Controller: VeendHQ Inc, support@veendhq.com. This policy explains how we handle your personal data under the Nigeria Data Protection Act (NDPA).
1. What we collect. Contact details (name, email, phone, delivery and billing address); order details (the phones you buy, order number); device details for fulfillment and warranty (IMEI); limited technical and usage data (IP, browser, pages viewed) via cookies and analytics; and, if you opt in, a browser push subscription. Payment and financing details are handled by Veend, not stored by us.
2. Why we use it and our lawful basis. To take and fulfill your order and provide support (performance of a contract); to verify and ship your phone, including IMEI and sanctions checks (legal obligation and legitimate interest); to send order and delivery updates (contract); to send marketing and review requests where you have not opted out (consent or legitimate interest, with opt-out); to improve the site and prevent fraud (legitimate interest); and to meet legal, tax, and customs duties (legal obligation).
3. Who we share it with. Veend (payment and financing), our logistics partner (delivery), Trustpilot (review invitations, sent by blind copy on the testimonial email), email and analytics providers, and authorities where the law requires. We do not sell your personal data.
4. International transfer. We operate from the United States, so your data may be processed outside Nigeria. We rely on appropriate safeguards and your consent where required, consistent with the NDPA.
5. Cookies. See our Cookie Notice. Analytics cookies fire only after you accept them.
6. Retention. We keep your data only as long as needed for orders, warranty, support, and legal, tax, and accounting requirements.
7. Your rights. You can ask to access, correct, delete, or port your data, object to or restrict processing, and withdraw marketing consent at any time. Email support@veendhq.com. You can also complain to the Nigeria Data Protection Commission (NDPC).
8. Security. We use reasonable technical and organizational measures, including HTTPS. No method is perfectly secure.
9. Children. The site is not intended for children under 18.
10. Changes. We may update this policy and will post the new version here.