Privacy policy

1. Who controls your data

Makett is the controller of personal data collected through the marketplace. Privacy questions and requests can be sent to privacy@makett.com.ng. This policy is designed around the Nigeria Data Protection Act 2023.

2. Information we collect

• Account details such as your name, email address, verified Nigerian phone number, profile image, sex and date of birth when you choose to provide them, authentication identifiers, and account creation date.
• Business-profile details, including business name, logo, type, trading address, category, description, and verification status.
• Marketplace activity such as listings, product images, descriptions, saved products, messages, feedback, bids, views, reports, notifications, and account trust signals.
• Verification outcomes, including whether email, phone, or NIN checks were completed. Makett does not expose or place a raw NIN in public profile data.
• Technical and safety information such as IP address, device/browser data, session logs, fraud indicators, affiliate referral activity, and communications with support.

3. Checkout and notification data

When you choose Makett Protected Checkout, we process order details, payment references and payment status. Card or bank credentials are entered with the payment provider and are not stored by Makett. If you enable browser notifications, we store the device subscription information needed to deliver them; you can disable that permission in your browser at any time.

4. How and why we use information

We process data to create and secure accounts, verify users, operate listings and auctions, calculate trust indicators, provide buyer and business dashboards, process optional protected purchases, prevent fraud, investigate reports, communicate service messages, comply with legal obligations, and improve marketplace reliability.

Depending on the activity, our lawful basis is performance of our agreement with you, your consent, compliance with a legal obligation, or our legitimate interests in operating a safe and useful marketplace. Where we rely on consent, you may withdraw it without affecting earlier lawful processing.

5. Who receives information

We share only what is reasonably necessary with infrastructure and service providers that help operate Makett, including Supabase for authentication and data storage, Resend for account and optional marketplace emails, KudiSMS for WhatsApp phone verification, Flutterwave for optional protected payments, Google for advertising and product discovery, and hosting providers such as Vercel. We may also disclose information to professional advisers, regulators, courts, or law-enforcement bodies where legally required or necessary to protect users.

Public listings display seller-facing information such as business name, trading or meet-up address, verification badge, summary trust score, seller feedback, and product content. A seller’s verified phone number is shown only when a visitor deliberately selects “Show phone number.” Identity numbers and detailed verification records are not made public.

6. International transfers

Some service providers may process data outside Nigeria. Where this occurs, we use appropriate contractual, organisational, and legal safeguards required by applicable Nigerian data-protection law.

7. Retention

We keep account and marketplace information only for as long as needed for the purposes described above. Some records may remain after account closure where necessary for fraud prevention, security, disputes, tax or accounting obligations, enforcement, backups, or other legal requirements. Data that is no longer required is deleted, anonymised, or securely isolated.

8. Your rights

Subject to applicable law, you may request access to your data, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also complain to the Nigeria Data Protection Commission. We may need to verify your identity before completing a request.

9. Security

We use access controls, server-only secrets, encrypted transport, authentication safeguards, one-time codes, and database policies designed to protect personal data. No online service is completely risk-free, so users must protect passwords and never share verification codes.

10. Cookies, emails and advertising

Makett uses essential browser storage for sign-in sessions, saved preferences, affiliate attribution, and core site operation. Google advertising may use cookies or similar technologies subject to Google’s policies and any consent required by applicable law. You can turn weekly marketplace emails and unread-message email alerts on or off in account settings; essential security and account-service messages may still be sent.

11. Children and changes

Makett is not intended for anyone under 18. We may update this policy when the service or legal requirements change, and will publish the new effective date and provide additional notice for material changes.