🔒 Our Commitment
We never sell your personal data to third parties. This policy explains exactly what we collect, why, and your rights.
1. Information we collect
We collect the minimum data necessary to provide our services — account details (name, email, phone), order and payment reference data, and minimal technical signals (IP address, device, browser) used to secure and operate the platform.
We do not intentionally collect data from users under 16 years of age.
2. How we use your data
- To create and manage your account
- To process your orders and deliver products
- To manage and track JT Coins rewards
- To send important service notifications (order updates, security alerts)
- To prevent fraud and enforce our Terms of Service
- To improve the platform and your experience
- To respond to your support requests
- To comply with Nigerian legal obligations
We will never use your data for unsolicited marketing without your consent.
3. Data sharing
We do not sell your data. We share data only with trusted service providers necessary to operate the platform:
- Google Firebase — Authentication and database storage (encrypted)
- Cloudflare Pages — Secure hosting and CDN
- Google Analytics — Anonymous usage statistics only
- Nigerian authorities — Only when required by law
All third-party providers are contractually bound to handle your data with the same level of protection we apply.
4. Your rights (NDPR & GDPR-aligned)
You have the right to access, correct, export, restrict, object to processing, and delete your personal information. To exercise any of these rights, email techjoro@gmail.com with your request. We will respond within 30 days.
5. Security
- SSL/TLS encryption for all data in transit (HTTPS)
- BCrypt password hashing — passwords are never stored in plain text
- Secure Google Firebase authentication infrastructure
- Rate limiting to protect against brute-force attacks
- Regular security reviews and updates
In the event of a data breach that may affect your rights, we will notify you and the relevant authorities within 72 hours as required by law.
6. Data retention
- Account data: anonymised within 30 days of account deletion
- Order history: retained for 7 years for tax and legal compliance
- Usage logs: deleted after 90 days
- Support communications: retained for 2 years
7. Contact
Privacy questions: techjoro@gmail.com.
