Privacy Policy

1Introduction

Welcome to Zerrar ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how Servanda Technologies Ltd., operating as Zerrar, collects, uses, discloses, and safeguards your information when you use our platform and related services (collectively, the "Service").

By accessing or using our Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our Service.

2Contact Information

For any privacy-related questions or concerns, please contact us:

3Information We Collect

We collect information that you provide directly to us and information automatically collected when you use our Service.

3.1 Information You Provide

Account Registration Information:

• Full name
• Email address
• Phone number
• Business name and details
• Physical business address
• Password (encrypted and never stored in plain text)

E-commerce Platform Integration Data:

• Customer names and contact information
• Product catalogs and inventory details
• Order information and transaction details
• Shipping addresses and delivery preferences

3.2 Automatically Collected Information

• IP address and device information
• Browser type and version
• Operating system
• Pages visited and features used
• Time and date of access
• Referring website addresses
• Service performance metrics and error logs

3.3 Information We Do NOT Collect or Store

4How We Use Your Information

We use the collected information for the following purposes:

5Legal Basis for Processing (GDPR)

For users in the EU or other GDPR-applicable jurisdictions, we process personal data on the following grounds:

6Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We share it only in the following circumstances:

6.1 Service Providers and Partners

6.2 Legal Requirements

We may disclose your information if required by law — court orders, subpoenas, government or regulatory requests, or law enforcement investigations.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity. We will notify you before your data becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

7Data Storage and Security

7.1 Data Storage Location

Your data is primarily stored and processed through secure servers operated by our cloud infrastructure providers (Hetzner, Cloudflare). All providers comply with applicable data protection regulations.

7.2 Data Retention

• Account Information: Retained while active and for 90 days after account closure.
• Transaction Records: Retained for 7 years as required by Nigerian tax regulations.
• Analytics Data: Retained in aggregated, anonymised form.
• Message Content: NOT stored — processed in real-time.

7.3 Security Measures

8International Data Transfers

Your information may be transferred to and processed in countries outside Nigeria, including the United States and EU member states, where our service providers operate. When we transfer your information internationally, we ensure appropriate safeguards are in place — including Standard Contractual Clauses approved by the European Commission and other legally recognised transfer mechanisms.

9Your Rights and Choices

Under the NDPR and GDPR (where applicable), you have the following rights:

9.1 Access and Portability

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Data Portability: Request your data in a structured, machine-readable format.

9.2 Correction and Deletion

• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal information, subject to legal retention requirements.

9.3 Processing Restrictions

• Right to Restriction: Request limitation of how we process your data in certain circumstances.
• Right to Object: Object to processing based on legitimate interests or direct marketing.

9.4 Consent Withdrawal

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

9.5 How to Exercise Your Rights

We will respond within 30 days. If additional time is needed, we will notify you and explain the reason.

9.6 Complaint to Regulatory Authority

• Nigeria: National Information Technology Development Agency (NITDA)
• EU/EEA: Your local data protection supervisory authority

10Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. Types of cookies we use:

11Third-Party Services and Links

Our Service integrates with and links to third-party services. These have their own privacy policies, and we are not responsible for their practices.

• Meta/WhatsApp: https://www.whatsapp.com/legal/business-policy
• Paystack: https://paystack.com/terms
• Flutterwave: https://flutterwave.com/privacy-policy
• Monnify: https://monnify.com/privacy-policy

12Children's Privacy

13Changes to This Privacy Policy

When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email (if provided)
• Display a prominent notice on our website and/or within the Service

Your continued use of the Service after such modifications constitutes your acknowledgment and acceptance of the updated Privacy Policy.

14Additional Rights for Specific Jurisdictions

14.1 California Residents (CCPA)

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

14.2 European Economic Area (EEA) Residents

If you are located in the EEA, you have rights under GDPR as described in Section 9 of this policy.

15Data Breach Notification

16Questions and Complaints

Please contact our Privacy Officer:

17Acknowledgment and Consent