Coconut
Legal

Privacy Policy

How we collect, use, and safeguard your information when you use Coconut.

Privacy Policy

Coconut Platforms Limited ("Coconut", "we") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use and share it, how we keep it secure, and your rights as a data subject under the Nigeria Data Protection Act 2023 and other applicable laws.

  1. 1. Information we collect

    We collect the following categories of personal data:

    • Account information — name, email, phone number, business details.
    • Transaction data — orders, payouts, settlement records, payment metadata.
    • Channel data — OAuth tokens, account handles and metadata for connected social and storefront channels.
    • Usage data — IP address, browser, device, referrer, pages visited, interaction events.
    • Customer data on your behalf — contact details and order information for shoppers who buy from your store.

  2. 2. How we use your data

    We use personal data to provide and operate the Service, process transactions, communicate updates, prevent fraud, comply with legal obligations, and improve the platform. Where required, we will obtain your explicit consent before processing.

  3. 3. Sharing & disclosure

    We share data only with:

    • Service providers acting on our instructions (hosting, email, analytics).
    • Carriers and payment partners necessary to fulfil orders and payouts.
    • Authorities when required by law or to protect rights and safety.
    • Acquirers in the event of a merger or acquisition.

    We do not sell your personal data.

  4. 4. International transfers

    Your data may be processed in countries outside your country of residence, including the United States and the European Union. Where this happens, we rely on lawful transfer mechanisms such as Standard Contractual Clauses or equivalent safeguards.

  5. 5. Data retention

    We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law. You may request deletion of your account at any time, subject to retention obligations relating to financial records.

  6. 6. Your rights

    Subject to applicable law, you have the right to:

    • Access the personal data we hold about you.
    • Correct inaccurate or incomplete data.
    • Request erasure of data we no longer have a lawful basis to hold.
    • Object to or restrict certain processing.
    • Withdraw consent where processing is based on consent.
    • Lodge a complaint with the Nigeria Data Protection Commission.

  7. 7. Security

    We implement industry-standard technical and organisational measures including encryption in transit and at rest, role-based access control, logging and monitoring, and regular security reviews. No system is perfectly secure; in the unlikely event of a personal data breach, we will notify affected users and regulators in line with our legal obligations.

  8. 8. Contact

    For any privacy-related questions or to exercise your rights, contact our Data Protection team at privacy@withcoconut.com.

This document is provided for informational purposes only and does not constitute legal advice. For specific concerns, please contact us at legal@withcoconut.com.