Privacy Policy

1Introduction

DOVA (“DOVA”, “we”, “us”, or “our”) operates an online agricultural marketplace that connects customers with verified suppliers of fresh produce and agricultural products in Nigeria. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have over it.

This Policy is written to comply with the Nigeria Data Protection Act 2023 (“NDP Act”) and its 2025 General Application and Implementation Directive (“GAID”), issued by the Nigeria Data Protection Commission (“NDPC”).

2Who We Are

DOVA is the trading name of the entity operating the DOVA website and mobile experience (dova.dntech.id and related domains). For the purposes of the NDP Act, DOVA acts as the data controller for personal data collected through the platform, and as a data processor in limited cases where we process data on a supplier's behalf (for example, sharing a customer's delivery details with the supplier fulfilling that order).

3Scope of This Privacy Policy

This Policy applies to customers, suppliers, and visitors who use the DOVA website, create an account, browse products or bundles, place orders, contact support, use the DOVA AI assistant, or otherwise interact with the platform. It does not apply to third-party sites we link to, or to the independent privacy practices of payment, delivery, or other service providers, which are governed by their own privacy policies.

4Personal Data We Collect

Customer data

• Full name, email address, and phone number
• Delivery address(es) and preferred delivery time slot (morning/evening)
• Account credentials and account activity
• Order history, cart contents, and saved preferences
• Customer support and contact-form messages, and messages sent to the DOVA AI assistant

Supplier data

• Business name, contact person, and contact details
• Verification information and documents submitted during supplier registration
• Bank or payment details required for payouts, where applicable
• Product and bundle listings, pricing, and stock information

Transaction data

• Order details, quantities, and pricing
• Payment status and transaction references (see “Payment Service Providers” below)
• Refund and dispute records

Technical data

• Log data such as IP address, device/browser type, and access timestamps
• Cookies and similar identifiers used to keep you signed in and remember cart contents

We only collect the categories of data above that are relevant to the account type and features you actually use.

5How We Collect Personal Data

• Directly from you — when you register, place an order, list a product, or contact us
• Automatically — through cookies and server logs as you use the platform
• From payment and verification providers — such as payment confirmations from our payment partner

6Why We Collect and Use Personal Data

• Creating and managing customer and supplier accounts
• Processing orders, payments, and deliveries
• Verifying supplier eligibility and business information
• Providing customer support and responding to enquiries
• Operating the DOVA AI assistant and the feedback/roadmap board, where you choose to use them
• Detecting and preventing fraud, abuse, and unauthorized access
• Complying with Nigerian legal and regulatory obligations
• Improving the marketplace, and — where legally permitted — sending you service or promotional communications

7Lawful Bases for Processing

We rely on the following lawful bases, depending on the activity:

• Performance of a contract — creating your account, processing orders, and delivering products
• Consent — optional marketing communications and non-essential cookies, which you can withdraw at any time
• Legal obligation — record-keeping, tax, and responding to lawful requests from regulators or law enforcement
• Legitimate interests — fraud prevention, platform security, and service improvement, balanced against your rights

8Cookies and Similar Technologies

DOVA uses essential cookies and local storage to keep you signed in, remember your cart, and keep the platform secure — these are necessary for the service to function and cannot be switched off. If DOVA introduces optional analytics or advertising cookies in the future, this section will be updated to explain what they do and how you can opt out.

9How We Share Personal Data

We only disclose personal data where necessary for the marketplace to function, and never sell personal data to third parties. Depending on the activity, recipients may include suppliers fulfilling your order, our payment provider, hosting and infrastructure providers, and — where legally required — regulators or law-enforcement authorities. Each category is explained below.

10Suppliers and Marketplace Participants

When you place an order, we share the information the supplier needs to fulfil it — such as your name, delivery address, phone number, and order contents. We do not share your email address, account credentials, or full order history with suppliers. Suppliers may only use this information to fulfil the relevant order and must not use it for unrelated marketing.

11Payment Service Providers

Payments on DOVA are processed by Paystack, a regulated Nigerian payment service provider. DOVA does not store your full card or bank account details — these are handled directly by Paystack in accordance with its own security standards and privacy policy. DOVA receives and retains only the payment status and transaction reference needed to confirm your order and maintain accurate financial and legal records.

12Delivery and Logistics Providers

Where delivery is fulfilled by a third-party logistics partner rather than the supplier directly, we share the minimum delivery information necessary — recipient name, delivery address, phone number, and delivery slot — solely to complete that delivery.

13International Data Transfers

Some of our service providers, such as cloud hosting or email delivery services, may process data outside Nigeria. Where this occurs, we take reasonable steps to ensure the provider offers an appropriate level of protection consistent with the NDP Act's requirements for cross-border data transfers.

14Data Security

We apply reasonable technical and organizational measures to protect personal data, including access controls, authentication, encrypted transmission, and restricted internal access on a need-to-know basis. No system is completely secure, and we continually review our safeguards as the platform grows.

15Data Retention

We keep personal data only for as long as necessary for the purpose it was collected — typically for the life of your account plus a period required for accounting, tax, dispute-resolution, and legal-compliance purposes. When data is no longer needed, we delete or anonymize it, except where we are legally required to retain it for longer.

16Your Data Subject Rights

Under the NDP Act, you have the right to:

• Be informed about how your personal data is processed
• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Object to certain processing activities
• Request restriction of processing in applicable circumstances
• Receive certain data in a portable format
• Request erasure of your data where applicable
• Be protected against decisions based solely on automated processing
• Lodge a complaint with the Nigeria Data Protection Commission

17How to Exercise Your Rights

To exercise any of the rights above, email [email protected] with your request and enough detail to verify your identity. We will respond within the timeframe required by applicable Nigerian law. You can also update your profile details directly from your account settings at any time.

18Children's Privacy

DOVA is intended for use by adults who can lawfully enter into a contract in Nigeria. We do not knowingly collect personal data from children. If we become aware that a child's data has been collected without appropriate consent, we will take steps to delete it.

19Personal Data Breaches

We maintain internal procedures to detect, contain, investigate, and remediate suspected personal data breaches. Where a breach poses a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission and affected users as required under applicable Nigerian law.

20Data Protection Officer / Privacy Contact

Depending on DOVA's classification under the NDP Act and NDPC rules, a Data Protection Officer may be appointed to oversee compliance and act as a contact point with the Commission. In the meantime, all privacy queries can be directed to [email protected].

21Complaints to the NDPC

If you are not satisfied with how we have handled your personal data or a privacy request, you have the right to lodge a complaint directly with the Nigeria Data Protection Commission (NDPC), in addition to contacting us.

22Changes to This Privacy Policy

We may update this Privacy Policy from time to time as DOVA's services or applicable law evolve. Material changes will be reflected by updating the “Last updated” date above, and where the change significantly affects how your personal data is processed, we will take reasonable steps to notify you.

23Contact Information

For privacy questions, requests, or complaints, email [email protected]. For general support, email [email protected] or call +234 903 269 6825.