Privacy Policy

Privacy Policy

Effective Date: August 2026
Last Updated: October 2026

1. Introduction

Welcome to DonaBuy Limited (RC: 9785919) (“DonaBuy,” “we,” “us,” or “our”).

This Privacy Policy explains how DonaBuy Limited collects, uses, stores, protects, and discloses personal information when you visit or use our website, www.donabuy.com (the “Website”), create an account, place an order, make a purchase, contact us, or otherwise interact with our services.

We respect your privacy and are committed to protecting your personal data in accordance with applicable Nigerian data-protection laws, including the Nigeria Data Protection Act, 2023 (NDPA) and applicable regulations and guidance issued by the Nigeria Data Protection Commission (NDPC).

The NDPA requires personal data to be processed fairly, lawfully and transparently, collected for specified legitimate purposes, limited to what is necessary, kept accurate, retained only as long as necessary, and protected against unauthorised access, loss, destruction or unlawful processing.

By using our Website or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

Data Controller: DonaBuy Limited
Website: www.donabuy.com
Country: Nigeria
Email: info@donabuy.com
Telephone: +2348029198320
Business Address: Port Harcourt, Nigeria

DonaBuy Limited is responsible for determining how and why your personal data is processed in connection with our Website and services.

Where we use third-party service providers to process personal data on our behalf, we take reasonable steps to ensure that such providers process personal data in accordance with applicable data-protection requirements.

3. Personal Information We Collect

Depending on how you interact with DonaBuy, we may collect the following categories of information:

A. Information You Provide Directly

This may include:

  • Full name;
  • Email address;
  • Telephone/mobile number;
  • Billing address;
  • Delivery/shipping address;
  • Account username and password;
  • Order and purchase information;
  • Product preferences;
  • Customer-service enquiries;
  • Reviews, feedback and other information you voluntarily provide;

Information provided when you contact us through forms, email, telephone, social media or other communication channels.

B. Payment Information

When you make a purchase, payment information may be processed by our payment service providers.

Depending on the payment method used, this may include payment-card or transaction information.

DonaBuy does not intend to retain complete payment-card details where payment processing is handled directly by a third-party payment provider.

Payment information is subject to the privacy policies and security practices of the relevant payment provider.

C. Automatically Collected Information

When you access our Website, certain technical information may be collected automatically, including:

  • IP address;
  • Browser type and version;
  • Device type;
  • Operating system;
  • Date and time of access;
  • Pages visited;
  • Referring website;
  • General Website usage information;
  • Information collected through cookies and similar technologies.

D. Information from Third Parties

We may receive information from third parties where necessary to provide our services, including payment processors, delivery/logistics providers, technology providers, fraud-prevention services, analytics providers, advertising platforms, and other service providers.

4. How We Use Your Personal Information

We may use personal information for purposes including:

  • Creating and managing your account;
  • Processing and fulfilling orders;
  • Processing payments;
  • Delivering products to you;
  • Communicating with you about your orders;
  • Responding to enquiries, complaints and customer-service requests;
  • Providing and improving our Website and services;
  • Personalising your shopping experience;
  • Sending service-related notifications;
  • Sending marketing communications where permitted by law and, where required, with your consent;
  • Detecting and preventing fraud, abuse and other unlawful activities;
  • Maintaining the security and integrity of our Website;
  • Conducting analytics and understanding Website usage;
  • Maintaining business and financial records;
  • Complying with legal, regulatory, tax and accounting obligations;
  • Establishing, exercising or defending legal claims; and
  • Protecting the rights, property and safety of DonaBuy, our customers and other persons.

We will not use personal data for purposes that are incompatible with the purpose for which it was originally collected unless permitted or required by applicable law.

5. Lawful Bases for Processing

Depending on the circumstances, DonaBuy may process your personal data on one or more of the following lawful bases:

A. Performance of a Contract

We may process information necessary to create your account, process your order, receive payment, arrange delivery and provide services you have requested.

B. Consent

Where required by law, we may ask for your consent before processing certain personal information, including certain direct-marketing communications or optional cookies.

Where processing is based on consent, you may withdraw your consent at any time.

C. Legal Obligation

We may process personal data where necessary to comply with applicable Nigerian laws, regulatory requirements, court orders, tax obligations, accounting requirements or other legal obligations.

D. Legitimate Interests

Where permitted by applicable law, we may process personal data for legitimate business interests, such as improving our services, securing our Website, preventing fraud and managing our business, provided that those interests do not override your applicable privacy rights.

The NDPA recognises lawful bases including consent, contract, legal obligations and legitimate interests, depending on the circumstances of processing.

6. Marketing Communications

We may send you promotional communications about products, services, offers or other information that may be relevant to you where permitted by applicable law.

Where consent is required, we will obtain it before sending such communications.

You may unsubscribe from marketing emails by using the unsubscribe option included in the communication or by contacting us using the details provided in this Privacy Policy.

Please note that even if you opt out of marketing communications, we may continue to send important service-related communications, such as order confirmations, delivery updates, security notifications or changes to our terms and policies.

7. Cookies and Similar Technologies

Our Website may use cookies and similar technologies.

Cookies are small text files placed on your device when you visit a website. They may help us:

  • Keep you signed in;
  • Remember your preferences;
  • Maintain shopping-cart functionality;
  • Understand how visitors use our Website;
  • Improve Website performance;
  • Provide relevant content or advertising;
  • Detect fraudulent or suspicious activity.

We may use different categories of cookies, including:

Essential Cookies

These are necessary for the Website to operate properly and may include cookies required for account, shopping-cart, checkout and security functions.

Preference Cookies

These remember choices you make, such as language or other Website preferences.

Analytics Cookies

These help us understand Website traffic and usage so that we can improve our services.

Advertising/Marketing Cookies

Where used, these may help us measure advertising effectiveness or provide more relevant advertising.

Where applicable, you may manage or disable certain cookies through your browser settings or our cookie-management tools.

Disabling certain cookies may affect the functionality of some parts of the Website.

8. How We Share Personal Information

We do not sell your personal information as a commodity.

However, we may share personal information where necessary to operate our business and provide services to you.

These parties may include:

Payment Service Providers

We may share relevant information with payment providers to process and verify transactions.

Delivery and Logistics Providers

We may provide your name, telephone number, delivery address and other necessary information to delivery or logistics providers so that your order can be delivered.

Technology and Hosting Providers

We may use third-party providers for website hosting, cloud storage, software, cybersecurity, technical support and other technology services.

Analytics and Marketing Providers

Where applicable, we may use analytics and marketing providers to understand Website usage, measure campaigns and improve our services.

Professional Advisers

We may share information with lawyers, accountants, auditors, insurers and other professional advisers where reasonably necessary.

Government and Regulatory Authorities

We may disclose information where required by law, court order, regulatory requirement or lawful government request.

Business Transfers

If DonaBuy undergoes a merger, acquisition, restructuring, sale of assets or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

Where we use third parties to process personal data, we will take reasonable steps to ensure that appropriate contractual, technical and organisational safeguards are in place.

9. International Data Transfers

Some of our service providers or technology platforms may operate outside Nigeria.

Where personal data is transferred outside Nigeria, DonaBuy will take appropriate steps to ensure that the transfer and subsequent processing comply with applicable Nigerian data-protection requirements.

Depending on the circumstances, appropriate safeguards may include contractual protections, adequacy mechanisms or other safeguards recognised under applicable law.

10. Data Security

We take reasonable technical and organisational measures to protect personal data against:

  • Unauthorised access;
  • Unauthorised disclosure;
  • Loss;
  • Misuse;
  • Alteration;
  • Destruction;
  • Fraudulent activity; and
  • Other unlawful or unauthorised processing.

Security measures may include access controls, authentication procedures, encryption where appropriate, secure hosting arrangements, monitoring, staff awareness and other appropriate safeguards.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and should notify us promptly if you believe your account has been accessed without authorisation.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling contractual, legal, accounting, tax, regulatory and dispute-resolution requirements.

The specific retention period will depend on:

  • The nature and purpose of the information;
  • Whether we have an ongoing relationship with you;
  • Applicable legal and regulatory requirements;
  • Accounting and tax obligations;
  • The need to establish or defend legal claims;
  • Security and fraud-prevention requirements.

When personal information is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it in accordance with applicable law.

12. Your Data Protection Rights

Subject to applicable law and any relevant limitations, you may have rights including:

  • The right to be informed about the processing of your personal data;
  • The right to request access to personal data we hold about you;
  • The right to request correction of inaccurate or incomplete information;
  • The right to request deletion or erasure of personal data in appropriate circumstances;
  • The right to object to certain processing;
  • The right to restrict processing in applicable circumstances;
  • The right to withdraw consent where processing is based on consent;
  • The right to data portability where applicable;
  • The right not to be subject to certain decisions based solely on automated processing, where applicable; and
  • The right to lodge a complaint with the relevant supervisory authority.

These rights are reflected in the NDPA framework and the rights published by the Nigeria Data Protection Commission.

Please note that these rights are not absolute and may be subject to legal exceptions or limitations.

13. How to Exercise Your Rights

To exercise your privacy rights or ask questions about how we process your information, please contact us:

DonaBuy Limited
Email: info@donabuy.com
Telephone: +2348029198320
Address: Port Harcourt, Nigeria

To protect your information, we may need to verify your identity before processing certain requests.

We aim to respond to legitimate requests within the period required by applicable law.

14. Data Protection Officer

Where DonaBuy is required to appoint or designate a Data Protection Officer (DPO) or other privacy contact under applicable law, the relevant contact details will be provided below:

Data Protection Officer:
Email:
Telephone:

The DPO/privacy contact may assist with questions, requests, complaints and other matters concerning the processing of personal data.

15. Children’s Privacy

Our Website is not intended to knowingly collect personal information from children where such collection is prohibited by applicable law.

Where the services involve children or minors, we will handle their personal information in accordance with applicable legal requirements and any required parental or guardian consent.

If you believe that a child has provided personal information to us in circumstances where such information should not have been collected, please contact us.

16. Third-Party Websites and Services

Our Website may contain links to third-party websites, applications, social-media platforms or other services.

Those third parties operate under their own privacy policies and terms.

DonaBuy is not responsible for the privacy practices, security or content of third-party websites or services that we do not control.

We encourage you to review the privacy policy of any third-party service before providing your personal information.

17. Social Media

DonaBuy may operate or maintain social-media pages and may provide social-media features on our Website.

Interactions with third-party social-media platforms may be subject to the privacy policies and terms of those platforms.

Information you publicly post on third-party social-media platforms may be accessible to others depending on the privacy settings of the relevant platform.

18. Personal Data Breaches

We maintain procedures intended to detect, assess, manage and respond to personal-data incidents.

Where a personal-data breach occurs, we will take appropriate steps in accordance with applicable law, including assessing the nature and potential impact of the breach and making any notifications that are legally required.

19. Accuracy of Your Information

We take reasonable steps to ensure that personal information we hold is accurate, complete and, where necessary, kept up to date.

You should notify us if any personal information you have provided to us changes or is inaccurate.

You may request correction of inaccurate personal information by contacting us.

20. Your Responsibilities

When using our Website, you should:

  • Provide accurate information;
  • Avoid providing information belonging to another person without appropriate authority;
  • Keep your account credentials confidential;
  • Notify us promptly of suspected unauthorised access;
  • Take reasonable steps to protect your device and account;
  • Ensure that information submitted through the Website is lawful and accurate.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or data-processing practices.

When we make material changes, we may provide an appropriate notice through the Website or other suitable communication channels.

The “Last Updated” date at the top of this Privacy Policy indicates when it was most recently revised.

We encourage you to review this Privacy Policy periodically.

22. Contact Us

If you have questions, concerns, complaints or requests relating to this Privacy Policy or the way DonaBuy processes personal data, please contact us:

DonaBuy Limited
Website: www.donabuy.com
Email: info@donabuy.com
Telephone: +2348029198320
Business Address: Port Harcourt, Nigeria

We will take reasonable steps to investigate and respond to privacy-related complaints and requests.

If you are not satisfied with our response, you may have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or another competent supervisory authority, as applicable. The NDPC is Nigeria’s statutory data-protection regulator and provides mechanisms for data-subject rights and complaints.

23. Governing Law

This Privacy Policy shall be interpreted in accordance with the applicable laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act, 2023, and other applicable Nigerian data-protection laws and regulations.

Nothing in this Privacy Policy is intended to limit any mandatory rights or protections