Last Updated: July 18, 2026
This Privacy Policy explains how Fondz ("Fondz", "we", "us", or "our") collects, uses, discloses, stores, and protects personal data when you access or use the Fondz website, mobile applications, and related services (collectively, the "Platform"), whether as a Customer, a Vendor, or a visitor. It is published in accordance with the Nigeria Data Protection Act, 2023 ("NDPA") and applicable regulations issued by the Nigeria Data Protection Commission ("NDPC").
This Policy should be read together with our Terms of Service. By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how we handle your personal data as described here, you should not use the Platform.
This Policy applies to Personal Data collected through the Platform, including during account registration, Vendor onboarding, checkout, customer support interactions, and general browsing. For data shared with a Vendor in order to fulfil an Order, the Vendor acts as an independent Data Controller in respect of that data once received, and this Policy does not govern how a Vendor handles Personal Data it collects through its own separate channels, outside the Platform. Section 7 below sets out the obligations Vendors agree to when handling Customer data received through Fondz.
We collect the following categories of Personal Data:
We use Personal Data to: create and manage your account; process and fulfil Orders and Vendor payouts; facilitate payments through our licensed payment partners; provide customer support; verify identity and prevent fraud; comply with legal, tax, and regulatory obligations; communicate Order updates and service notices; and, where you have consented, send marketing communications and personalize your experience on the Platform.
In accordance with the NDPA, we process your Personal Data only where we have a valid legal basis to do so, including: your consent; where processing is necessary to perform a contract with you (such as fulfilling an Order); where processing is necessary to comply with a legal obligation (such as tax or anti-money-laundering requirements); or where processing is necessary for our legitimate interests (such as fraud prevention or improving the Platform), provided this does not override your rights and interests.
We disclose Personal Data only as reasonably necessary, including to:
We do not sell your Personal Data to third parties for their own independent marketing purposes.
Vendors who receive Customer Personal Data through the Platform to fulfil an Order agree to: use that data solely for fulfilling the Order and providing related customer service; refrain from using it for unsolicited marketing; avoid retaining it for longer than necessary to complete the transaction and meet any legal obligations; implement reasonable security measures to protect it; and refrain from disclosing it to any third party without authorization. A Vendor's failure to comply with this section is a breach of our Terms of Service and may result in suspension or removal from the Platform.
We use cookies and similar tracking technologies to keep you signed in, remember your preferences, understand how the Platform is used, and, where you consent, deliver relevant advertising. You can manage or disable cookies through your browser settings; doing so may affect the functionality of certain features on the Platform.
We apply reasonable technical and organizational measures to protect Personal Data, including encryption of data in transit, restricted internal access on a need-to-know basis, and periodic review of our security practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly of any suspected unauthorized access.
Where we or our service providers store or process Personal Data outside Nigeria (such as on cloud infrastructure), we ensure that such transfers are carried out in accordance with the cross-border data transfer requirements of the NDPA, including by relying on an adequacy determination, appropriate contractual safeguards, or your consent, so that your Personal Data continues to receive an adequate level of protection.
We retain Personal Data only for as long as is reasonably necessary to fulfil the purposes described in this Policy, or as required to comply with our legal, tax, and regulatory obligations under Nigerian law. Once Personal Data is no longer needed for these purposes, we securely delete or anonymize it.
Subject to the conditions and exceptions set out in the NDPA, you have the right to:
You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data protection rights have been violated.
To exercise any of these rights, contact us using the details in Section 18. We will respond within the timeframe required by the NDPA.
The Platform is not directed at, and is not intended for use by, individuals under the age of 18, consistent with the eligibility requirements in our Terms of Service. We do not knowingly collect Personal Data from minors. If we become aware that we have inadvertently collected data from a minor, we will take reasonable steps to delete it promptly.
Where you have given consent, we may send you promotional emails, SMS, or push notifications about Products, offers, or features that may interest you. You can opt out at any time using the unsubscribe link in our emails or through your account settings. Transactional and service-related messages, such as Order confirmations or security alerts, are not optional, as they are necessary for the proper functioning of the Platform.
The Platform may contain links to third-party websites or services that are not operated by Fondz, including Vendor social media pages or external payment confirmation pages. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing them with any Personal Data.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission and, where required, affected individuals, in accordance with the timelines and procedures set out in the NDPA, and take reasonable steps to investigate and mitigate the impact of the breach.
We may update this Policy from time to time to reflect changes in our practices, services, or legal and regulatory requirements. Where changes are material, we will provide reasonable notice, such as a notification on the Platform or via email, before the changes take effect. Your continued use of the Platform after such changes take effect constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your Personal Data, please contact us via email at hi@fondz.ng.