Privacy Policy

1. About This Privacy Policy

This Privacy Policy applies when you visit Kartefy, create an account, purchase a product, request product sourcing, submit a business procurement enquiry, contact our support team, subscribe to communications or otherwise interact with our website and services.

It explains what personal information we may collect, why we process it and the choices and rights available to you.

2. Information We May Collect

Depending on how you interact with Kartefy, we may collect information such as:

• Your full name
• Email address
• Telephone number
• Billing address
• Delivery address
• Account login information
• Order and transaction information
• Products purchased or requested
• Sourcing and procurement requirements
• Uploaded product photographs or files
• Links submitted from Alibaba, 1688, Taobao or other marketplaces
• Messages and communications with our support team
• Returns, refund and complaint information
• Device, browser and website usage information
• IP address and similar technical information
• Cookie and preference information where applicable

3. Information You Provide Directly

We collect information that you voluntarily provide when you:

• Create a customer account
• Place an order
• Complete checkout
• Request a quotation
• Submit a Source a Product request
• Submit a Business Procurement enquiry
• Upload product images or documents
• Contact customer support
• Request a return or refund
• Subscribe to newsletters or marketing communications

4. Information Collected Automatically

When you visit Kartefy, certain technical information may be collected automatically through cookies, server logs and similar technologies.

This may include:

• Your IP address
• Browser type
• Device type
• Operating system
• Pages visited
• Approximate location derived from technical information
• Referring website
• Time spent on pages
• Website interaction and performance information

This information may help us maintain website security, understand how customers use Kartefy and improve website performance and usability.

5. How We Use Your Information

We may process personal information for purposes including:

• Creating and maintaining your customer account
• Processing and managing orders
• Processing payments
• Purchasing products from suppliers
• Providing product sourcing services
• Managing business procurement requests
• Coordinating shipping and delivery
• Providing order and tracking information
• Processing returns, refunds and complaints
• Providing customer support
• Sending transactional emails and order notifications
• Maintaining website security
• Detecting fraud or misuse
• Improving our website and services
• Meeting accounting, tax, regulatory and legal obligations
• Sending marketing communications where permitted

6. Our Basis for Processing Personal Information

Depending on the circumstances, Kartefy may process personal information because it is necessary to perform a transaction or provide a service you have requested.

We may also process information where:

• You have provided consent
• Processing is necessary to perform or enter into a contract
• Processing is necessary to comply with a legal obligation
• Processing is necessary for a legitimate business interest that does not improperly override your rights
• Another lawful basis recognised under applicable law applies

7. Order & Delivery Information

When you place an order, Kartefy collects information required to manage your purchase and delivery.

Your Nigerian delivery address is retained as part of your customer order and may be shared with logistics, freight and final-delivery partners where necessary to deliver your shipment.

Where products are first shipped by a Chinese supplier to Kartefy’s designated Guangzhou logistics warehouse, the supplier may receive the relevant warehouse delivery information rather than your Nigerian residential delivery address where the applicable fulfilment workflow allows this.

8. Payment Information

Payments made through Kartefy may be processed by authorised third-party payment service providers.

Kartefy may receive transaction information such as payment status, transaction reference, amount paid and payment confirmation.

Sensitive card or banking information entered directly into a payment provider’s secure payment interface is generally processed by that provider in accordance with its own privacy and security practices.

9. Source a Product & Procurement Information

When you submit a Source a Product or Business Procurement request, we may collect the product links, photographs, descriptions, specifications, quantities, budget information and contact details necessary to review your request.

Relevant product specifications may be shared with potential suppliers or procurement partners where necessary to obtain quotations, check availability or fulfil an approved request.

We aim to share only information reasonably required for the relevant sourcing activity.

10. When We May Share Personal Information

Kartefy does not sell your personal information to advertisers.

We may share information with trusted third parties where reasonably necessary to operate our business and provide your requested services.

These may include:

• Payment processors
• Hosting and website service providers
• E-commerce technology providers
• Order-management and fulfilment platforms
• Suppliers where necessary for procurement
• China warehouse and consolidation partners
• International freight providers
• Customs or clearance partners
• Nigerian delivery providers
• Email and communications service providers
• Analytics and website-security providers
• Professional advisers where reasonably necessary
• Government or regulatory authorities where legally required

11. International Transfers

Kartefy operates an international sourcing and logistics model involving suppliers and service providers outside Nigeria, including parties located in China.

As a result, certain personal information may be transferred, accessed or processed outside Nigeria where necessary for sourcing, logistics, technology or other legitimate operational purposes.

Where personal information is transferred internationally, Kartefy will take reasonable steps to ensure that the transfer is handled in accordance with applicable data-protection requirements.

12. Cookies & Similar Technologies

Kartefy may use cookies and similar technologies to operate and improve the website.

Cookies may be used for purposes such as:

• Keeping products in your shopping cart
• Maintaining login sessions
• Remembering website preferences
• Supporting website security
• Understanding website traffic
• Analysing website performance
• Supporting marketing functionality where consent or another lawful basis applies

Where cookie controls are available, you can use them to manage optional cookies. You may also adjust cookie settings through your browser.

Disabling essential cookies may prevent some parts of the website from functioning correctly.

13. Marketing Communications

Where permitted, Kartefy may send information about products, sourcing services, promotions, offers or business updates.

Where consent is required, marketing communications will be sent based on that consent.

You can unsubscribe from marketing emails by using the unsubscribe option provided in the communication or by contacting us.

Unsubscribing from promotional communications does not prevent us from sending essential transactional communications relating to your account, payment, sourcing request or order.

14. How Long We Keep Personal Information

Kartefy retains personal information only for as long as reasonably necessary for the purpose for which it was collected or where retention is required for legal, accounting, security, dispute-resolution or regulatory purposes.

Different categories of information may therefore have different retention periods.

When information is no longer reasonably required, we will take appropriate steps to delete, anonymise or securely dispose of it where applicable.

15. How We Protect Your Information

Kartefy uses reasonable technical and organisational safeguards designed to protect personal information against unauthorised access, alteration, misuse, accidental loss, disclosure or destruction.

Measures may include secure website connections, access controls, account authentication, software updates, appropriate hosting security, backups and restrictions on access to customer information.

No online system can guarantee absolute security, but we continuously aim to maintain safeguards appropriate to the nature of the information processed.

16. Your Data Protection Rights

Subject to applicable law and the circumstances of your request, you may have rights relating to your personal information including:

• The right to be informed about how your information is processed
• The right to request access to your personal information
• The right to request correction of inaccurate information
• The right to object to certain processing
• The right to request restriction of processing where applicable
• The right to request deletion or erasure where applicable
• The right to data portability where applicable
• The right to withdraw consent where processing is based on consent
• Rights relating to certain automated decision-making processes
• The right to complain to the appropriate data-protection authority

17. Accessing or Correcting Your Information

You can update certain information through your Kartefy customer account where that functionality is available.

You may also contact us to request access to, correction of, deletion of or another permitted action concerning your personal information.

We may need to verify your identity before completing a privacy request in order to protect your information from unauthorised access.

18. Children

Kartefy is intended primarily for persons capable of entering into valid purchasing transactions.

We do not knowingly seek to collect personal information from children for independent commercial transactions where parental or guardian involvement is legally required.

If you believe personal information relating to a child has been submitted improperly, please contact us so the situation can be reviewed.

19. Third-Party Websites

Kartefy may contain links to third-party websites, marketplaces, payment services or other external platforms.

Those websites operate under their own privacy practices and Kartefy does not control how independent third parties process information that you provide directly to them.

We encourage you to review the privacy information provided by external services before submitting personal information to them.

20. Data Breaches

Kartefy takes security incidents involving personal information seriously.

If we become aware of a personal-data breach, we will assess the incident, take reasonable steps to contain and address it and make any notifications required under applicable data-protection law.

21. Complaints

If you have concerns about the way Kartefy has handled your personal information, please contact us first so that we can investigate the matter.

You may also have the right to lodge a complaint with the Nigeria Data Protection Commission or another competent supervisory authority where applicable.

22. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect changes in our services, technology, operational practices or applicable requirements.

The latest version will be published on this page together with the applicable effective date.