Who we are
Vivante Imports (“we”, “us”, “our”) operates the e-commerce website at vivanteimports.com (“the Website”). We are the data controller responsible for the personal information collected through the Website and through any related channels (WhatsApp, SMS, email, in-store, social media).
This Privacy Policy is issued in line with Nigeria’s Data Protection Regulation (NDPR), 2019, issued by the National Information Technology Development Agency (NITDA). It applies to anyone who visits the Website, creates an account, places an order, or otherwise interacts with us.
Information we collect
2.1 Information you give us
When you create an account, place an order, contact us, leave a review, or sign up for marketing, we collect:
- Identity & contact details: Full name, email address, phone number, WhatsApp number.
- Delivery information: Shipping address, landmarks, recipient name and phone.
- Order & payment metadata: Items ordered, quantities, totals, payment method, payment reference number, payment status. Full card numbers and Mobile Money PINs are never collected or stored by us — they are handled directly by our payment processor, Moolre.
- Account credentials: Email and a salted, hashed password (we never see your real password).
- Communications: Messages, reviews, ratings, photos, support tickets, and chat transcripts you submit.
- Marketing preferences: Whether you opted in to promotional SMS, email, or push notifications.
2.2 Information collected automatically
When you visit the Website (including our mobile app), we automatically collect:
- Device & technical data: IP address, browser type and version, operating system, device type, screen size, language, and device identifiers.
- Usage data: Pages viewed, products clicked or added to cart, search queries, time spent, referrer URLs, and the path you take through the Website.
- Cookies & local storage: See section 7 for details on cookies and how to control them.
- Push tokens: If you install our app and grant push permission, we store an anonymous push token to send you order updates and promotions.
2.3 Information from third parties
We may receive information about you from third parties — for example, our payment processor confirming a payment, a courier confirming a delivery, social-media platforms when you log in or share content, and advertising platforms reporting on the performance of our adverts. We only combine third-party information with what we hold to deliver the service you asked for.
How we use your information
We process your personal information for the following purposes:
-
Order processing & fulfilment
Process your orders, take payment via Moolre, arrange dispatch and delivery, send order confirmations and SMS status updates, handle returns, exchanges and refunds, and provide after-sales support.
-
Account management
Create and maintain your customer account, save your wishlist and addresses, recognise you across devices, and let you re-order or track past orders.
-
Marketing & personalisation
Send you promotional offers, new product launches, abandoned-cart reminders and seasonal campaigns where you have opted in. Personalise the products you see on the home page and in recommendation widgets.
-
Analytics & improvement
Understand how customers use the Website, identify and fix issues, measure the impact of campaigns, and continually improve product range, pricing and the shopping experience.
-
Fraud prevention & security
Detect and prevent fraudulent transactions, chargeback abuse, account takeover attempts, scraping and other malicious activity. Protect the Website, our customers and our business from harm.
-
Legal & regulatory
Comply with our obligations under Nigerian tax, accounting, anti-money-laundering and consumer-protection laws, respond to lawful requests from regulators, courts or law-enforcement agencies, and enforce our Terms.
Lawful basis for processing
In line with the Nigeria Data Protection Regulation (NDPR), 2019, we only process your personal data where we have a lawful basis to do so:
- Performance of a contract: To take and fulfil your order, deliver the products and provide customer support.
- Your consent: For non-essential cookies, marketing SMS/email, and push notifications. You can withdraw your consent at any time.
- Legitimate interests: To run, secure and improve our business — including fraud prevention, analytics, and protecting our staff and customers — provided your rights are not overridden.
- Legal obligation: To comply with tax, accounting, AML, and other Nigerian legal requirements.
Your rights
Under Nigeria’s Data Protection Regulation (NDPR), 2019 you have the following rights in relation to the personal data we hold about you:
Ask for a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete information. You can update most of this yourself in your account settings.
Ask us to delete your personal data, subject to legal obligations such as tax-record retention.
Ask us to limit how we use your data while a query is being investigated.
Receive a copy of the data you provided in a structured, machine-readable format.
Object to processing for marketing or other legitimate-interest purposes, and withdraw consent at any time.
Lodge a complaint with the Nigeria Data Protection Bureau (NPDPB) if you believe we have not handled your personal data properly.
Children’s privacy
The Website is not intended for children under 18 years of age. We do not knowingly collect personal information from minors. If a parent or guardian becomes aware that their child has provided us with personal information, please contact us at info@vivanteimports.com and we will delete it promptly.
International transfers
Some of our service providers (for example, hosting, email and analytics) operate outside Nigeria. Where personal data is transferred internationally, we ensure the transfer is subject to adequate safeguards — for example, standard contractual clauses or by selecting providers that operate equivalent data-protection standards — in line with NDPR requirements.
How long we keep your data
We keep your personal information only for as long as needed for the purpose it was collected, plus any legally required period.
| Data type | Retention period |
|---|---|
| Account information — While your account is active. Deleted to anonymised within 90 days of account closure, unless legally required to retain. | Account lifetime + 90 days |
| Order & invoice records — To comply with Nigerian tax and accounting laws (VAT records, receipts). | 6 years from order date |
| Marketing data — Until you unsubscribe or withdraw consent, then deleted within 30 days. | Until withdrawal + 30 days |
| Analytics data — Kept at aggregated level; individual-level data deleted or anonymised. | Up to 26 months |
| Fraud prevention records — Up to 7 years where needed to defend our business and other customers from repeated abuse. | Up to 7 years |
Security
We take the security of all data seriously. Our protections include:
- HTTPS/TLS encryption for all data in transit between you and our servers
- Database-level access controls — only authorised staff can access data they need to do their job
- Salted, hashed passwords — we never store passwords in readable form
- Payment credential handling by Moolre so we can never encounter or store full card or Mobile Money credentials
- Intrusion detection, rate-limiting, and automated logging to detect anomalies
- Regular backups, monitoring, and prompt patching of security issues
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or the law. The “Last updated” date at the top always shows when the current version took effect. For material changes in how we handle your data or that add new categories of data or third-party processors, we will notify you via a prominent notice on the Website or by email before those changes come into effect.
Contact us
If you have a question about this Privacy Policy, want to exercise a right, or have a concern about how we are handling your data, please contact us: