You can export your data or request account deletion from your account settings, or by contacting us using the details below.

Data Retention

We keep your data for as long as your account is active and as needed to provide the service. Where required, we retain certain records (for example, transaction records) for the period mandated by law before secure deletion or anonymization.

Contact Us

For any privacy question or to exercise your rights, contact our team: