1. Privacy Overview & NDPA Compliance
zlik (“we”, “our”, or “us”) provides e-commerce storefront technology, catalog management, order processing, and customer communication tools for independent merchants.
We are dedicated to safeguarding your personal data in full compliance with the Nigeria Data Protection Act (NDPA 2023) and the Nigeria Data Protection Regulation (NDPR), as well as international data protection principles.
2. Information We Collect
We collect information across two categories of users:
- Identity & Contact: Full name, store name, phone/WhatsApp number, email address, password hash.
- Banking Details: Bank Name, Account Number, Account Name (stored strictly to display payment instructions to your customers on checkout).
- Marketing Credentials: Meta Pixel ID, Google Tag ID, TikTok Pixel ID (optionally provided by the merchant).
- Store Data: Products, photos, prices, descriptions, discount coupons, sales ledger, and debt records.
- Order Placement: Customer name, phone number, delivery address, notes, selected delivery/pickup preferences.
- Real-Time Chat: Messages exchanged with the store merchant via the built-in live chat.
- Device & Analytics: IP address, device type, browser user agent, referring URL, and page timestamps (for anonymous store visitor metrics).
3. How We Use Your Information
We use collected information solely for legitimate operational and business purposes, including:
- Generating and hosting your customized storefront URL (e.g.
zlik.store/yourbrand). - Routing orders, receipts, and order tracking links (
/order/:ref) to buyers and sellers. - Facilitating real-time audio and visual order notifications and chat between merchants and buyers.
- Enabling merchants to view daily revenue analytics, visitor charts, and ledger exports.
- Preventing spam, fraudulent orders, automated bot scraping, and security attacks.
6. Data Security & Encryption
We implement industry-grade technical and organizational security measures:
- Encryption in Transit: All web traffic is encrypted via 256-bit TLS/SSL (HTTPS).
- Password Protection: Passwords are cryptographically salted and hashed using modern algorithms.
- High-Speed WAL Database: Data is persisted in transactional databases with automated daily snapshots and restricted administrative access.
7. Data Retention & Account Deletion
We retain merchant and transaction data for as long as your store remains active. If you choose to delete your store or close your account, your products, settings, and personal identifiers will be permanently removed or anonymized within 30 days, except where retention is legally mandated for tax and accounting records.
8. Your Rights Under Nigerian Law
Under the NDPA 2023 and NDPR, you possess the right to:
9. Third-Party Links & Merchant Disclaimers
When customers interact with independent merchant stores hosted on zlik, the merchant acts as an independent data controller for the customer details collected to fulfill physical orders. Merchants are responsible for treating customer data respectfully in accordance with applicable privacy laws.
10. Data Protection Officer (DPO) Contact
To exercise your privacy rights or file an inquiry regarding your data, please contact our Data Protection Officer: