Privacy Policy

Vokka Technologies ("VOKKA", "we", "us", or "our") operates the VOKKA platform at vokka.tech — a marketplace connecting buyers with Nigerian artisans and fashion brands. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our platform.

If you have any questions, you can reach our privacy team at vokka.tech@gmail.com.

2.1 Account Information

When you create an account, we collect your first and last name, email address, phone number, and a hashed (encrypted) password. Brands additionally provide a brand name, category, location, and tagline.

2.2 Body Measurements

To enable custom-fit orders, we collect body measurements you provide (e.g. chest, waist, hips, inseam). These are stored as individual data points linked to your account. You may update or delete your measurements at any time from your dashboard.

2.3 Order & Transaction Data

We collect data about your orders, including items purchased, pricing, delivery address, payment method, and order status. We do not store full bank account or card numbers on our servers.

2.4 Delivery Address

We collect delivery addresses you save to your account for logistics purposes. These include street address, city, state, and a contact phone number.

2.5 Usage Data

We automatically collect certain technical data when you use the Platform, including your IP address, browser type, pages visited, and device identifiers. We use this data to improve the Platform and diagnose technical issues.

2.6 Communications

If you contact us by email or through the Platform, we retain those communications to help resolve issues and improve our service.

We use your personal data to:

• Create and manage your account
• Process and fulfil your orders
• Calculate and display your correct sizing to brands for custom orders
• Coordinate delivery through our rider network
• Send transactional notifications (order confirmations, status updates)
• Respond to your enquiries and support requests
• Detect and prevent fraud, abuse, and security incidents
• Comply with applicable law and our legal obligations

We process your personal data on the following legal bases under the Nigeria Data Protection Act 2023 (NDPA 2023) and applicable law:

• Contract performance — processing necessary to fulfil your orders and provide the Platform
• Consent — where you have given us explicit consent (e.g. marketing emails)
• Legitimate interests — fraud prevention, security, and improving our Platform
• Legal obligation — where processing is required by Nigerian law

Body measurements may constitute health-related or biometric data under Nigerian and international privacy law. We treat this data with heightened care. It is:

• Collected only with your explicit consent
• Shared only with the specific brand fulfilling your order
• Never sold or used for advertising purposes
• Deletable at any time from your account settings

We share your personal data only in the following circumstances:

6.1 With Brands

When you place an order, we share your name, delivery address, and relevant measurements with the brand fulfilling your order. Brands are required to keep your data confidential and use it only for order fulfilment.

6.2 With Riders

Our riders receive your delivery address and contact phone number to complete delivery. They do not receive your full account information, measurements, or payment data.

6.3 Service Providers

We use the following third-party services which may process your data as part of providing the Platform:

• Neon (database hosting) — stores all platform data in PostgreSQL
• Vercel (hosting & CDN) — serves the web application
• Paystack (payments) — processes card and bank payments

Each provider is bound by their own privacy policy and, where applicable, data processing agreements with VOKKA.

6.4 Legal Requirements

We may disclose your data if required to do so by law, court order, or government authority, or to protect the rights, property, or safety of VOKKA, our users, or the public.

We use essential cookies to maintain your login session and protect against cross-site request forgery. We do not use advertising or tracking cookies. If we add analytics in the future, we will update this policy and request your consent where required.

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal, tax, or fraud-prevention purposes (typically up to 7 years for financial transaction records).

Order data is retained for 7 years to comply with Nigerian tax and commercial record-keeping requirements.

Under the NDPA 2023 and applicable law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Deletion — request deletion of your personal data (subject to legal retention obligations)
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdrawal of consent — withdraw consent at any time where processing is consent-based

To exercise any of these rights, email us at vokka.tech@gmail.com. We will respond within 30 days.

We take reasonable technical and organisational measures to protect your data, including password hashing (bcrypt), HTTPS encryption in transit, and access controls limiting who can view personal data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

If we become aware of a data breach affecting your rights and freedoms, we will notify you and the relevant authority as required by law.

The VOKKA Platform is not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us at vokka.tech@gmail.com and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or a prominent notice on the Platform at least 14 days before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.