Privacy Policy for MBE Resources.

Effective Date: April 2, 2025

At MBE Resources Electronic Store ("MBE Resources," "we," "us," or "our"), a duly incorporated entity under the laws of the Federal Republic of Nigeria with its principal office at [ No 7, Bishop Aboyade Cole Street, Dream Plaza, VI (Victoria Island),Lagos, Nigeria], we are steadfastly committed to safeguarding the privacy and security of your personal data. This Privacy Policy delineates our practices concerning the collection, use, storage, and protection of your personal information, in strict compliance with the Nigeria Data Protection Act (NDPA) 2023 and other applicable legal frameworks. Recognizing Nigeria’s vibrant and youthful population—over 237 million strong, with a median age of 18.1 and a burgeoning urban majority—we tailor our services to meet the diverse needs of our customers, from tech-savvy Gen Zs in Lagos to families across rural communities.

1. Scope and Applicability

This Privacy Policy governs the processing of personal data collected through our e-commerce platform (www.mberesources.com), mobile applications, and physical interactions with MBE Resources Electronic Store. It applies to all data subjects resident in Nigeria, as well as Nigerian citizens abroad, encompassing our diverse clientele across 371 ethnic groups and key linguistic communities (English, Hausa, Yoruba, Igbo).

2. Information We Collect

We collect personal data to enhance your shopping experience and fulfill our contractual obligations. The categories of data include:

  • Personal Identifiers: Name, email address, phone number, and delivery address, voluntarily provided during account creation, order placement, or customer inquiries.
  • Demographic Information: Age, gender, and location, reflecting Nigeria’s youthful demographic (42.54% aged 0-14) and urban growth (54.86%), to personalize offerings.
  • Transaction Details: Payment information (e.g., bank card details processed via secure third-party gateways), purchase history, and order preferences.
  • Interaction Data: Feedback, reviews, and customer service communications, ensuring responsiveness to our diverse populace.

We do not collect sensitive data beyond what is necessary for our services, and explicit consent is sought where required under the NDPA.

3. Legal Basis for Processing

Our processing of your personal data is grounded in lawful bases as stipulated by the NDPA:

  • Consent: Where you explicitly agree (e.g., for marketing communications).
  • Contractual Necessity: To fulfill orders and deliver electronics to your doorstep.
  • Legitimate Interest: To improve our services and secure our platform, balanced against your rights.
  • Legal Obligation: To comply with Nigerian tax, consumer protection, and data protection laws.

4. How We Use Your Data

Your personal data is processed with utmost diligence to:

  • Process and deliver your orders efficiently across Nigeria’s 36 states and FCT.
  • Provide personalized recommendations, resonating with the preferences of our youthful, tech-savvy audience.
  • Communicate order updates, promotions, and support via SMS, email, or WhatsApp, in languages like English, Hausa, Yoruba, or Igbo where applicable.
  • Enhance platform functionality and security, critical in a nation with 261 people per km² density.
  • Comply with regulatory mandates, including audits by the Nigeria Data Protection Commission (NDPC).

5. Data Sharing and Third-Party Disclosure

We engage trusted third parties to facilitate our operations, ensuring stringent safeguards:

  • Service Providers: Logistics firms (e.g., for deliveries to urban hubs like Abuja or rural areas), payment processors (e.g., Flutterwave, Paystack), and cloud storage providers, all bound by NDPA-compliant agreements.
  • Intra-Company Transfers: Data may be shared within MBE Resources affiliates, adhering to binding corporate rules.
  • Legal Requirements: Disclosure to authorities only when mandated by Nigerian law, such as under the Cybercrimes Act 2015.
  • No Marketing Sales: Your data is never sold to third parties for their direct marketing purposes.

For cross-border transfers (e.g., to international suppliers), we ensure adequacy of protection per NDPA Section 42, leveraging standard contractual clauses approved by the NDPC.

6. Data Retention

We retain your personal data only as long as necessary:

  • Transaction records: 7 years, per Nigerian tax laws.
  • Account information: Until you request deletion or account closure, subject to legal obligations.
  • Technical logs: 12 months, unless required for security investigations.

Post-retention, data is securely anonymized or destroyed using industry-standard methods.

7. Your Rights Under NDPA

As a data subject in Nigeria, you are endowed with robust rights:

  • Access: Request a copy of your data in electronic format.
  • Rectification: Correct inaccurate or incomplete information.
  • Erasure: Demand deletion where no longer necessary, subject to legal exceptions.
  • Restriction: Limit processing under specific conditions.
  • Objection: Oppose processing for marketing or profiling.
  • Portability: Transfer your data to another provider.
  • Consent Withdrawal: Revoke consent at any time, without affecting prior lawful processing.

To exercise these rights, contact our Data Protection Officer (DPO) at [support@mberesources.com.ng] or [+234 812 254 6876]. We shall respond within 30 days, as mandated by NDPA.

8. Security Measures

We deploy state-of-the-art safeguards to protect your data, vital in Nigeria’s evolving digital landscape:

  • Encryption of payment and personal data in transit and at rest.
  • Regular security audits and penetration testing.
  • Access controls limiting data to authorized personnel only.
  • Compliance with NDPA’s 7 Shields Protection principles (e.g., fire, voltage, corrosion resistance).

Despite our best efforts, no system is impervious; we commit to prompt breach notification per NDPA Section 40.

9. Cookies and Tracking

We utilize cookies to enhance your experience on our platform:

  • Essential Cookies: Enable core functionality (e.g., cart management).
  • Analytics Cookies: Track usage trends, anonymized to respect Nigeria’s privacy ethos.
  • Marketing Cookies: Deliver tailored ads, with opt-in consent.

You may manage cookie preferences via our website settings, reflecting your autonomy as a Nigerian consumer.

10. Children’s Privacy

Aligned with NDPA Section 31, we do not knowingly collect data from children under 13 without verifiable parental consent. Our platform targets Nigeria’s working-age majority (54.66% aged 15-64), and child-friendly privacy notices are provided where applicable.

11. International Data Transfers

Given Nigeria’s global trade ties, data may be transferred to countries like the USA or China for supply chain purposes. We ensure such transfers comply with NDPA adequacy requirements or are governed by NDPC-approved contracts, protecting your rights abroad.

12. Updates to This Policy

We may amend this Privacy Policy to reflect legal, operational, or demographic shifts in Nigeria (e.g., population growth to 400 million by 2050). Updates will be posted on our website with a revised effective date, and significant changes will be communicated via email or SMS.

13. Contact Us

For inquiries, complaints, or rights requests, reach us at:

  • Email: [support@mberesources.com]
  • Phone: [+234 812 254 6876]
  • Address: [ No 7, Bishop Aboyade Cole Street, Dream Plaza, VI (Victoria Island),Lagos, Nigeria]

14. Governing Law

This Privacy Policy is governed by the laws of the Federal Republic of Nigeria, with disputes subject to the exclusive jurisdiction of Nigerian courts.