Privacy Policy

Last updated: June 21, 2026

Overview

Oshop Ltd. (“Oshop247”, “we”, “us”) provides a commerce platform for businesses to sell online and in-store. This Privacy Policy explains how we handle personal data when you visit oshop247.com, sign up as a merchant, use our admin tools, or interact with a store powered by Oshop247.

We also publish a Cookie Policy and Security Policy. Subscription billing is described in our Billing Policy.

Who this policy applies to

• Merchants — business owners and staff who create and manage stores on Oshop247
• Store customers — people who browse or buy from a merchant’s Oshop247 storefront
• Website visitors — people who visit our marketing site, blog, or signup pages
• Partners & affiliates — people who participate in referral or partner programmes

Each merchant is the data controller for their own customers’ order and marketing data. Oshop247 acts as a data processor on the merchant’s behalf for store operations, and as a controller for platform account, billing, and security data.

Data we collect

Depending on how you use Oshop247, we may collect:

• Account & business information — name, email, phone, business name, address, country, tax details, store slug
• Billing information — subscription plan, invoices, payment status (card data is handled by Paystack, Flutterwave, or Stripe — we do not store full card numbers)
• Store & transaction data — products, orders, inventory, POS sessions, customers, staff roles, and related records you enter in admin
• Customer checkout data — names, delivery addresses, contact details, and order history submitted on merchant storefronts
• Technical & usage data — IP address, browser type, device information, log files, and feature usage for security and product improvement
• Communications — support tickets, contact form messages, email preferences, and notification history
• Marketing & analytics — cookie identifiers and campaign attribution where you consent or where permitted (see our Cookie Policy)

How we use personal data

We use personal data to:

• Provide, operate, and improve the Oshop247 platform and storefronts
• Create and manage merchant accounts, staff access, and subscriptions
• Process payments, invoices, renewals, and billing support
• Send transactional messages (receipts, security alerts, trial reminders, service notices)
• Provide customer support and respond to enquiries
• Detect fraud, abuse, and security incidents
• Comply with legal, tax, and regulatory obligations
• Send product updates or marketing where you have opted in (you can opt out anytime)

Legal bases (where applicable)

For users in Nigeria, we process data in line with the Nigeria Data Protection Regulation (NDPR). For other regions, we rely on appropriate bases such as:

• Contract — to deliver the service you signed up for
• Legitimate interests — security, fraud prevention, and product improvement
• Legal obligation — tax, accounting, and regulatory requirements
• Consent — optional marketing cookies and certain communications

Sharing & third-party processors

We do not sell your personal data. We share data only as needed to run the service:

• Payment processors — Paystack, Flutterwave, Stripe
• Cloud infrastructure & email — hosting, backups, transactional email delivery
• Analytics & support tools — when enabled (e.g. Google Analytics, Intercom) as described in our Cookie Policy
• Professional advisers — lawyers, accountants, or auditors under confidentiality
• Authorities — when required by law or to protect rights and safety

Merchants may also integrate third-party services (shipping, accounting, etc.) — those integrations are governed by the merchant’s relationship with the provider.

How long we keep data

We retain data for as long as your account is active or as needed to provide the service. After cancellation:

• Account data is generally retained for up to 30 days to allow export and reactivation, then deleted or anonymised unless law requires longer retention
• Billing and tax records may be kept for the period required by Nigerian or applicable tax law
• Security logs may be retained for a limited period for incident investigation

Security

We use encryption in transit, tenant data isolation, access controls, and monitoring to protect personal data. See our Security Policy for more detail.

Your rights

Depending on your location, you may have the right to:

• Access a copy of your personal data
• Correct inaccurate information
• Request deletion (subject to legal retention requirements)
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based

Store customers: contact the merchant you purchased from first — they control your order data. Merchants & website users: email us or use the contact form below.

You may also submit a formal data request via our privacy tools:

• CCPA notice (California)
• UK data rights
• Do not sell or share (US)

International transfers

Oshop247 is operated from Nigeria. If you access the service from other countries, your data may be processed in Nigeria or in countries where our infrastructure and payment partners operate. We take steps to ensure appropriate safeguards where required by applicable law.

Children’s privacy

Oshop247 is a business platform not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may be communicated by email or in-app notice.

Contact us