Privacy Policy

This Privacy Policy explains how Oakmonte handles the personal information of everyone who uses the platform — buyers, sellers, and creators. By using Oakmonte, you agree to the practices described here.

We've tried to write this plainly. Where a section refers to a specific rule that hasn't been finalized yet, we've marked it clearly rather than leave it vague.

We collect the following categories of information:

• Account data — name, email, and phone number. These are collected specifically for checkout and review verification, and are not required simply to browse the platform.
• Location data — collected only when you actively use a "use current location" feature. This is opt-in per use. Oakmonte does not track your location passively in the background.
• Delivery information — the shipping address you provide at checkout. It is shared only with the relevant seller and delivery partner, and only for the fulfillment of that order.
• Content uploads — photos, videos, and listings posted by sellers and creators through the platform.
• Payment information — Oakmonte does not store your full card or payment credentials. Payments are handled by[name the payment processor once selected]. We retain only transaction records (amount, date, order reference), not raw payment details.
• Usage data — pages viewed, products browsed, and general interaction with the app, used for recommendations and platform improvement.
• Verification data — information collected during seller and creator vetting. The specific inputs vary depending on the type of account and evolve as our vetting process matures.

• To operate the marketplace — processing orders, running escrow, and connecting buyers to sellers and creators.
• To verify identity at checkout and before reviews, in order to reduce fraud and prevent fake reviews.
• To deliver location-based features when you opt in to them.
• To improve recommendations and the overall shopping experience.
• To communicate order updates and account notices, and — only if you've opted in — marketing messages.

• Sellers receive your delivery information only for orders you place with them — not full access to your account.
• Delivery and logistics partners receive what they need to fulfill shipping for a specific order.
• Payment processor receives what is required to process the transaction itself.
• Oakmonte does not sell personal data to third parties for advertising purposes. [Confirm this remains true before publishing — disclose any ad-network or third-party analytics data-sharing here if present].
• Legal disclosure — data may be shared where required by law, or where necessary to protect the platform and its users from fraud or abuse.

Oakmonte uses cookies and similar technologies to keep you signed in, remember your preferences, and understand how the platform is used.

Analytics provider: [name the analytics tool in use, e.g. Plausible, Google Analytics, PostHog].

You can opt out of non-essential cookies through[describe the opt-out mechanism — cookie banner, in-app setting, or browser controls]. Essential cookies (those needed for sign-in, checkout, and security) cannot be disabled without breaking core functionality.

• Minimum age to hold an Oakmonte account: [state minimum age — must match the age policy in the Terms of Service].
• If accounts are permitted below 18: [describe the parental involvement or consent process required].
• If Oakmonte becomes aware that it has collected personal data from a user below the stated minimum age, that account and its associated data will be removed. If you believe a minor has provided us data, contact us using the details in Section 13 so we can act on it.

• Account, order, and content data is retained for[state retention period — often tied to Nigerian tax/transaction record requirements] after account closure.
• When you delete your account, your profile is removed and your uploaded content is unpublished. Records tied to completed transactions (order history, payout records, tax records) are retained for the period above, as required for legal and financial compliance.

Under the Nigeria Data Protection Act (NDPA) and comparable frameworks, you generally have the right to:

• Access the personal data Oakmonte holds about you.
• Request correction of information that is inaccurate or out of date.
• Request deletion of your data, subject to legal retention requirements (such as transaction records).
• Withdraw consent for optional data uses like marketing communications or location features.

To exercise any of these rights, email us at[privacy contact email] or use the in-app request flow in your account settings. We aim to respond within a reasonable window and may need to verify your identity before acting on a request.

We protect user data using standard industry practices, including encryption in transit, restricted internal access, and authentication controls on administrative systems. No online service can guarantee absolute security, but we treat the trust placed in the platform as central to how it is built.

Oakmonte does not currently claim any specific external security certification. If that changes, this section will be updated with the specifics.

User data is hosted on[name hosting infrastructure and region — e.g. Supabase EU/US region].

Where personal data is transferred outside of Nigeria, we do so in accordance with the cross-border transfer requirements of the NDPA — including using providers with appropriate safeguards in place.[Confirm and describe the specific transfer basis once finalized].

Oakmonte relies on third-party infrastructure providers to host, build, and operate the platform (including hosting, payment processing, analytics, and communications tools). We select providers with reasonable security and privacy practices, and share only what each provider needs to perform its function.

If you have a question about a specific vendor, reach out via the contact details in Section 13 and we'll respond directly.

We may update this Privacy Policy from time to time. When we do, the updated version will be posted here with a new "last updated" date. For material changes — anything that meaningfully affects your rights or how data is handled — we will notify affected users directly (for example, by email) rather than rely on a silent update.

Questions about this policy, or want to exercise your data rights? Reach us at[privacy contact email].

Data Protection contact: [name the designated DPO or compliance contact role, if any, under NDPA].