Merchant Privacy Policy

This Merchant Privacy Policy explains how Callik Innovative and Technologies Ltd (“Callik”, “we”, “us”, or “our”) collects, uses, stores, and protects the personal data of merchants who register and operate on the Callik Merchant Platform at merchant.callik.com.

This policy applies to you as an individual merchant, business owner, designer, tailor, or fashion seller using our platform. It covers the data we collect from you during registration, account management, and day-to-day use of the platform.

By registering as a merchant on Callik, you acknowledge that you have read and understood this policy. This policy should be read alongside our Merchant Terms and Conditions, which govern your overall use of the platform.

1. Who We Are

Callik Innovative and Technologies Ltd is incorporated under the laws of the Federal Republic of Nigeria. We operate the Callik fashion marketplace at callik.com and the Merchant Platform at merchant.callik.com.

For all data-related enquiries, contact us at: support@callik.com with the subject line “MERCHANT PRIVACY REQUEST”.

2. Personal Data We Collect From Merchants

2.1 Registration and Identity Data

When you register on the Merchant Platform, we collect:

• Full legal name or business name
• Email address and phone number
• Business address and country of operation
• Business type (individual, tailor, designer, registered business entity)
• Government-issued identification documents, where required for verification
• Business registration certificates, where applicable

2.2 Financial and Banking Data

To process settlements, we collect:

• Bank account name and number
• Bank name and sort/routing details
• Bank Verification Number (BVN) or equivalent, where required by our payment infrastructure
• Tax identification information, where required by applicable law

2.3 Store and Product Data

As part of operating your Storefront, we collect and store:

• Store name, logo, and branding assets you upload
• Product listings, photographs, descriptions, and pricing
• Inventory data and stock information
• Turnaround times and delivery terms you set
• Custom Order specifications and measurement templates you create

2.4 Transaction and Order Data

For every order processed through the platform, we record:

• Order details and values
• Fulfilment activity, including dispatch and delivery confirmations
• Settlement records and commission deductions
• Refund, return, and dispute history
• Cancellation records

2.5 Platform Usage Data

We automatically collect data about how you use the Merchant Platform, including:

• Login times, session duration, and pages accessed
• Device type, browser, IP address, and operating system
• Actions taken within your dashboard, including product edits and order updates
• Communication history with Callik support

3. How We Use Your Data

We use your personal and business data for the following purposes:

• To create and manage your Merchant account and Storefront
• To process customer orders and coordinate fulfilment between you and buyers
• To calculate, process, and remit settlements to your registered bank account
• To verify your identity and comply with anti-fraud and Know Your Customer (KYC) obligations
• To communicate with you about your account, orders, platform updates, and policy changes
• To monitor your store performance metrics, including fulfilment rate, response time, and customer satisfaction scores
• To enforce our Merchant Terms and Conditions and take action where violations occur
• To resolve disputes between you and customers through our internal dispute resolution process
• To comply with financial, tax, and regulatory reporting obligations under Nigerian and applicable international law
• To improve the Merchant Platform based on usage data and feedback
• To send you relevant product updates, feature announcements, or commercial opportunities on the platform — you may opt out of non-essential communications at any time

4. Legal Basis for Processing

We process your personal data under the following legal bases in accordance with the Nigeria Data Protection Act 2023 (NDPA) and applicable international data protection frameworks:

• Contract performance — the majority of processing is necessary to fulfil our agreement with you under the Merchant Terms and Conditions
• Legal obligation — where processing is required to comply with financial, tax, or regulatory law
• Legitimate interests — including fraud prevention, platform security, performance monitoring, and service improvement
• Consent — for non-essential communications and marketing, where you have given specific consent

5. Customer Data You Access as a Merchant

As a merchant, you will have access to certain customer personal data through the Merchant Platform, including customer names, delivery addresses, contact details, and body measurements submitted for Custom Orders.

This data is shared with you solely for the purpose of fulfilling orders placed on the Callik platform. Your obligations as a handler of this data are strictly governed by Section 10 of the Merchant Terms and Conditions and applicable data protection law. Specifically, you must not:

• Use customer data for direct marketing or unsolicited contact
• Store customer data beyond what is necessary to fulfil the relevant order
• Share customer data with any third party not involved in the fulfilment of the order
• Use customer measurement profiles outside the Callik platform
• Redirect customers discovered through Callik to transact off-platform using contact information obtained through the platform

Callik monitors merchant compliance with these obligations. Breach of these requirements may result in account suspension and may expose you to liability under applicable data protection law.

6. How We Share Your Data

We do not sell your personal data. We share it only as follows:

• With our payment infrastructure providers, to process settlements to your bank account
• With identity verification and fraud prevention services, to complete KYC checks
• With logistics partners, where relevant to coordinating order delivery
• With our technology and hosting providers who process data on our behalf under strict data processing agreements
• With regulatory authorities, tax bodies, or law enforcement where we are legally required to disclose
• With a successor entity in the event of a merger, acquisition, or business sale, provided that equivalent privacy protections are maintained

When we engage third-party processors, we require them to handle your data in accordance with applicable data protection law and our own security standards.

7. International Data Transfers

Callik is a global platform. Some of our service providers and technology infrastructure may be located outside Nigeria. Where your data is transferred internationally, we ensure that appropriate safeguards are in place, including contractual protections consistent with the NDPA 2023 and, where applicable, the EU General Data Protection Regulation (GDPR).

8. Data Retention

We retain your data for as long as your Merchant account is active and for the periods required by law or legitimate business need:

• Account and identity data: retained for the duration of your account and 5 years after closure
• Financial and transaction records: retained for a minimum of 7 years for tax and regulatory compliance
• Order and settlement records: retained for 7 years
• Dispute and enforcement records: retained for up to 7 years, or longer where legal proceedings are involved
• Platform usage logs: retained for up to 2 years for security and fraud monitoring purposes

When data is no longer required, we delete or anonymise it securely.

9. Data Security

We implement technical and organisational security measures to protect your data, including:

• Encryption of data in transit via TLS/SSL
• Access controls restricting data access to authorised Callik personnel only
• Secure payment settlement via verified banking infrastructure
• Regular security reviews and vulnerability assessments
• Data breach response procedures, including regulatory notification where required

You are responsible for maintaining the confidentiality of your Merchant Platform login credentials. Notify us immediately at support@callik.com if you suspect unauthorized access to your account.

10. Your Privacy Rights

Under the Nigeria Data Protection Act 2023 and other applicable laws, you have the following rights in respect of your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete information
• Right to erasure — to request deletion of your data where no longer required, subject to our legal retention obligations
• Right to restrict processing — to request that we limit use of your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — for processing based on consent, which can be withdrawn at any time without affecting prior processing

To exercise any of these rights, email support@callik.com with the subject line “MERCHANT PRIVACY REQUEST”. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).

11. Cookies on the Merchant Platform

The Merchant Platform uses cookies and similar technologies to keep you logged in, remember your preferences, and monitor platform performance. Essential cookies are required for the platform to function. Analytical cookies help us improve the dashboard experience.

You can manage non-essential cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the Merchant Platform.

12. Changes to This Policy

We may update this Merchant Privacy Policy from time to time. Where changes are material, we will notify you by email to your registered address and via a notice in your Merchant Platform dashboard, with a minimum of 30 days notice before changes take effect. Your continued use of the platform after the effective date constitutes acceptance of the revised policy.

13. Governing Law

This policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act 2023. Where you operate from or are located in another jurisdiction, the relevant data protection laws of that jurisdiction may also apply, and Callik will comply with those requirements to the extent required.

14. Contact

For any questions or requests relating to this policy or how we handle your data as a merchant:

This Merchant Privacy Policy was prepared for Callik Innovative and Technologies Ltd and applies solely to merchants registered on the Callik Merchant Platform. It does not constitute legal advice. Callik recommends that merchants seek independent legal counsel if they have specific questions about their obligations under applicable data protection law.