Privacy Policy

What personal data Sherz collects, why we need it, who we share it with, and the rights you have over it.

Last updated 2 min read

1.Who we are and what this covers#

Sherz is the data controller for the personal data described in this policy. It applies to the Sherz website, the mobile app, and any communication you have with us.

We process personal data in line with the Nigeria Data Protection Act 2023 and any regulations issued under it.

2.Data we collect#

  • Account details: your name, email address, phone number, and password (stored only as a secure hash).
  • Household details: delivery addresses, delivery zone, and your shopping profiles and lists.
  • Order history: drafts, approvals, order contents, and delivery outcomes.
  • Payment references: transaction IDs and payment status from Paystack, not your card number.
  • Technical data: device type, browser, IP address, and basic usage events that keep the service secure.

3.How we use it#

We use your data to run your membership, pool demand across households, prepare your monthly drafts, deliver your orders, and help you when something goes wrong.

  • To perform our contract with you: accounts, drafts, payments, and delivery.
  • To meet legal duties: tax records, fraud prevention, and responding to lawful requests.
  • For our legitimate interests: improving the service and keeping it secure.
  • With your consent: marketing emails, which you can turn off at any time.

4.Who we share it with#

We share personal data only with the parties who need it to deliver the service, and only as much as they need.

  • Paystack, to process your payments.
  • Delivery partners, who receive your name, phone number, and delivery address for your order.
  • Hosting and infrastructure providers, who store data on our behalf under a written agreement.
  • Authorities, where the law requires us to share it.

5.Cookies and sessions#

We use secure, HTTP-only cookies to keep you signed in, and local storage to remember preferences such as your light or dark theme. We do not use third-party advertising cookies.

6.How long we keep it#

We keep account data for as long as your account is open. After you close your account, we keep order and payment records for as long as tax and accounting law requires, then delete or anonymise them.

7.Keeping it secure#

Data is encrypted in transit. Access is limited to staff who need it, and sessions are managed on our servers rather than in your browser. No system is perfectly secure, so if we become aware of a breach that affects you, we will tell you and the regulator as the law requires.

8.Your rights#

  • Ask for a copy of the personal data we hold about you.
  • Correct data that is wrong or incomplete.
  • Ask us to delete your data, subject to our legal record-keeping duties.
  • Object to, or ask us to restrict, certain processing.
  • Withdraw consent for marketing at any time.
  • Complain to the Nigeria Data Protection Commission.

To use any of these rights, email us. We will reply within 30 days.

9.Children#

Sherz is not for anyone under 18, and we do not knowingly collect data from children.

10.Changes to this policy#

When we change this policy we will update the date at the top. If a change is significant, we will also tell you by email or in the app.