Privacy Policy

1. Who we are

Weblanda is operated by Weblake Technologies, Lagos, Nigeria. We are the data controller for information about people who use weblanda.com. You can reach us about anything on this page at support@weblanda.com.

We handle personal data in line with the Nigeria Data Protection Act 2023.

2. If you run a shop on Weblanda

We collect:

• Your identity — the name, email address and profile picture your Google account gives us when you sign in. We never see or store your Google password.
• Your business details — shop name, description, logo, address, WhatsApp number and anything else you enter in settings.
• Your bank details — bank, account number and the account name Paystack confirms. These are sent to Paystack to create your payout account. We store the account number and bank so your dashboard can show you where money is going.
• Billing records — which plan you are on, when you paid, and Paystack's reference for each payment. We never see or store your card details.
• Usage data — server logs including IP address, pages requested and errors, kept so we can keep the service working and investigate abuse.

3. If you buy from a shop on Weblanda

You do not need an account to buy. When you place an order we collect your name, email address, phone number, delivery address, what you ordered and what you paid.

Who controls that information matters. The shop you bought from decides what happens with your order details — they are the controller. Weblanda stores and processes it on their behalf so their shop can function. If you want your details corrected or removed, contact the shop first; write to us if you cannot reach them.

If you subscribe to a shop's newsletter, that shop holds your email address for that purpose and can export it. If you leave a review, the name you give and what you write are shown publicly on the product page once the shop approves it. Your email address is used only to check that you actually bought the item, and is never shown to anyone.

If you start checking out and do not finish, the email address you entered is saved along with what was in your basket, so the shop can send you one reminder. You are told this next to the field where you type it. It is one email and never more; if you buy, the reminder is cancelled. These records are deleted automatically after 60 days, and we do not store your IP address, your device or any tracking identifier alongside them. To be left out entirely, do not enter your email until you are ready to pay, or ask the shop to delete the record.

4. Why we hold it

• To create and run your shop, and to show it to your customers.
• To take payments and pass them to the right bank account.
• To calculate delivery prices and book shipments.
• To let you sign in and keep your account secure.
• To answer support requests.
• To meet our legal, tax and anti-fraud obligations.

Our lawful bases are performance of a contract with you, our legitimate interest in running and protecting the service (which is what covers a single reminder about a basket you left behind), your consent where you gave it (for example a newsletter signup), and compliance with legal obligations.

5. Who else sees your data

We do not sell personal data and we do not share it for anyone else's advertising. We use these companies to run Weblanda, and they only receive what they need:

• Supabase — database, file storage and sign-in.
• Vercel — hosting and server logs.
• Google — sign-in only, when you choose to use it.
• Paystack — payments, subscriptions and payouts.
• Shipbubble and the courier you select — the recipient's name, phone number and delivery address, so a parcel can be collected and delivered. Only for orders using courier delivery.

Some of these process data outside Nigeria. Where that happens we rely on the safeguards in their own agreements and on the transfer conditions in the Nigeria Data Protection Act.

We may also disclose data where the law requires it, or to protect our rights, our users or the public from harm or fraud.

6. Cookies and what is stored in your browser

We keep this deliberately small:

• Sign-in cookies, set by Supabase, which keep you logged in. Necessary; the dashboard cannot work without them.
• Your shopping cart, stored in your own browser's local storage, separately for each shop. It never leaves your device until you check out.

We do not use advertising or third-party tracking cookies.

Counting shop visits

We count how many people visit each shop, so the seller can tell whether anyone is finding it. This is done by us, on our own servers, and no third party is involved.

It sets no cookie and stores nothing that identifies you. When you open a shop page we record the shop, the page, the date, and the website you arrived from if there was one. To avoid counting the same person twice in a day we also store a one-way code made from your IP address and browser, mixed with a secret that changes every night.Your IP address and browser details are never saved — only that code, which cannot be turned back into either, is different for every shop, and is meaningless the next day. It cannot be used to recognise you tomorrow or to follow you between shops.

7. How long we keep it

• Shop and account data — while your account is open. If you close it, we delete or anonymise your data within 90 days, except where we must keep records longer.
• Order and payment records — kept for at least 6 years to meet Nigerian tax and accounting requirements, even after an account closes.
• Server logs — a short rolling window, typically days.

8. Your rights

Under the Nigeria Data Protection Act 2023 you can ask us to:

• show you the personal data we hold about you
• correct anything wrong
• delete it, where we are not required to keep it
• stop or limit a particular use of it
• give you a copy in a portable form
• object to processing we do on the basis of our legitimate interests
• withdraw consent you previously gave, at any time

Write to support@weblanda.com and we will respond within 30 days. If you are unhappy with our answer, you can complain to the Nigeria Data Protection Commission.

9. Security

Data is encrypted in transit. Access to the production database is restricted, and shops are separated at the database level so one seller cannot read another's orders or customers. Card details never reach our servers; they are entered on Paystack's own payment page.

No system is perfectly secure. If a breach ever affects your personal data, we will notify you and the Nigeria Data Protection Commission as the law requires.

10. Children

Weblanda is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will remove it.

11. Changes to this policy

We will update this page when our practices change, and the date at the top will change with it. If a change materially affects you, we will tell you directly rather than relying on you noticing.

12. Contact

Weblake Technologies
Lagos, Nigeria
support@weblanda.com