Privacy Policy

1. Two kinds of people

Store owners and their team: we are the one deciding how your account information is used (the "controller").

Shoppers who order from a store: the store owner decides why their details are collected. We process that information on the owner's behalf to run the store (we are the "processor"). If you are a shopper and want to see, correct or delete your details, please ask the shop first. You can also email us and we will pass your request on.

2. What we collect

From store owners and team members:

• name, email address and password (stored securely; we never see your password in plain text)
• store details: store name, address, logo, colours, delivery areas, products, prices and photos
• plan and billing status; your payment-account keys, which we store encrypted
• technical records such as sign-in times and actions taken in the admin area, for security and support

3. Shopper information

When a shopper places an order, the store receives and we store: name, phone number, delivery address, email address if given, what was ordered and the order's payment status. We do not see or store card numbers. Card payments are handled by the payment provider the store connects (for example Paystack).

4. Why we use it

We use information to create and run your store, process orders, send emails (for example order confirmations and trial reminders), keep the service secure, give support, and improve Stallbloom. We do not sell personal information. We do not run advertising on your customers.

5. Who else handles data for us

We use trusted providers to run Stallbloom. They only get the information they need to do their job:

• Supabase: our database and sign-in service
• Vercel: hosting and delivery of the website
• Resend: sending emails
• Paystack (or the payment provider a store connects): card payments, under that provider's own terms

6. Where data is kept

Our providers may store and process information outside Nigeria. Where information is transferred, we rely on providers that apply appropriate safeguards, as the law requires.

7. Cookies

We use only the small files needed to keep you signed in and to make the site work, for example when you use your admin area or cart. We do not use advertising cookies.

8. How long we keep it

We keep store data while the store exists. If a store is paused or closed we keep its data so it can be restored. When a store owner asks us to delete the store, we delete its data within a reasonable time, except records we must keep by law (for example billing records).

9. Security

We protect information with access controls that keep each store's data separate, encryption in transit, and encryption of payment keys. No system is perfectly secure. If a breach affects personal information, we will notify the people and authorities the law requires, as quickly as we can.

10. Your rights

Under Nigerian data protection law you can ask to see the information we hold about you, correct it, ask us to delete it, restrict or object to some uses, and receive a copy. You may also complain to the Nigeria Data Protection Commission. To use a right, email us at the address below.

11. Children

Stallbloom is for businesses and is not meant for children under 18. We do not knowingly collect information from children to open accounts.

12. Changes and contact

We will post changes here and update the date at the top. Questions or requests: hello@stallbloom.com.