Privacy Policy

Last updated: 4 November 2026

This policy explains how Zero6ix Limited ("we"), operator of Web Purchase, collects, uses and protects your personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and related regulations.

Data we collect

Account data: name, email, phone number, address, organisation details.
Verification data: government ID and, for organisations, registration documents, only when required.
Order data: requests, product links, quotes, payment references, shipping details, messages and uploaded files.
Service credentials: only if you choose to share them for an order; stored encrypted (AES-256-GCM).
Messages you send us via our contact form, email, phone or WhatsApp.
Technical data: IP address, device and log data used for security and fraud prevention.

We do not collect or store your card details. These are handled by our PCI-DSS compliant payment providers.

How we use your data

To provide our services: review requests, issue quotes, process payments, pay vendors and deliver items (contract).
To verify identity and prevent fraud, money laundering and abuse (legal obligation & legitimate interest).
To send service notifications by email, WhatsApp and in-app (contract). You can opt out of optional messages at any time by contacting us.
To keep financial records as required by law.

Sharing

We share data only as needed with: payment providers (Paystack, Flutterwave), vendors you ask us to pay, couriers and customs agents, our hosting, email and messaging providers (e.g. Supabase, Vercel, Resend, Meta WhatsApp), and authorities where required by law. We never sell your data.

International transfers

Some providers process data outside Nigeria. We rely on appropriate safeguards as required by the NDPA.

Retention

Order and payment records are kept for at least 6 years for tax and regulatory purposes. Shared credentials can be deleted by you at any time after order completion and are purged by us when no longer needed. KYC documents are kept for as long as required by law.

Security

Encryption in transit (HTTPS) and at rest, role-based access with two-factor authentication for staff, row-level security in our database, rate limiting and a full audit log of staff actions.

Your rights

You may request access to, correction of, or deletion of your data, object to processing, or request portability, subject to legal retention requirements. Contact hello@webpurchase.app. You may also complain to the Nigeria Data Protection Commission (NDPC).

Contact us

Zero6ix Limited, 28 Chief Charles Street, off Peace Drive, Trans Amadi, Port Harcourt, Rivers State, Nigeria. Email: hello@webpurchase.app · Phone: +234 803 617 7408.

Cookies

We use essential cookies to keep you signed in and remember preferences such as dark mode. We do not use advertising cookies.