Privacy Notice

1. Controller and scope

This Notice describes personal-data processing by Maestro Hq Limited in connection with enta. It applies to visitors, buyers, sellers, suppliers and authorised administrators.

2. Data we process

• Account and authentication information supplied through the authentication service.
• Seller and supplier business, contact and settlement information.
• Buyer name, email, phone, delivery address and order information.
• Product, store, transaction, payment-status, settlement, delivery and fulfilment records.
• Buyer protection evidence, reports, returns, refunds, reviews, feedback and support communications.
• Security, device, browser, server and operational logs, plus analytics where enabled.

3. Why we process data

• To create accounts and operate storefronts, catalogue access, checkout, orders and fulfilment.
• To process and reconcile payments, refunds and settlement records.
• To prevent fraud, protect marketplace participants, handle disputes and enforce platform rules.
• To send service and transactional communications.
• To secure, maintain, measure and improve enta.
• To comply with applicable legal, regulatory, accounting, payment-provider and lawful-request obligations.

4. Legal bases

Depending on the context, processing may be necessary to perform a contract or take requested pre-contract steps, comply with legal obligations, pursue legitimate interests such as fraud prevention and service security, or rely on consent where required.

5. Service providers and recipients

Current service-provider categories include authentication, hosting, database infrastructure, payment processing, transactional email, analytics and persistent product/evidence media hosting where configured.

We may share limited order data with the seller, relevant supplier or fulfiller, professional advisers, regulators, law-enforcement bodies or other recipients where lawful and necessary.

6. International processing

Some technology providers may process data outside Nigeria. Where cross-border transfers occur, enta will use a lawful transfer basis and safeguards required by applicable Nigerian data-protection law.

7. Retention and security

We keep personal data only as long as reasonably necessary for the purpose collected, contractual needs, dispute handling, fraud prevention, accounting, legal retention or establishment and defence of claims. Security controls include role-based access, authentication, audit records and restricted operational access.

8. Your rights

Subject to applicable law, you may have rights to information, access, correction, deletion, restriction, objection, portability and complaint. Contact the privacy address shown in Operator Details to exercise a right.