Privacy policy

MARYBEN STORE

8 Johnson Street, Ilupeju, Off Coker Road, Lagos  ·  08034346785  ·  marybenstore.com.ng

Privacy Policy

Last updated: March 2026

This Privacy Policy is prepared in compliance with the Nigeria Data Protection Act (NDPA) 2023 and the General Application and Implementation Directive (GAID) issued by the Nigeria Data Protection Commission (NDPC) on 20 March 2025, which took effect on 19 September 2025. This is the current governing framework for data protection in Nigeria, superseding the previous NDPR 2019.

1. Who We Are

Maryben Store is a retail supplies business operating a physical store and an online store at marybenstore.com.ng. We sell stationery, school supplies, office materials, party items, and gifts, serving customers across Lagos State, Nigeria.

As the Data Controller, Maryben Store determines the purposes and means by which your personal data is collected and processed. We are committed to handling your data responsibly, transparently, and in accordance with Nigerian law.

2. What Personal Data We Collect

When you visit our website, place an order, or contact us, we may collect the following categories of personal data:

Identity and contact information

• Full name

• Phone number (including WhatsApp number)

• Email address

• Delivery address within Lagos State

Order and transaction information

• Products ordered, quantities, and prices

• Order history and purchase records

• Payment confirmation details (we do not store card numbers — see Section 5)

Technical and usage data

• IP address and browser type

• Pages visited on marybenstore.com.ng and time spent

• Device type (mobile, tablet, desktop)

• Referring website or search term that brought you to our store

Communications data

• WhatsApp messages and calls made to 08034346785

• Emails sent to us regarding orders or enquiries

• Any feedback, complaints, or reviews you submit

We collect only the minimum personal data necessary to process your order and provide our services. We do not collect sensitive personal data such as health information, political opinions, or biometric data.

3. How We Use Your Personal Data

We process your personal data only for specific, legitimate, and lawful purposes as required by the NDPA 2023. The table below sets out each purpose and the legal basis we rely on:

4. Who We Share Your Data With

We do not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share your data only where necessary to deliver our services, and only with the following categories of trusted parties:

Shopify Inc.

Our online store is built on Shopify's platform. Shopify processes your data to power the store, checkout, and order management. Shopify is bound by its own privacy policy and data processing agreements. You can view Shopify's privacy policy at shopify.com/legal/privacy.

Paystack (a Stripe company)

Paystack processes all payments made on our store. When you pay, your payment details are submitted directly to Paystack and are not stored by Maryben Store. Paystack is PCI-DSS compliant and operates under its own privacy policy at paystack.com/privacy.

Delivery partners

We share your name, phone number, and delivery address with our dispatch riders or courier partners to enable delivery of your order. These partners are engaged under confidentiality obligations and may not use your data for any other purpose.

Legal and regulatory authorities

We may disclose your data to law enforcement, regulatory bodies, or courts where required to do so by Nigerian law, court order, or in connection with legal proceedings.

We do not share your data with advertisers, data brokers, or any third party for profiling or targeting purposes.

5. Payment Data & Security

All payments on marybenstore.com.ng are processed by Paystack. Maryben Store does not collect, store, or have access to your card number, CVV, PIN, or any sensitive payment credentials. When you enter payment details at checkout, that information is transmitted directly and securely to Paystack using industry-standard SSL/TLS encryption.

Paystack is certified to the Payment Card Industry Data Security Standard (PCI-DSS), ensuring your payment information is handled to the highest security standards.

6. How Long We Keep Your Data

We retain your personal data only for as long as is necessary for the purposes set out in this policy, or as required by Nigerian law:

• Order and transaction records: 6 years from the date of the order (required for tax and business records under Nigerian law)

• Customer contact and communication records: 2 years from last contact

• Marketing opt-in records: Until you withdraw consent or unsubscribe

• Website usage and technical data: 12 months from collection

After the applicable retention period, your data is securely deleted or anonymised so that it can no longer be linked to you.

7. Your Rights Under the NDPA 2023

As a data subject under the Nigeria Data Protection Act 2023, you have the following rights in relation to your personal data held by Maryben Store:

Right to access

You have the right to request a copy of the personal data we hold about you, free of charge. We will respond within 30 days of your request.

Right to rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.

Right to erasure

You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where we have no legal basis to retain it. Note that we may be required to retain certain data for legal or regulatory reasons even after such a request.

Right to object

You have the right to object to our processing of your personal data where we rely on legitimate interest as our legal basis. You may also object to receiving direct marketing communications at any time.

Right to withdraw consent

Where we process your data based on your consent (e.g. marketing emails), you may withdraw that consent at any time by contacting us or clicking the unsubscribe link in any email. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal.

How to exercise your rights

To exercise any of the above rights, contact us via:

• WhatsApp: 08034346785

• In person: 8 Johnson Street, Ilupeju, Off Coker Road, Lagos

We will respond to all requests within 30 days. We may need to verify your identity before processing your request.

8. Cookies & Website Tracking

Our website (marybenstore.com.ng, powered by Shopify) uses cookies and similar technologies to improve your browsing experience and help us understand how customers use the site.

What cookies we use

• Essential cookies: Required for the store to function — shopping cart, checkout session, login state

• Analytics cookies: Used by Shopify to understand traffic, page views, and how customers navigate the store (data is anonymised and aggregated)

• Marketing cookies: Used by Meta Pixel (Facebook/Instagram) to measure the effectiveness of our ads, if you have interacted with a Maryben Store advert

You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of our store.

9. Children’s Privacy

Maryben Store sells products that are suitable for children (such as school stationery and art supplies), but our online store and its data collection processes are directed at adults. We do not knowingly collect personal data from anyone under the age of 18 without verifiable parental consent, in line with the NDPA 2023’s strengthened protections for children.

If you believe we have inadvertently collected data from a minor, please contact us immediately at 08034346785 and we will delete the information promptly.

10. NDPC Registration

Under the NDPA 2023 and the NDPC Guidance Notice of February 2024, a business that processes the personal data of more than 200 individuals within a six-month period is classified as a Data Controller or Processor of Major Importance (DCPMI) and is required to register with the Nigeria Data Protection Commission (NDPC).

Maryben Store will register with the NDPC upon reaching the 200-customer threshold as required by law. As a growing business, we are actively monitoring our compliance obligations and will update this policy to reflect our registration status.

11. How We Protect Your Data

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, disclosure, or destruction:

• Our Shopify store uses HTTPS encryption on all pages

• Payment processing is handled entirely by Paystack (PCI-DSS certified) — we never see or store card details

• Access to customer order data on Shopify is restricted to authorised store administrators only

• WhatsApp communications are end-to-end encrypted

• We do not store customer data in unsecured spreadsheets or unprotected files

In the event of a data breach that is likely to affect your rights, we will notify you and the NDPC as required under the NDPA 2023.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, or legal obligations. When we make material changes, we will:

• Update the ‘Last updated’ date at the top of this policy

• Post a notice on our website or send an email to registered customers where the change is significant

Your continued use of marybenstore.com.ng after any update constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

13. Contact Us & How to Complain

If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise your data rights, please contact us:

• WhatsApp / Phone: 08034346785 (Monday – Saturday, 9am – 6pm)

• In person: 8 Johnson Street, Ilupeju, Off Coker Road, Lagos

• Website: marybenstore.com.ng

If you are not satisfied with our response to any data protection concern, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC):

• Website: ndpc.gov.ng

• Address: No. 1 Zuma Close, Off Solomon Lar Way, Asokoro, Abuja

We take all data protection complaints seriously and will work to resolve any concerns promptly and transparently.

© 2026 Maryben Store, Ilupeju Lagos. This policy complies with the Nigeria Data Protection Act (NDPA) 2023 and GAID 2025.