Privacy Policy

Last updated: 14 August 2026

What we collect

• Account details — your name, email address and a hashed password. We never store your password in readable form.
• Order details — delivery address, phone number and what you bought, so the item can reach you.
• Payment records — a reference, amount and status from Flutterwave. Card numbers never touch our servers.
• Assistant conversations — messages you send to Ada, in order to answer them.
• Local browser storage — your cart, saved items and theme preference are kept in your own browser, not on our servers.

Why we collect it

To create your account, process orders, arrange delivery, prevent fraud, answer support questions and improve how matching works. We do not sell your personal data.

Who we share it with

• Sellers — the delivery details needed to fulfil your order, and nothing more.
• Flutterwave — to take payment securely.
• Service providers — hosting and AI providers that process requests on our behalf under contract.
• Authorities — where we are legally required to.

The AI assistant

Messages you send to Ada are forwarded to our AI provider to generate a reply, along with a list of current listings. Do not share card details, passwords or other sensitive personal information in the chat.

How long we keep it

Order and payment records are retained for as long as required for tax and accounting purposes. Account data is kept until you ask us to delete it.

Who controls your data

Rex Leonem LLC is the data controller for the information described on this page. That means we decide what is collected and why, and we are the ones you hold responsible for it. Our details are at the end of this page.

Your rights

Under the Nigeria Data Protection Act 2023 you have the right to:

• Access — ask for a copy of the personal data we hold about you.
• Correction — have anything inaccurate put right.
• Deletion — ask us to erase your data, except where we must keep it (an order record is needed for tax and dispute purposes).
• Objection — tell us to stop a particular use, such as marketing.
• Portability — receive your data in a machine-readable form.
• Withdraw consent — at any time, where we relied on your consent.

Email support@alot.com.ng with any of these and we will respond within 30 days. Exercising a right is free, and we will not treat you differently for using one.

If you are not satisfied with how we handled a request, you can complain to the Nigeria Data Protection Commission.

Keeping it safe

Traffic to the site is encrypted in transit. Passwords are stored only as a bcrypt hash, never in readable form, and we cannot recover one for you. Card details never reach our servers at all — Flutterwave handles them. Access to production data is limited to the people who need it to run the marketplace.

If a breach ever puts your data at risk, we will notify the Nigeria Data Protection Commission within 72 hours and tell you directly where the law requires it.

Cookies and storage

We use browser storage for your session, cart, saved items and theme choice. These are essential to the site working; we do not run third-party advertising trackers.

Contact

For any privacy request, use the contact page.