OjaBox

Privacy Policy

Last updated: May 2026

At Oja Box, we take your privacy seriously. This policy explains what personal information we collect, how we use it, and your rights regarding your data. We comply with the Nigerian Data Protection Regulation (NDPR).

1. Information We Collect

When you place an order with Oja Box, we collect:

  • Full name
  • Phone number
  • Email address (optional)
  • Delivery address
  • Payment information (processed securely by Paystack — we never store card details)
  • Order history and preferences

2. How We Use Your Information

We use your information to:

  • Process and fulfill your orders
  • Communicate with you about your order status
  • Send delivery updates via WhatsApp or email
  • Resolve complaints and customer service issues
  • Improve our service based on order patterns

We do not use your information for advertising purposes and we do not sell your data to third parties.

3. How We Store Your Information

Your order information is stored securely in Airtable, a cloud-based database platform. Access is restricted to authorised Oja Box team members only.

Payment information is handled entirely by Paystack and is never stored on our servers. Paystack is PCI-DSS compliant and meets international security standards.

4. Who We Share Your Information With

We only share your information with:

  • Paystack — to process your payment securely
  • Our delivery partners — your name, phone, and address only, to fulfill your delivery
  • Our suppliers — order details only, to prepare your items

We do not share your information with any other third parties without your consent.

5. How Long We Keep Your Information

We retain your order information for up to 12 months for record-keeping and customer service purposes. After this period, your personal data is deleted from our systems unless required by law to retain it longer.

6. Your Rights

Under the Nigerian Data Protection Regulation (NDPR), you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Withdraw consent for us to use your information
  • Lodge a complaint with the Nigeria Data Protection Bureau (NDPB)

To exercise any of these rights, contact us via WhatsApp and we will respond within 7 business days.

7. Cookies

Our website uses minimal technical cookies necessary for the site to function. We do not use advertising or tracking cookies. No personal data is collected through cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us via WhatsApp.

Questions about your data?

Reach out to us on WhatsApp and we'll respond within 7 business days.

Chat with us on WhatsApp →