Privacy Policy

Storich ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our grocery delivery platform, in compliance with the Nigeria Data Protection Regulation (NDPR) 2019.

By creating an account or placing an order on Storich, you agree to the practices described in this Policy.

1. Information We Collect

Information you provide directly:

• Full name and email address (at account creation)
• Phone number (for delivery coordination)
• Delivery address and GPS location (to confirm delivery zone coverage)
• Order details and payment method (processed securely by Paystack)
• Messages sent to our customer support team
• Messages or voice inputs sent to our AI Shopping Assistant

Information collected automatically:

• Device type, browser, and operating system
• Pages visited and features used within the app
• IP address and approximate location
• Session identifiers and cookies necessary for the app to function

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, including dispatching a delivery agent to your address
• Send you a 4-digit delivery OTP via email so your order can be confirmed at the door
• Send order confirmations, status updates, and delivery notifications
• Respond to your questions and resolve disputes
• Improve our product catalogue, pricing, and delivery operations
• Detect and prevent fraud, unauthorized access, or abuse
• Comply with applicable Nigerian laws and tax obligations
• Send you promotional messages and offers — only with your explicit consent, and you may opt out at any time

3. How We Share Your Information

We do not sell your personal data. We share it only with:

• Paystack: to securely process payments. Your card details are never stored on our servers.
• Delivery personnel: your name, phone number, and delivery address are shared with the assigned delivery agent to complete your order.
• Supabase: our cloud database and authentication provider, where your account and order data are securely stored.
• Firebase (Google): to send push notifications to your device when enabled.
• Law enforcement or regulatory authorities: when required by applicable Nigerian law or a valid court order.

All third-party service providers are contractually required to handle your data in accordance with applicable data protection laws.

4. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations:

• Account information: retained while your account is active, and for 12 months after deletion in case of disputes
• Order and payment records: retained for 7 years to comply with Nigerian tax and financial regulations
• AI Assistant conversation history: retained for 2 hours, then automatically deleted
• Marketing preferences: retained until you withdraw consent

5. Your Rights Under the NDPR

As a data subject under the Nigeria Data Protection Regulation, you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: ask us to correct inaccurate or incomplete information
• Deletion: request that we delete your personal data, subject to legal retention requirements
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing for marketing purposes at any time
• Complaint: lodge a complaint with the National Information Technology Development Agency (NITDA)

To exercise any of these rights, contact us at hello@storich.shop. We will respond within 14 days.

6. Data Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, role-based access controls, and regular security reviews. However, no system is entirely risk-free. We encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access to your account.

7. Children's Privacy

Storich is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

8. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you by email or an in-app notice. Your continued use of Storich after any change constitutes your acceptance of the updated Policy.

9. Contact Us

For privacy-related enquiries or to exercise your rights, contact our Data Protection Officer: