Privacy Policy

Oakmonte Multiglobal Limited ("Oakmonte", "we", "us") runs the Oakmonte marketplace. We are the data controller for the personal data described in this policy, under the Nigeria Data Protection Act 2023 (NDPA).

For anything about your data, including requests to our data protection contact, email contact@oakmonte.store.

Information you give us

• Account details: email address, display name, username (handle), date of birth, account type, and, if you choose to give them, gender and a profile photo. If you sign in with Google, we receive your name, email address and profile photo from Google.
• Store details (sellers): brand name, logo, store locations and addresses, storefront design choices, and your product listings, prices and stock.
• Payout details (sellers): bank name, account number and account name. Account numbers are encrypted before we store them.
• Content: photos, videos, captions and the products you link to your posts.
• Messages: messages you send to other members and to Oakmonte Support. Message text is encrypted before we store it.
• Orders (once checkout opens): delivery address, phone number, the items you buy or sell, and order history.
• Connected accounts: if you import products from Instagram or Shopify, we store an access token for that account (encrypted) and the product details we import.

Information collected when you use Oakmonte

• Activity: what you post, like, follow, save and view, used to run your feed and recommendations.
• Technical data: IP address, browser and device type, and server logs, used to keep the service working and secure.
• Settings stored on your device: preferences such as whether you have seen a tip, kept in your browser's storage.

Camera, microphone and location

• The camera and microphone are used only while you are using Oakmonte's camera. Recording, filters and editing happen on your device. Only what you choose to post is uploaded.
• Your device's location is only read if you tap "use my current location" when adding a store location. We never track your location in the background.

Payment cards: card payments are handled by Paystack. We never see or store your full card details.

The NDPA requires a lawful basis for each use of your data. Ours are:

• To provide Oakmonte (contract): running your account, storefront, posts, messages, orders, payments, payouts and deliveries.
• To keep Oakmonte safe (legitimate interests): preventing fraud, fake accounts, fake reviews and abuse; securing the service; and enforcing our Terms.
• To improve Oakmonte (legitimate interests): personalising your feed and recommendations, and understanding which features work.
• To meet legal duties (legal obligation): tax, accounting, consumer protection and responding to lawful requests from authorities.
• With your consent: push notifications, marketing messages and reading your device's location. You can withdraw consent at any time, and doing so does not affect anything done before.

We do not sell your personal data, and we do not show third-party advertising based on it.

Other users. Your profile, storefront, posts and listings are public. When you order, the seller receives your name, delivery address and phone number so they can deliver it.

Service providers who process data for us, under contracts that require them to protect it and use it only for the services they provide:

• Supabase — database, sign-in and file storage.
• Vercel — website and app hosting.
• Bunny.net — storage and delivery of photos and videos.
• Paystack — payments, payouts and bank account verification.
• Shipbubble — delivery quotes and shipping (receives delivery details for orders).
• Google — sign-in, if you choose "Continue with Google".
• Instagram (Meta) and Shopify — only if you connect them to import products.

Authorities and legal claims. We share data where the law requires it, or where needed to protect people's safety or rights, or to establish or defend legal claims.

Business transfer. If Oakmonte is merged or sold, your data may pass to the new owner, who must protect it under this policy.

Some of our service providers store or process data outside Nigeria, including in the European Union and the United States. Where data leaves Nigeria, we rely on the safeguards the NDPA allows, such as contracts requiring an adequate level of protection. You can ask us for more detail at contact@oakmonte.store.

Oakmonte uses only the cookies and browser storage needed to keep you signed in, keep the service secure and remember your settings. We do not use advertising cookies or third-party analytics trackers. If we ever add them, we will update this policy and ask for your consent first where the law requires it.

• Oakmonte is not for children under 13, and they must not create an account.
• Users aged 13 to 17 may only use Oakmonte with the permission of a parent or guardian. You must be 16 or over to buy, and 18 or over to sell or receive payouts.
• If you believe a child under 13, or a minor without a parent's or guardian's permission, has given us personal data, contact contact@oakmonte.store and we will delete it.

We keep your data for as long as your account is open. When you delete your account, we delete or anonymise your personal data within 30 days, except:

• records of orders, payments and payouts, which we keep for 6 years after the transaction to meet Nigerian tax and accounting rules;
• data needed for an ongoing dispute, investigation or legal claim, kept until it is resolved;
• copies in backups, which are overwritten within 90 days.

Under the NDPA you have the right to:

• be told how your data is used (this policy);
• get a copy of your personal data;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use your data;
• receive your data in a portable format;
• withdraw consent at any time where we rely on it;
• not be subject to decisions made solely by automated processing that significantly affect you.

You can edit most of your details in the app and delete your account in Settings. For anything else, email contact@oakmonte.store. We will respond within 30 days and may need to confirm your identity first.

If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Nigeria Data Protection Commission (NDPC).

Data is encrypted in transit. Messages, payout account numbers and connected-account tokens are additionally encrypted before they are stored. Access to personal data inside Oakmonte is limited to what each part of the service needs.

No system is perfectly secure. If a data breach is likely to put your rights at risk, we will notify the NDPC and, where required, you, as the NDPA requires.

We will update this policy when our practices change. For important changes we will tell you in the app or by email before they take effect. The date at the top shows when it was last updated.

Oakmonte Multiglobal Limited, Nigeria. Email: contact@oakmonte.store.