Privacy Policy

1. What this covers

This policy explains what personal data LOKAX collects when you browse, create an account, place an order, or contact us — on this website or the LOKAX mobile app — and what we do with it. It applies whether you're ordering within Nigeria or having an order shipped internationally.

2. What we collect

• Account details: name and email address, handled by our authentication provider (Supabase) — including a one-time code sent to your email to verify signup.
• Order details: delivery name, address, city, country and phone number, and the items and prices in each order.
• Payment details: handled entirely by our payment processor, Paystack. We never see or store your card number — LOKAX only receives a payment reference and status (paid/failed) back from Paystack.
• Reviews: if you leave a product review, your display name, star rating and comment are shown publicly against that product.
• Restock notifications: if you ask to be notified when a product is back in stock, we store the email you give us against that product until we notify you.
• Wishlist: currently stored only on your own device (browser or app storage), not on our servers — clearing your browser data or reinstalling the app clears it too.

3. What we don't do

• We don't use advertising or analytics tracking cookies today. Signing in relies on one essential session cookie so you stay logged in — nothing else is set for tracking purposes.
• We don't sell your personal data to anyone, for any reason.
• We don't share your data with a vendor or third-party seller — LOKAX is the merchant of record for every order, so vendors never receive your contact or payment details.

4. Who we share data with

We use a small number of service providers to run LOKAX, each only for the purpose below, and none are given more than they need to do that job:

• Paystack — processes your payment and tells us whether it succeeded.
• Supabase — hosts our database and handles account sign-in, on infrastructure based in the United Kingdom (eu-west-2).
• Resend — sends transactional emails (order confirmations, status updates, verification codes) on our behalf.

5. How long we keep it

We keep order records for as long as we're required to for tax and accounting purposes. If you delete your account, we remove your profile and stop using your data for anything beyond what the law requires us to retain (like completed order records).

6. Your rights

Wherever you're ordering from, you can ask us to see, correct, or delete the personal data we hold on you, or to export it. Email privacy@lokax.com with your request and we'll respond within 30 days. If you're in the UK or EU, you also have the right to lodge a complaint with your local data protection authority if you're not satisfied with how we've handled a request.

7. Children

LOKAX isn't directed at children, and we don't knowingly collect data from anyone under 18. If you believe a child has given us personal data, contact us and we'll remove it.

8. Changes to this policy

If we make a material change to how we handle your data, we'll update the date below and, where the change is significant, notify account holders by email before it takes effect.