🔒 NDPA / NDPR Compliant • Last Revised: October 2026

Privacy Policy

Your privacy is paramount. This Privacy Policy details how zlik collects, uses, protects, and handles personal data from merchants, shoppers, and visitors.

1. Privacy Overview & NDPA Compliance

zlik (“we”, “our”, or “us”) provides e-commerce storefront technology, catalog management, order processing, and customer communication tools for independent merchants.

We are dedicated to safeguarding your personal data in full compliance with the Nigeria Data Protection Act (NDPA 2023) and the Nigeria Data Protection Regulation (NDPR), as well as international data protection principles.

2. Information We Collect

We collect information across two categories of users:

A. Merchant Account Information
  • Identity & Contact: Full name, store name, phone/WhatsApp number, email address, password hash.
  • Banking Details: Bank Name, Account Number, Account Name (stored strictly to display payment instructions to your customers on checkout).
  • Marketing Credentials: Meta Pixel ID, Google Tag ID, TikTok Pixel ID (optionally provided by the merchant).
  • Store Data: Products, photos, prices, descriptions, discount coupons, sales ledger, and debt records.
B. Customer & Storefront Shopper Information
  • Order Placement: Customer name, phone number, delivery address, notes, selected delivery/pickup preferences.
  • Real-Time Chat: Messages exchanged with the store merchant via the built-in live chat.
  • Device & Analytics: IP address, device type, browser user agent, referring URL, and page timestamps (for anonymous store visitor metrics).

3. How We Use Your Information

We use collected information solely for legitimate operational and business purposes, including:

  • Generating and hosting your customized storefront URL (e.g. zlik.store/yourbrand).
  • Routing orders, receipts, and order tracking links (/order/:ref) to buyers and sellers.
  • Facilitating real-time audio and visual order notifications and chat between merchants and buyers.
  • Enabling merchants to view daily revenue analytics, visitor charts, and ledger exports.
  • Preventing spam, fraudulent orders, automated bot scraping, and security attacks.

4. Sharing & Disclosures

🛡️ We never sell, rent, or trade your personal data to third-party data brokers or advertisers.

We only share data with trusted service providers strictly necessary to operate the platform:

  • Payment Gateways (e.g., Paystack): For processing subscription payments securely.
  • Transactional Email & SMS Providers: For delivering order receipts, verification codes, and alerts.
  • Law Enforcement & Regulatory Authorities: When strictly required by Nigerian law or court order.

5. Cookies & Tracking Pixels

Platform Cookies: We use secure, HTTP-only session cookies to authenticate merchant logins and preserve shopping cart items across storefront visits.

Merchant Advertising Pixels: If a merchant adds Meta Pixel, Google Tag, or TikTok Pixel IDs to their store settings, those scripts are executed on their storefront to track ad conversions. Those tracking tools are subject to the privacy policies of Meta, Google, and ByteDance respectively.

6. Data Security & Encryption

We implement industry-grade technical and organizational security measures:

  • Encryption in Transit: All web traffic is encrypted via 256-bit TLS/SSL (HTTPS).
  • Password Protection: Passwords are cryptographically salted and hashed using modern algorithms.
  • High-Speed WAL Database: Data is persisted in transactional databases with automated daily snapshots and restricted administrative access.

7. Data Retention & Account Deletion

We retain merchant and transaction data for as long as your store remains active. If you choose to delete your store or close your account, your products, settings, and personal identifiers will be permanently removed or anonymized within 30 days, except where retention is legally mandated for tax and accounting records.

8. Your Rights Under Nigerian Law

Under the NDPA 2023 and NDPR, you possess the right to:

Right to Access Request a copy of the personal data we hold about you.
Right to Rectification Update or correct any inaccurate details in your merchant settings.
Right to Erasure Request the deletion of your account and personal information.
Data Portability Export your customer orders and sales history via CSV at any time.

9. Third-Party Links & Merchant Disclaimers

When customers interact with independent merchant stores hosted on zlik, the merchant acts as an independent data controller for the customer details collected to fulfill physical orders. Merchants are responsible for treating customer data respectfully in accordance with applicable privacy laws.

10. Data Protection Officer (DPO) Contact

To exercise your privacy rights or file an inquiry regarding your data, please contact our Data Protection Officer:

Data Protection Officer: privacy@zlik.store
General Support: support@zlik.store
Platform: zlik (Selling, Made Slick)
Jurisdiction: Federal Republic of Nigeria