Privacy Policy

Last updated: 24 September 2025 · Effective: 24 September 2025

This Privacy Policy explains how BrakeMarket ("we", "us", "our") collects, uses, stores, and protects personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR). We are the data controller for the personal data described below.

1. Personal Data We Collect

• Identity & Contact: name, email address, phone number, delivery address.
• Transaction Data: products purchased, order value, payment status. We do not store card numbers.
• Technical Data: IP address, browser type, device information, pages visited.
• Communication Data: messages sent to us via email, WhatsApp, or the contact form.

2. Lawful Basis for Processing

Under Section 25 of the NDPA, we process your data on the following bases:

• Performance of a contract — to process and deliver your order.
• Consent — for marketing communications (you may withdraw at any time).
• Legal obligation — to comply with tax, accounting, and consumer-protection laws.
• Legitimate interests — to prevent fraud, secure our website, and improve our services.

3. How We Use Your Data

• Process and fulfil orders.
• Communicate about your order, delivery, and support requests.
• Send promotional messages (only with your consent).
• Detect and prevent fraud or misuse.
• Comply with Nigerian legal and regulatory requirements.

4. Data Sharing

We share data only with:

• Payment processors to complete transactions.
• Delivery partners to ship your order.
• Service providers who host our website and email systems, under strict data-processing agreements.
• Law enforcement or regulators where required by Nigerian law.

We never sell your personal data.

5. Data Retention

We keep personal data only as long as necessary for the purpose it was collected, and to meet legal obligations. Transaction records are kept for at least 6 years as required by Nigerian tax law.

6. Your Rights

Under the NDPA you have the right to:

• Be informed about how your data is used.
• Access your personal data.
• Request correction of inaccurate data.
• Request deletion of data no longer needed.
• Object to processing based on legitimate interests.
• Withdraw consent for marketing at any time.

To exercise any right, email support@brakepadmarket.com. We respond within 30 days.

7. Security

We use encryption, access controls, and secure servers to protect your data. No system is completely secure, but we take reasonable steps to prevent unauthorised access.

8. Cookies

We use cookies to keep your cart working and to analyse site traffic. You can disable cookies in your browser, though some features may stop working.

9. Changes to This Policy

We may update this policy. The latest version will always be on this page with a new "Last updated" date.

10. Complaints

If you are unhappy with how we handle your data, contact us first. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC):

• Website: ndpc.gov.ng
• Email: info@ndpc.gov.ng

Contact