Privacy Policy

Privacy Policy

This Privacy Policy for oroaje.com explains how we collect, use, and protect information within our multi-vendor marketplace. By using our platform, you agree to these practices.

1. Information We Collect
We collect data to facilitate transactions between buyers and vendors and to improve your experience.
Account Information: Name, email, and phone number provided during registration.
Transaction Details: Delivery addresses and order history required for order fulfillment.
Vendor Data: Business credentials and payout information for sellers.
Technical Data: IP addresses, browser types, and cookies to monitor site performance.

2. How We Share Your Data
As a multi-vendor platform, data sharing is necessary to complete your orders.

With Vendors: We share your name, delivery address, and phone number with the specific vendor you purchased from so they can ship your item.
Service Providers: We share data with trusted payment gateways (e.g., Stripe, PayPal) and shipping partners.
Legal Compliance: We may disclose information if required by law to comply with government or financial regulations.

3. Data Security and Retention
We prioritize the safety of your information through industry-standard measures.

Encryption: All transactions are secured using HTTPS (SSL/TLS) to protect sensitive data during transmission.
No Payment Storage: We do not store full credit card details; these are handled directly by PCI-compliant payment processors.
Retention: Data is kept only as long as necessary for its original purpose or to meet legal obligations.

4. Your Rights
Depending on your location (such as under GDPR), you have specific rights regarding your data:

Access & Correction: You can request a copy of your data or update inaccurate information.
Deletion: You may request the removal of your personal data ("Right to be Forgotten").
Opt-out: You can withdraw consent for marketing emails at any time via the "unsubscribe" link.

5. Cookies
We use cookies to remember your login, track shopping cart items, and analyze site traffic. You can manage cookie preferences through your browser settings.

Vendor Data Protection Standards

1. Purpose Limitation
Authorized Use Only: Vendors may only use customer personal data (name, address, phone number) for the sole purpose of fulfilling the specific order placed on Oro Aje.
No Secondary Marketing: Vendors are strictly prohibited from adding customers to their own mailing lists, newsletters, or sending unsolicited marketing materials without the customer’s separate, explicit consent.

2. Data Security & Retention
Confidentiality: Vendors must treat all customer data as strictly confidential and implement "reasonable security procedures" (e.g., password-protected devices, encrypted storage) to prevent unauthorized access.
Deletion Requirement: Once an order is fulfilled and the return/warranty period has expired, vendors must securely delete or destroy the customer's personal information from their local records.

3. Reporting & Compliance
Breach Notification: If a vendor experiences a security breach where Oro Aje customer data is compromised, they must notify Oro Aje management without undue delay (ideally within 24–48 hours).
Legal Compliance: Vendors must comply with all local and international data laws relevant to their location and the customer's location (such as the Nigeria Data Protection Act or GDPR if shipping to the EU).

4. Prohibited Actions
No Data Selling: Vendors shall not sell, rent, or trade customer data to any third party under any circumstances.
No Third-Party Access: Vendors may not share customer data with sub-processors or shipping partners who do not meet the same data protection standards.

5. Enforcement
Audit Rights: Oro Aje reserves the right to audit a vendor’s data handling practices to ensure compliance with these terms.
Termination: Any breach of these data handling terms is grounds for immediate suspension or permanent removal from the Oro Aje platform.

Vendor On boarding Checklist

This Vendor Onboarding Checklist for oroaje.com ensures all sellers are legally verified, financially set up, and committed to your Vendor Data Protection Standards.

Phase 1: Legal & Business Verification
Before a vendor can list products, they must provide proof of their legal existence in Nigeria.
Business Registration: Copy of Corporate Affairs Commission (CAC) Certificate of Incorporation or Business Name Registration.
Tax Documentation: Valid Tax Identification Number (TIN) and VAT registration certificate (where applicable).
Identity Proof: Clear copy of a government-issued ID (NIN, Driver’s License, or International Passport) for the primary business owner.
Regulatory Permits: For specific categories (e.g., food, cosmetics), proof of NAFDAC or SON certification.

Phase 2: Financial Setup
To ensure secure and accurate payouts, collect the following:
Corporate Bank Details: Account name must strictly match the CAC registered business name.
Bank Reference: A stamped bank reference letter or a recent statement confirming the NUBAN number.
Payout Schedule Agreement: Written acknowledgement of the marketplace’s payout cycles (e.g., weekly or bi-monthly).

Phase 3: Privacy & Security Commitment
This section directly integrates the data handling terms discussed previously.
Agreement to Data Standards: Digital signature on the Vendor Data Protection Standards, specifically acknowledging the "No Secondary Marketing" rule.
Privacy Training Acknowledgement: Confirmation that the vendor has read the platform's guide on handling customer PII (Personally Identifiable Information).
Security Self-Assessment: A brief declaration that the vendor uses password-protected devices to access the Oro Aje portal.

Phase 4: Storefront & Operational Readiness
Return & Refund Policy: Vendor must upload a policy that meets or exceeds Oro Aje’s minimum customer protection standards.
Logistics Plan: Confirmation of whether the vendor will use Oro Aje’s shipping partners or their own verified courier.
Product Listing Audit: Initial upload of at least 5 products for quality and description review by the admin team.

Phase 5: Final Approval & Go-Live
Admin Review: Final verification of all uploaded documents against the CAC database.
Activation Email: System-generated "Welcome" email providing login credentials to the Vendor Dashboard.

Contact Us
For questions or to exercise your privacy rights, please contact us:

Email: helpdesk@oroaje.com
Website: https.www.oroaje.com
Last Updated: [04/14/2026]