Data Privacy & Protection Notice

MartCliq Privacy Policy

Data Controller: Estyne International Limited (Registered with CAC Nigeria)

Effective Date & Last Updated: August 26, 2026

1. Introduction & Statutory Framework

This Privacy Policy describes how Estyne International Limited ("Company", "We", "Us", or "Our") collects, uses, processes, stores, shares, and protects personal data obtained from users, buyers, merchants, vendors, staff members, and site visitors ("You", "Your", or "Data Subject") through the MartCliqmarketplace platform, web applications, mobile applications, APIs, digital storefronts, and related services (collectively, the "Platform" or "Services").

Estyne International Limited is committed to maintaining the highest standards of privacy, confidentiality, and data protection compliance. This Privacy Policy is formulated strictly in accordance with the Nigeria Data Protection Act, 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR), and applicable international privacy frameworks.

By accessing, registering an account, operating a storefront, purchasing products, or using any feature on MartCliq, you acknowledge that you have read and understood this Privacy Policy and consent to the data collection and processing practices described herein.

2. Data Controller & Contact Details

Estyne International Limited, a corporate entity registered under the laws of the Federal Republic of Nigeria with the Corporate Affairs Commission (CAC), serves as the primary Data Controller responsible for determining the purposes and means of processing personal data on MartCliq.

Entity Name: Estyne International Limited

Corporate Registration: Corporate Affairs Commission (CAC), Nigeria

Contact & Privacy Desk: support@martcliq.com

3. Key Privacy Definitions

  • Personal Data: Any information relating to an identified or identifiable natural person ("Data Subject"), directly or indirectly.
  • Processing: Any operation performed on personal data, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, disclosure, alignment, or erasure.
  • Data Controller: The legal entity (Estyne International Limited) that determines the purposes and lawful means of processing personal data.
  • Merchant / Vendor: An independent business entity registered on MartCliq to create digital storefronts, manage product catalogs, and sell goods or services.
  • Consumer / Buyer: An individual or entity browsing listings, placing orders, requesting quotes, or purchasing goods/services on MartCliq.

4. Categories of Personal Data We Collect

We collect and process personal data across distinct operational categories:

A. Identity & Contact Information

Full name, preferred display name, email address, telephone numbers, shipping/delivery addresses, state, local government area (LGA), and profile picture.

B. Business & Merchant Verification Data

Business name, Corporate Affairs Commission (CAC) registration numbers and certificates, Tax Identification Numbers (TIN), business registration documents, physical storefront location, bank account name, bank account number, bank verification codes for payout processing, designated business staff member profiles, assigned staff role permissions, and store catalog information.

C. Commercial & Transactional Information

Purchase history, order details, sub-order fulfillment statuses, shopping cart contents, Request for Quote (RFQ) submissions, custom merchant quotes, applied discount vouchers, payment gateway reference IDs, wallet transaction logs, top-up logs, withdrawal request records, refund requests, and dispute logs.

D. Communication & Messaging Data

In-app real-time chat messages between buyers and merchant storefronts, product reviews, merchant ratings, customer service emails, support tickets, and feedback submissions.

E. Technical, Telemetry & Device Data

IP address, device type, hardware model, operating system type and version, web browser type and version, preferred language, access timestamps, session tokens, pages viewed, search queries, referral sources, crash logs, and network connection metadata.

5. How We Collect Your Data

We collect data through multiple interaction channels:

  • Direct User Submissions: Information provided when creating an account, registering a storefront, submitting CAC verification documents, submitting an RFQ, placing an order, messaging a seller, or contacting support.
  • Automated Data Collection: Cookies, local browser storage, server access logs, and session identifiers capturing browsing activity and device telemetry.
  • Third-Party Integrations: Information received from licensed payment gateways (transaction confirmation IDs), banking partners (payout status), and identity verification services.

6. Purposes & Legal Bases for Processing (NDPA Matrix)

In accordance with Section 24 of the NDPA 2023, every data processing operation relies on a valid legal basis:

Processing PurposeCategories of DataLegal Basis (NDPA)
Account creation, authentication & profile managementIdentity, Contact, Device DataPerformance of Contract
Order processing, RFQs, quotes & delivery routingIdentity, Transaction, Contact DataPerformance of Contract
Payment processing & merchant wallet payoutsFinancial, Transactional, Business DataPerformance of Contract & Compliance
Merchant storefront & CAC identity verificationCAC, TIN, Business DetailsLegal Obligation & Legitimate Interest
Security monitoring, fraud detection & preventionTechnical, Device, Transactional DataLegitimate Interest

7. Third-Party Disclosures & Service Partners

Estyne International Limited does not sell or rent personal data. We disclose data only to trusted partners under strict confidentiality agreements:

  • Independent Storefront Merchants: Buyer contact and delivery address information is shared with sellers strictly to fulfill confirmed orders or respond to quote requests.
  • Licensed Payment Processors: Financial payment details are processed directly by licensed Nigerian payment gateway partners. Estyne International Limited does not store full credit card numbers on its servers.
  • Logistics & Shipping Partners: Recipient delivery details are disclosed to logistics providers to execute physical package deliveries.
  • Law Enforcement & Statutory Bodies: Information may be disclosed to Nigerian courts, regulatory authorities, or tax offices upon receipt of a valid subpoena, court order, or statutory requirement.

8. International Data Transfers

Your personal data is stored and processed on secure, Tier-1 cloud infrastructure and global data centers. Where cross-border data transfers occur from Nigeria to international hosting locations, Estyne International Limited ensures that appropriate data protection safeguards are implemented—including Standard Contractual Clauses (SCCs), robust technical safeguards, and end-to-end cryptographic encryption—in full compliance with Part 6 (Cross-Border Transfers of Personal Data) of the Nigeria Data Protection Act, 2023 (NDPA).

9. Data Security & Technical Safeguards

Estyne International Limited implements robust technical and organizational security measures to safeguard your personal data:

  • Encryption Protocols: All data transmitted between user devices and our servers is encrypted using industry-standard SSL/TLS protocols. Data at rest is secured using AES-256 encryption standards.
  • Cryptographic Password Hashing: User passwords and sensitive credentials are salted and hashed using modern cryptographic algorithms.
  • Access Control & Multi-Tenancy: Strict role-based access control (RBAC) ensures multi-tenant storefront isolation and restricts data access to authorized personnel only.
  • Security Monitoring & Audits: Routine security vulnerability scans, intrusion monitoring, and system telemetry auditing.

10. Account Deletion & Data Retention Schedule

You have the right to delete your MartCliq account at any time. In compliance with mobile platform requirements (Google Play & Apple App Store) and the Nigeria Data Protection Act (NDPA 2023), we provide a transparent and straightforward account deletion process:

A. How to Request Account Deletion

  • In-App Self-Service: In the MartCliq mobile application, navigate to Profile / Settings → Account Security → Delete Account and follow the confirmation prompts.
  • Web & Email Request: Submit a formal deletion request with your registered email address to our support team at support@martcliq.com with the subject line "Account Deletion Request". Requests are verified and processed within 30 days.

B. Data That Is Immediately Deleted or Anonymized

Upon verified deletion of your account, your profile is permanently deactivated and the following data categories are purged from our active operational databases:

  • Personal identity records (full name, username, display name, avatar, bio).
  • Login credentials (hashed passwords, authentication tokens, biometric flags).
  • Contact and delivery details (shipping addresses, secondary phone numbers, email notifications).
  • Device push notification tokens and marketing communication preferences.

C. Data Retained Under Statutory & Legal Compliance Exceptions

In accordance with industry best practices and applicable laws, certain data cannot be deleted immediately upon account closure and will be securely retained for specific statutory periods:

  • Financial, Tax & Invoicing Records (6–7 Years): In compliance with Nigerian tax regulations, the Companies and Allied Matters Act (CAMA), and Anti-Money Laundering (AML) / Counter-Financing of Terrorism (CFT) laws, records of completed commercial purchases, merchant wallet payouts, invoices, VAT/tax deductions, and payment gateway references are retained for a mandatory statutory period of 6 to 7 years.
  • Active Disputes, Chargebacks & Fraud Prevention: If your account has active dispute cases, pending chargebacks, or is subject to an active fraud or security investigation, transaction and interaction logs are retained until the dispute is resolved and the statutory limitation period for legal claims expires.
  • Aggregated & De-Identified Analytics: Fully anonymized operational metrics (e.g., aggregated historical sales volumes, anonymized rating averages) that cannot be linked back to an identifiable natural person may be retained for business analytics and platform performance tracking.

D. Archival & Secure Disposal

All legally retained post-closure records are segregated from live operational databases into encrypted, access-restricted cold archival storage. Once the mandatory statutory retention period lapses, all archived records are permanently and securely destroyed or anonymized.

11. Your Data Subject Rights (NDPA 2023)

Under Part 5 of the Nigeria Data Protection Act 2023, Data Subjects possess the following legal rights:

Right to AccessRequest confirmation of whether we process your data and receive a copy of your personal records.
Right to RectificationRequest immediate correction of inaccurate or incomplete personal or business information.
Right to Erasure ("Right to be Forgotten")Request deletion of your data where processing is no longer necessary or consent is withdrawn, subject to statutory retention limits.
Right to Object & RestrictObject to or request restriction of data processing for direct marketing or specific legitimate interest operations.

To exercise any of your legal rights, please submit a written request to our support team at support@martcliq.com. We will respond within 30 days upon identity verification.

12. Cookies & Tracking Technologies Policy

MartCliq utilizes cookies, local web storage, and session tokens to enhance platform functionality, maintain user login states, store active shopping cart contents, remember theme settings, and gather aggregated usage analytics.

  • Strictly Necessary Cookies: Essential for platform security, user authentication, and shopping cart persistence.
  • Functional & Preference Cookies: Preserve your customized settings, UI layout preferences, and search parameters.
  • Performance & Analytics Cookies: Measure platform traffic and page response times to optimize technical delivery.

You can configure your browser settings to reject non-essential cookies. However, disabling essential cookies will prevent core features such as login and checkout from functioning properly.

13. Minors & Children's Privacy

MartCliq is intended exclusively for individuals who are at least 18 years of age or possess legal capacity under Nigerian law. We do not knowingly collect or solicit personal data from children under 18. If we discover that personal data of a minor has been collected without parental consent, we will promptly delete such records.

14. External Links & Third-Party Services

The Platform may contain links to external third-party websites, social media channels, or merchant domain links. Estyne International Limited is not responsible for the privacy practices, content, or security policies of third-party external websites. We encourage you to review the privacy policy of any third-party website you visit.

15. Policy Amendments & Supervisory Authority

Estyne International Limited reserves the right to amend or update this Privacy Policy at any time. Notice of material updates will be posted on the Platform prior to taking effect. Continued use of MartCliq following notification constitutes acceptance of the revised terms.

Supervisory Authority: If you believe your data protection rights have been violated under Nigerian law, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Corporate Controller: Estyne International Limited

Registration: CAC Nigeria

Contact & Support Email: support@martcliq.com