This Privacy Policy explains how StonesJoe Marketplace (“StonesJoe”, “we”, “us”) collects, uses, shares and protects personal information when you use our website at stonesjoeapparel.ca and the StonesJoe mobile app (together, the “Services”). It also explains the choices and rights you have.
StonesJoe is a marketplace. Independent sellers (“Partners” or “vendors”) list and sell their own products to customers through the Services. When you buy from a Partner, that Partner also receives some of your information so they can fulfil your order. This is explained in section 9.
If you have any questions, contact us using the details in section 18.
1. Who We Are
The Services are operated by STONESJOE LIFESTYLE LTD (RC 9699496), Engr Uche Agwu Street, Abuja, FCT, Nigeria.
For the Nigeria Data Protection Act 2023 (NDPA), we are the data controller for personal information collected through the Services, except where a Partner uses your information for their own purposes after receiving it to fulfil your order.
Privacy contact / Data Protection Officer: [privacy@shop.stonesjoeapparel.ca]
2. Information We Collect
2.1 Information you give usThis is a title
Account details: your name, email address, password (stored in encrypted form; we cannot see it) and, if you add them, your phone number and delivery addresses.
Partner (vendor) details: if you open a shop, your shop name, shop address, phone number, store description and images, and the bank account details you provide for payouts (account name, account number and bank).
Orders: the products you buy, delivery address, phone number, order notes and any messages you send about an order.
Reviews: star ratings and written reviews you post. Your review is shown publicly with your first name and the first letter of your last name.
Messages to sellers: when you use “Message the seller”, we send your question and your email address to that seller so they can reply to you.
Support requests: anything you tell us when you contact us.
2.2 Information from sign-in providers
If you choose Continue with Facebook, we receive your name, email address and a Facebook account identifier from Meta. If you choose Sign in with Apple, we receive an Apple account identifier, your email address or a private relay address if you choose “Hide My Email and, the first time only, your name.
We never receive your Facebook or Apple password, we do not post anything to your social accounts, and we do not access your friends list or other profile data.
2.3 Payment information
Payments are processed by Paystack. Your card or bank details are entered on Paystack’s secure payment page and go directly to Paystack. We do not see or store your full card number, CVV or bank login details. We receive confirmation of the payment, the amount, a transaction reference and limited details such as the payment method used.
2.4 Information collected automatically
Location (mobile app, only if you choose): If you tap “Use my current location”, the app reads your device’s location once to fill in your delivery address and calculate delivery costs. We do not track your location in the background. You can type your address instead.
Addresses converted to map locations: To work out delivery distance, your delivery address and sellers’ shop addresses are converted into map coordinates, using your phone’s built-in mapping service or, where enabled, Google Maps services.
Notification token (mobile app, only if you allow notifications): a token that lets us send order updates (for example “Your order is on its way”) and, for Partners, new-order alerts.
Crash and error reports (mobile app): When the app crashes or hits an error, we receive technical details such as device model, operating system, app version and where the error happened. These reports are linked only to your account number and account type (customer, partner or guest), never to your name, email address, delivery address or payment details.
Device and usage information (website): Like most websites, our servers record information such as IP address, browser type, pages visited and the date and time of visits.
Cookies and similar technologies (website): see section 4.
2.5 Information stored only on your phone
Your cart and wishlist in the mobile app, and your choice of “Customer” or “Partner” on the welcome screen, are saved on your device so they are still there next time you open the app. Your login is kept in your phone’s secure storage. This information stays on your device unless you place an order or sign in.
3. How We Use Your Information
We use personal information to:
1.Create and manage your account, including sign-in with email, Facebook or Apple, password resets and account deletion.
2.Process and deliver orders: calculate delivery costs, take payment, send order confirmations and receipts, pass the order to the right seller, and show you tracking updates.
3.Run Partner shops: list products, manage stock and orders, calculate earnings and commission, and pay out withdrawals to the bank account a Partner provides.
4.Send service messages: order updates, receipts, security notices and replies to your questions, by email and, if you allow it, app notifications.
5.Keep the Services safe: prevent fraud, detect abuse (for example by limiting repeated login attempts), verify payments, and enforce our Terms & Conditions.
6.Fix problems and improve the Services, using crash reports, error logs and general usage information.
7.Show reviews so other customers can make informed choices.
8.Send marketing, such as newsletters and offers, only where you have agreed or where the law otherwise allows. You can unsubscribe at any time (section 6).
9.Meet legal obligations, such as keeping tax and accounting records and responding to lawful requests from authorities.
4. Cookies and Advertising Technologies (Website)
Our website uses cookies and similar technologies to:
– keep you signed in and remember your cart (the site does not work properly without these);
– speed up the website through caching;
– understand how the site is used; and
– measure and improve our advertising, including through the Meta Pixel and Conversions API, which share information about visits and purchases on our website (such as pages viewed and purchases made) with Meta so we can measure the results of ads on Facebook and Instagram.
You can control cookies through your browser settings and, where shown, through our cookie banner. You can manage how Meta uses information for ads in your Facebook or Instagram ad settings.
The mobile app does not use advertising tracking. Facebook Login in the app is used only to sign you in; automatic Facebook app-event tracking and advertising-ID collection are switched off.
5. Legal Basis for Processing
Under the NDPA we rely on one or more of the following legal bases:
Contract: To provide your account, process your orders and run Partner shops.
Consent: For optional features such as location access, app notifications, social sign-in and marketing. You can withdraw consent at any time; this does not affect processing that already took place.
Legal obligation: For example keeping tax, accounting and transaction records.
Legitimate interests: For example fraud prevention, security, crash reporting and improving the Services, where these interests are not overridden by your rights.
6. Marketing
We only send marketing messages where you have agreed or where the law allows. Every marketing email has an unsubscribe link, and you can also ask us to stop at any time. Order updates, receipts and security messages are not marketing and will still be sent while you have an account.
7. App Permissions
The mobile app may ask for these permissions. All are optional, and you can change them at any time in your phone’s settings:
| Permission | Why we ask | If you say no |
| Location | To fill in your address and calculate delivery cost when you tap “Use my current location” | Type your address instead |
| Notifications | Order updates; new-order alerts for Partners | You won’t get alerts; orders still appear in the app and by email |
| Camera and photos | For Partners to add product photos | You can’t add photos from that device |
8. How We Share Information
We do not sell your personal information. We share it only as described below.
(Partners)
When you place an order, the seller of each item receives what they need to fulfil it: your name, delivery address, phone number, the items ordered and any order notes. When you message a seller, they receive your message and email address.
Service providers
We use trusted providers who process information on our behalf, under contracts that require them to protect it:
Legal and safety reasons
We may share information if required by law, court order or a lawful request from a public authority, or where necessary to protect the rights, property or safety of StonesJoe, our users or others, including to prevent fraud.
Business changes
If StonesJoe is involved in a merger, sale or reorganisation, personal information may be transferred to the new owner, who must continue to protect it in line with this policy.
9. What Partners Must Do With Customer Information
Partners may use customer information only to fulfil, deliver, support and handle returns for the orders they receive through StonesJoe. They must keep it secure, must not use it to market to customers outside StonesJoe without the customer’s consent, and must not sell or share it. Partners who misuse customer information may have their shops suspended or closed.
10. International Transfers
Some of our service process information outside Nigeria, mainly in the United States. Where we transfer personal information outside Nigeria, we do so in line with the NDPA, relying on safeguards such as the provider’s data-protection commitments and contractual terms, so that your information receives a level of protection consistent with Nigerian law
11. How We Protect Your Information
We use measures appropriate to the risk, including:
– encrypted connections (HTTPS) for the website and app;
– passwords stored only in encrypted (hashed) form;
– app logins stored in your phone’s secure storage and kept only as protected codes on our servers;
– limits on repeated login, password-reset and other attempts;
– keeping private account information out of public caches;
– verifying every payment with Paystack, and every Facebook and Apple sign-in with Facebook or Apple, before acting on it; and
– limiting staff and seller access to what each role needs.
If a personal data breach is likely to put your rights at risk, we will notify you and the Nigeria Data Protection Commission as the law requires.
12. How Long We Keep Information
| Information | How long |
| Account and profile | Until you delete your account |
| Orders, payments and invoices | As long as required by tax, accounting and other laws (generally up to 6 years), then deleted or anonymised |
| Partner payout records | As long as required by financial and tax laws |
| Reviews | Until you delete them or your account; after account deletion they may remain without your name |
| Crash and error reports | Up to 90 days |
| Server and security logs | Up to 12 months |
| Notification tokens | Until you log out, delete the app or delete your account |
| Marketing preferences | Until you unsubscribe, plus a record of your unsubscribe so we don’t contact you again |
13. Deleting Your Account and Data
You can delete your StonesJoe account at any time:
- In the StonesJoe app: go to Account → Delete my account and follow the steps.
- By email: write to support@stonesjoeapparel.ca from the email address on your account and ask us to delete it.
When your account is deleted, we remove your login, profile, saved addresses and app sessions. If you signed in with Facebook or Apple, we also remove the link to that account. Order and payment records that we are required by law to keep for tax, accounting and fraud-prevention purposes are kept for the period the law requires, but are no longer linked to your account.
If you are a Partner, your store is closed and your products are removed from the marketplace. Orders that customers have already paid for must be completed before a vendor account can be deleted.
If you signed in with Facebook, you can also remove StonesJoe from your Facebook account under Settings & privacy → Settings → Apps and websites. If you used Sign in with Apple, you can stop using it in your Apple ID settings under Sign in with Apple.
14. Your Rights
Under the Nigeria Data Protection Act 2023, you have the right to:
1. Be informed about how your information is used (this policy).
2. Access the personal information we hold about you and receive a copy.
3. Correct information that is inaccurate or incomplete. You can update most account details yourself in the app or on the website.
4. Delete your information (section 13).
5. Restrict how we use your information in certain circumstances.
6. Object to processing based on legitimate interests, and to direct marketing at any time.
7. Data portability: receive information you gave us in a commonly used format, or have it sent to another organisation where technically possible.
8. Withdraw consent at any time, where we rely on consent.
9. Not be subject to decisions based solely on automated processing that have legal or similarly significant effects on you. We do not make such decisions.
10. Complain to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng if you believe we have mishandled your information. We would appreciate the chance to resolve your concern first.
To use any of these rights, contact us (section 18). We may need to confirm your identity first. We will respond within the time required by law, and in any case within 30 days.
15. Children
The Services are not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
16. Links to Other Websites
The Services may link to other websites and services, such as social media pages or payment pages. Their privacy practices are their own, and we encourage you to read their privacy policies.
17. Changes to This Privacy Policy
We may update this policy when our Services, the law or our practices change. We will post the new version on this page and update the “Last updated” date. If the changes are significant, we will tell you in the app, by email or with a notice on the website before they take effect.
18. Contact Us
For questions about this policy, or to use your privacy rights:
StonesJoe Marketplace
STONESJOE LIFESTYLE LTD (RC 9699496), Engr Uche Agwu Street, Abuja, FCT, Nigeria
Email:support@stonesjoe
Privacy contact / Data Protection Officer: privacy@shop.stonesjoe
You can also complain to the Nigeria Data Protection Commission at ndpc.gov.ng.