Privacy Policy
Your privacy is critical to us. This policy outlines how Kego collects, stores, protects, and processes your personal data across our marketplace and services.
1. Introduction
Kego Limited ("Kego", "we", "us") is committed to protecting your personal data and privacy. This Privacy Policy explains our practices regarding data collection, use, and disclosure in compliance with the Nigeria Data Protection Act (NDPA), NDPR, and applicable international privacy standards.
2. Information We Collect
2.1 Identity & Contact Data: Name, email address, phone number, encrypted password, Transaction PIN hash, and profile avatar.
2.2 Authentication & OAuth Data: Login timestamps, Two-Factor Authentication records, and Google Sign-In metadata (Google email, name, and verified status).
2.3 Vendor KYC Data: Business registration numbers (CAC), valid government-issued ID documents, utility bills (proof of address), tax IDs, and verified payout bank details.
2.4 Order & Shipping Data: Abuja delivery addresses, recipient contact numbers, order items, and dispatch tracking history.
2.5 Financial Data: Digital wallet balances, transaction logs, and payment references. Note: Payment card numbers and CVV are processed directly by our PCI-DSS certified gateway partners (e.g., Paystack); Kego never stores raw card details on its servers.
3. How We Use Your Data
- Fulfillment & Escrow: To process marketplace orders, secure payments in escrow, coordinate dispatch couriers, and disburse vendor payouts.
- Security & Authentication: To protect accounts with Two-Factor Authentication, prevent synthetic accounts, verify Transaction PINs, and deter fraud.
- Regulatory Compliance: To conduct mandatory Anti-Money Laundering (AML) and Know-Your-Customer (KYC) verifications.
- Customer Support: To investigate dispute claims, coordinate replacements, and resolve delivery inquiries.
4. Sharing & Disclosure
We do not sell your personal data. We share information only with trusted parties essential to our marketplace operations:
- Fulfilling Vendors: Vendors receive the recipient name, delivery address, and contact number solely to facilitate order fulfillment.
- 3PL Dispatch Partners: Certified couriers receive delivery details to complete doorstep delivery.
- Payment Processors: Regulated payment gateways (e.g., Paystack) to process card charges, transfers, and wallet payouts.
- Legal Authorities: When required by subpoenas, court orders, or law enforcement investigations.
5. Cookies & Tracking Technologies
We use secure HTTPOnly cookies (such as buyer_access_token and csrftoken) to authenticate users, protect against Cross-Site Request Forgery, and maintain active shopping sessions. These cookies are essential for secure platform operation.
6. Your Data Rights & Account Deletion
Under the NDPA, you have the right to request access to your data, correct inaccurate details, request account deletion (subject to mandatory tax and financial retention laws), or opt out of promotional marketing. You can delete your account directly inside the Kego mobile app or visit our dedicated Account Deletion Page. To submit a deletion request via email, contact our Data Protection Officer at privacy@kegoshop.com.