Privacy Policy

1. About this Notice

This Privacy Policy explains how Bidoro Technologies Limited (trading as Bidoro) ("Bidoro," "we," "us," or "our") collects and processes personal data when you use www.bidoro.africa, our mobile experiences, and related services (the "Platform"). It also explains how we protect that data and your rights under Nigerian data protection law, as administered by the Nigeria Data Protection Commission (NDPC).

By using Bidoro, you acknowledge this Policy. Where we need your consent, we will ask for it clearly.

2. Who We Are

• Organisation: Bidoro Technologies Limited (trading as Bidoro)
• Address: Lagos, Nigeria
• Privacy: privacy@bidoro.africa
• Support: support@bidoro.africa
• Compliance: compliance@bidoro.africa

Bidoro is the data controller for personal data collected through the Platform. We work with service providers (for example, payments, identity checks, hosting, and delivery). They process data on our instructions or, in limited cases, as independent controllers. We do not publish their names on this page. You may request a current list of providers by emailing privacy@bidoro.africa.

3. The Data We Collect About You

Personal data is information that identifies you, or could identify you, directly or indirectly.

Information you provide to us

• Contact details: name, delivery or residential address, phone / WhatsApp, email
• Account details: profile information and authentication data
• Seller and business details: store information, typed address, state, LGA, and proof of address (for example a utility bill, bank statement, or receipt — we may read the address from that document)
• Identity documents and numbers required to sell: government ID images, NIN, BVN
• Political-affiliation / politically exposed person answers, where we ask during seller verification
• Listings, messages, reviews, dispute evidence, and support messages
• Payment details needed to complete a transaction (processed with our licensed payment partner)

Information we collect automatically or generate

• Device and browser information, IP address, and approximate location derived from IP
• How you use the Platform (pages viewed, searches, listings, orders)
• Cookies and similar technologies (see our Cookie Policy)
• Security and fraud-prevention signals

Seller verification (required if you sell)

To become or remain a seller, you must complete verification. This includes:

• NIN check
• BVN, used only to set up a payout wallet with our licensed payment partner
• Government ID upload
• A guided liveness check: we ask for camera access, capture face images or a short video, and confirm you are a real person matching your NIN. This is identity / biometric data. It is required to finish seller onboarding
• Precise device location (latitude, longitude, accuracy, and time). The browser may ask for location permission when you open the seller onboarding page. We use it to reduce fraud and to check it against the address you give. Location access is required for vendors. If you refuse, you may not complete seller verification

Buyers who only browse or buy and never start seller onboarding are not asked to complete the liveness camera check or provide precise GPS location as a condition of using the marketplace.

Information from others

• Identity-check results from our verification partner (NIN confirmation, liveness / face-match outcome, document or address analysis)
• Payment, escrow, and wallet status from our licensed payment partner
• Delivery status from logistics partners
• Public or other lawful sources used to prevent fraud

We do not intentionally collect data from children under 18. If you believe a child has provided personal data, contact us.

4. Cookies and Other Identifiers

We use cookies and similar technologies to operate the Platform, keep it secure, and (where allowed) understand usage. See our Cookie Policy. Camera and location permissions are not cookies; they are described in Section 3.

5. How We Use Your Personal Data

We use personal data to:

• Register and manage your account
• Process and deliver orders, including escrow and payouts
• Verify sellers and reduce fraud (including liveness and location checks)
• Manage customer relationships, complaints, and disputes
• Improve the Platform, products, and services
• Recommend relevant listings, where permitted
• Enable services offered through partners and vendors (payments, delivery, verification)
• Comply with legal obligations
• Detect and prevent fraud and abuse
• Send service messages; send marketing only where you have consented or the law allows, with an unsubscribe option

6. Legal Basis for the Processing of Personal Data

We process personal data only where Nigerian data protection law, as administered by the NDPC, allows it. In line with common marketplace practice (including notices such as Jumia's), our bases are:

• Consent — for example marketing, optional cookies, camera / liveness, and precise geolocation for seller onboarding. You may withdraw consent. If you withdraw consent for liveness or location, we may suspend seller privileges because we cannot run a safe seller account without them
• Performance of a contract — creating your account, processing orders, escrow, payouts, and completing seller onboarding
• Legitimate business interests — understanding how the Platform is used, keeping it secure, and preventing fraud, provided this does not unduly affect your rights
• Compliance with law — KYC / AML, tax, regulatory requests, and other legal duties

7. How We Share Your Personal Data

We share personal data only as needed to run the Platform, and we describe recipients by function rather than by brand name. We may share data:

• To complete a sale — with the other party to the transaction as needed to fulfil the order
• With service providers who work for us — to fulfil orders, deliver packages, analyse usage, process payments and escrow, verify identity (including liveness), store data securely, send communications, and provide customer service
• If the business is sold or reorganised — as part of that transfer, on equivalent privacy terms where practicable
• To detect fraud and abuse — with organisations or authorities where lawful
• When the law requires it — courts, regulators (including the NDPC), or other public authorities

Providers that process data on our behalf must use it only for the specified purpose and in accordance with our instructions, and must protect it in accordance with this Policy and applicable law. We do not sell personal data.

To ask which provider currently supports a given function, email privacy@bidoro.africa.

8. International Transfers

Some service providers may process data outside Nigeria where permitted by law. Where we transfer personal data internationally, we put measures in place so it remains protected to a standard consistent with Nigerian data protection law and NDPC expectations (for example, contractual safeguards and due diligence).

9. Data Retention

We keep personal data only for as long as needed for the purposes in this Policy, including:

• An ongoing customer or seller relationship
• A valid legal basis for the purpose
• Applicable limitation periods for legal claims, accounting, AML, disputes, and fraud

KYC records, ID images, liveness results, and seller geolocation may be retained for the life of the seller account and for any additional period required by law (typically not less than 5 years after the last relevant transaction for which record-keeping is required). When data is no longer needed, we delete or anonymise it where practicable.

10. Data Security

We implement reasonable security measures to help prevent accidental loss, unauthorised access, alteration, or disclosure. Access is limited to people with a business need to know, under a duty of confidentiality. We have procedures for suspected personal data breaches, including notifying you and the NDPC where required by law.

11. Your Legal Rights

Please keep your account details accurate. Subject to Nigerian data protection law as administered by the NDPC, you may request to:

• Access your personal data
• Correct inaccurate data
• Erase data (subject to legal holds and transaction obligations)
• Object to or restrict certain processing
• Receive data in a portable form where that right applies
• Withdraw consent where processing is based on consent
• Unsubscribe from marketing

To exercise these rights, email privacy@bidoro.africa. We may refuse requests that are unfounded or excessive, or that we cannot confirm.

You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

12. Changes

We may update this Policy from time to time. We will post the new version on the Platform and change the “Last updated” date. Material changes may also be sent by email or shown in the product.

13. Contact

Privacy: privacy@bidoro.africa

Support: support@bidoro.africa

Compliance: compliance@bidoro.africa

Address: Lagos, Nigeria