Privacy Policy

This policy explains how Chimert Concepts & Logistics Limited (RC 1873091) ("Chimert", "we") collects and uses personal data on chimertfoodmart.com, chimertlogistics.com and chimertacademy.com. We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA).

What we collect

• Account details: your name, email address, phone number and a password (stored only in scrambled, hashed form).
• Sign-in with Google: if you choose to sign in with Google, Google shares your name and email address with us. We do not receive your Google password.
• Orders and enquiries: delivery addresses, the items you order, order history, and the messages, files and details you send us in forms, applications and enquiries.
• Payment information: payments are taken by our payment provider, Flutterwave. We receive confirmation and a transaction reference; we do not receive or store your full card number.
• Newsletter: your email address and your consent, if you subscribe.
• Technical data: your IP address and basic request information, used to keep the service secure and to detect abuse.
• Site usage: if you accept analytics cookies, Google Analytics records how pages are used (pages visited, device type, approximate location). It does not identify you by name.

Why we use it, and our lawful basis

• To take and deliver your orders and provide the services you ask for (performance of a contract).
• To take payment, prevent fraud and meet legal, tax and accounting duties (legal obligation and legitimate interests).
• To send you our newsletter and offers, only if you opt in; you can withdraw consent at any time using the unsubscribe link (consent).
• To answer enquiries and support requests (legitimate interests).
• To understand how our sites are used and improve them, only if you accept analytics cookies (consent).

Who we share it with

• Our payment provider (Flutterwave) to process payments.
• Delivery carriers (DHL, Aramex, FedEx) and local riders, with the name, address and phone number needed to deliver.
• Issuing bodies and regulators (for example the U.S. FDA, CAC or NAFDAC) when you ask us to handle a registration for you, with the details that application requires.
• Google, for sign-in (if you use it) and analytics (if you accept it).
• Service providers that host our systems and send our emails.
• Authorities where the law requires it.

We do not sell personal data.

International transfers

Some of our service providers are located outside Nigeria. Where personal data is transferred abroad, our providers are bound by contract to protect it, and we take the steps the NDPA requires to keep it protected.

How long we keep it

We keep account and order records for as long as your account is open and for 6 years afterwards, in line with accounting and tax record-keeping, and longer where the law requires. Newsletter data is kept until you unsubscribe.

Your rights

Under the NDPA you may ask us to give you a copy of your personal data, correct it, delete it, restrict or object to its use, or move it to another provider, and you may withdraw consent at any time. To exercise a right, email chimertconcept@gmail.com. You also have the right to complain to the Nigeria Data Protection Commission.

Security

We protect personal data with encryption in transit, hashed passwords, access controls and audit logging of staff actions. No system is completely secure, and we will notify you and the regulator of a breach where the law requires.

Children

Our services are not directed at anyone under 18.

Changes

We will post changes to this policy on this page.

Contact

Data protection enquiries: chimertconcept@gmail.com. Chimert Concepts & Logistics Limited, 4 Kolawole Odunsi Street, beside Nigeria Customs Office, Ikeja, Lagos.