MartCliq Privacy Policy
Data Controller: Estyne International Limited (Registered with CAC Nigeria)
Effective Date & Last Updated: August 26, 2026
Table of Contents
1. Introduction & Statutory Framework
This Privacy Policy describes how Estyne International Limited ("Company", "We", "Us", or "Our") collects, uses, processes, stores, shares, and protects personal data obtained from users, buyers, merchants, vendors, staff members, and site visitors ("You", "Your", or "Data Subject") through the MartCliqmarketplace platform, web applications, mobile applications, APIs, digital storefronts, and related services (collectively, the "Platform" or "Services").
Estyne International Limited is committed to maintaining the highest standards of privacy, confidentiality, and data protection compliance. This Privacy Policy is formulated strictly in accordance with the Nigeria Data Protection Act, 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR), and applicable international privacy frameworks.
By accessing, registering an account, operating a storefront, purchasing products, or using any feature on MartCliq, you acknowledge that you have read and understood this Privacy Policy and consent to the data collection and processing practices described herein.
2. Data Controller & Contact Details
Estyne International Limited, a corporate entity registered under the laws of the Federal Republic of Nigeria with the Corporate Affairs Commission (CAC), serves as the primary Data Controller responsible for determining the purposes and means of processing personal data on MartCliq.
Entity Name: Estyne International Limited
Corporate Registration: Corporate Affairs Commission (CAC), Nigeria
Contact & Privacy Desk: support@martcliq.com
3. Key Privacy Definitions
- Personal Data: Any information relating to an identified or identifiable natural person ("Data Subject"), directly or indirectly.
- Processing: Any operation performed on personal data, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, disclosure, alignment, or erasure.
- Data Controller: The legal entity (Estyne International Limited) that determines the purposes and lawful means of processing personal data.
- Merchant / Vendor: An independent business entity registered on MartCliq to create digital storefronts, manage product catalogs, and sell goods or services.
- Consumer / Buyer: An individual or entity browsing listings, placing orders, requesting quotes, or purchasing goods/services on MartCliq.
4. Categories of Personal Data We Collect
We collect and process personal data across distinct operational categories:
A. Identity & Contact Information
Full name, preferred display name, email address, telephone numbers, shipping/delivery addresses, state, local government area (LGA), and profile picture.
B. Business & Merchant Verification Data
Business name, Corporate Affairs Commission (CAC) registration numbers and certificates, Tax Identification Numbers (TIN), business registration documents, physical storefront location, bank account name, bank account number, bank verification codes for payout processing, designated business staff member profiles, assigned staff role permissions, and store catalog information.
C. Commercial & Transactional Information
Purchase history, order details, sub-order fulfillment statuses, shopping cart contents, Request for Quote (RFQ) submissions, custom merchant quotes, applied discount vouchers, payment gateway reference IDs, wallet transaction logs, top-up logs, withdrawal request records, refund requests, and dispute logs.
D. Communication & Messaging Data
In-app real-time chat messages between buyers and merchant storefronts, product reviews, merchant ratings, customer service emails, support tickets, and feedback submissions.
E. Technical, Telemetry & Device Data
IP address, device type, hardware model, operating system type and version, web browser type and version, preferred language, access timestamps, session tokens, pages viewed, search queries, referral sources, crash logs, and network connection metadata.
5. How We Collect Your Data
We collect data through multiple interaction channels:
- Direct User Submissions: Information provided when creating an account, registering a storefront, submitting CAC verification documents, submitting an RFQ, placing an order, messaging a seller, or contacting support.
- Automated Data Collection: Cookies, local browser storage, server access logs, and session identifiers capturing browsing activity and device telemetry.
- Third-Party Integrations: Information received from licensed payment gateways (transaction confirmation IDs), banking partners (payout status), and identity verification services.
6. Purposes & Legal Bases for Processing (NDPA Matrix)
In accordance with Section 24 of the NDPA 2023, every data processing operation relies on a valid legal basis:
| Processing Purpose | Categories of Data | Legal Basis (NDPA) |
|---|---|---|
| Account creation, authentication & profile management | Identity, Contact, Device Data | Performance of Contract |
| Order processing, RFQs, quotes & delivery routing | Identity, Transaction, Contact Data | Performance of Contract |
| Payment processing & merchant wallet payouts | Financial, Transactional, Business Data | Performance of Contract & Compliance |
| Merchant storefront & CAC identity verification | CAC, TIN, Business Details | Legal Obligation & Legitimate Interest |
| Security monitoring, fraud detection & prevention | Technical, Device, Transactional Data | Legitimate Interest |
7. Third-Party Disclosures & Service Partners
Estyne International Limited does not sell or rent personal data. We disclose data only to trusted partners under strict confidentiality agreements:
- Independent Storefront Merchants: Buyer contact and delivery address information is shared with sellers strictly to fulfill confirmed orders or respond to quote requests.
- Licensed Payment Processors: Financial payment details are processed directly by licensed Nigerian payment gateway partners. Estyne International Limited does not store full credit card numbers on its servers.
- Logistics & Shipping Partners: Recipient delivery details are disclosed to logistics providers to execute physical package deliveries.
- Law Enforcement & Statutory Bodies: Information may be disclosed to Nigerian courts, regulatory authorities, or tax offices upon receipt of a valid subpoena, court order, or statutory requirement.
8. International Data Transfers
Your personal data is stored and processed on secure, Tier-1 cloud infrastructure and global data centers. Where cross-border data transfers occur from Nigeria to international hosting locations, Estyne International Limited ensures that appropriate data protection safeguards are implemented—including Standard Contractual Clauses (SCCs), robust technical safeguards, and end-to-end cryptographic encryption—in full compliance with Part 6 (Cross-Border Transfers of Personal Data) of the Nigeria Data Protection Act, 2023 (NDPA).
9. Data Security & Technical Safeguards
Estyne International Limited implements robust technical and organizational security measures to safeguard your personal data:
- Encryption Protocols: All data transmitted between user devices and our servers is encrypted using industry-standard SSL/TLS protocols. Data at rest is secured using AES-256 encryption standards.
- Cryptographic Password Hashing: User passwords and sensitive credentials are salted and hashed using modern cryptographic algorithms.
- Access Control & Multi-Tenancy: Strict role-based access control (RBAC) ensures multi-tenant storefront isolation and restricts data access to authorized personnel only.
- Security Monitoring & Audits: Routine security vulnerability scans, intrusion monitoring, and system telemetry auditing.
10. Account Deletion & Data Retention Schedule
You have the right to delete your MartCliq account at any time. In compliance with mobile platform requirements (Google Play & Apple App Store) and the Nigeria Data Protection Act (NDPA 2023), we provide a transparent and straightforward account deletion process:
A. How to Request Account Deletion
- In-App Self-Service: In the MartCliq mobile application, navigate to Profile / Settings → Account Security → Delete Account and follow the confirmation prompts.
- Web & Email Request: Submit a formal deletion request with your registered email address to our support team at support@martcliq.com with the subject line "Account Deletion Request". Requests are verified and processed within 30 days.
B. Data That Is Immediately Deleted or Anonymized
Upon verified deletion of your account, your profile is permanently deactivated and the following data categories are purged from our active operational databases:
- Personal identity records (full name, username, display name, avatar, bio).
- Login credentials (hashed passwords, authentication tokens, biometric flags).
- Contact and delivery details (shipping addresses, secondary phone numbers, email notifications).
- Device push notification tokens and marketing communication preferences.
C. Data Retained Under Statutory & Legal Compliance Exceptions
In accordance with industry best practices and applicable laws, certain data cannot be deleted immediately upon account closure and will be securely retained for specific statutory periods:
- Financial, Tax & Invoicing Records (6–7 Years): In compliance with Nigerian tax regulations, the Companies and Allied Matters Act (CAMA), and Anti-Money Laundering (AML) / Counter-Financing of Terrorism (CFT) laws, records of completed commercial purchases, merchant wallet payouts, invoices, VAT/tax deductions, and payment gateway references are retained for a mandatory statutory period of 6 to 7 years.
- Active Disputes, Chargebacks & Fraud Prevention: If your account has active dispute cases, pending chargebacks, or is subject to an active fraud or security investigation, transaction and interaction logs are retained until the dispute is resolved and the statutory limitation period for legal claims expires.
- Aggregated & De-Identified Analytics: Fully anonymized operational metrics (e.g., aggregated historical sales volumes, anonymized rating averages) that cannot be linked back to an identifiable natural person may be retained for business analytics and platform performance tracking.
D. Archival & Secure Disposal
All legally retained post-closure records are segregated from live operational databases into encrypted, access-restricted cold archival storage. Once the mandatory statutory retention period lapses, all archived records are permanently and securely destroyed or anonymized.
11. Your Data Subject Rights (NDPA 2023)
Under Part 5 of the Nigeria Data Protection Act 2023, Data Subjects possess the following legal rights:
To exercise any of your legal rights, please submit a written request to our support team at support@martcliq.com. We will respond within 30 days upon identity verification.
12. Cookies & Tracking Technologies Policy
MartCliq utilizes cookies, local web storage, and session tokens to enhance platform functionality, maintain user login states, store active shopping cart contents, remember theme settings, and gather aggregated usage analytics.
- Strictly Necessary Cookies: Essential for platform security, user authentication, and shopping cart persistence.
- Functional & Preference Cookies: Preserve your customized settings, UI layout preferences, and search parameters.
- Performance & Analytics Cookies: Measure platform traffic and page response times to optimize technical delivery.
You can configure your browser settings to reject non-essential cookies. However, disabling essential cookies will prevent core features such as login and checkout from functioning properly.
13. Minors & Children's Privacy
MartCliq is intended exclusively for individuals who are at least 18 years of age or possess legal capacity under Nigerian law. We do not knowingly collect or solicit personal data from children under 18. If we discover that personal data of a minor has been collected without parental consent, we will promptly delete such records.
14. External Links & Third-Party Services
The Platform may contain links to external third-party websites, social media channels, or merchant domain links. Estyne International Limited is not responsible for the privacy practices, content, or security policies of third-party external websites. We encourage you to review the privacy policy of any third-party website you visit.
15. Policy Amendments & Supervisory Authority
Estyne International Limited reserves the right to amend or update this Privacy Policy at any time. Notice of material updates will be posted on the Platform prior to taking effect. Continued use of MartCliq following notification constitutes acceptance of the revised terms.
Supervisory Authority: If you believe your data protection rights have been violated under Nigerian law, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
Corporate Controller: Estyne International Limited
Registration: CAC Nigeria
Contact & Support Email: support@martcliq.com