Privacy notice

This notice explains how Lucalmhub Limited (RC 8760396), Ilorin, Kwara State, Nigeria (“we”, “us”) handles personal data in connection with Rekon and this website, in line with the Nigeria Data Protection Act 2023.

Two kinds of personal data

Your account data. When you or your team use Rekon, we collect names, email addresses, phone numbers, sign-in records and billing details. For this data we are the data controller.

Your customers’ data. Orders you record or import contain your customers’ names, phone numbers, addresses and order history. For this data you are the data controller and we act as your data processor: we process it only on your instructions, to provide Rekon to you.

What we use your account data for

• To create and secure your account, including sign-in codes sent by email
• To provide the service, support you and tell you about changes to it
• To bill you and keep records the law requires
• To keep Rekon secure, including logs of sign-ins and sensitive actions

Our lawful bases are the contract with you, our legitimate interest in running a secure service, and legal obligations. We will ask for your consent before sending marketing messages, and you can withdraw it at any time.

Your responsibilities as a seller

Because you control your customers’ data, you are responsible for having a lawful basis to collect it, telling your customers how you use it and responding to their requests. We will help you do this, for example by exporting or deleting a customer’s records on request.

Who we share data with

We do not sell personal data. We share it only with service providers who help us run Rekon, such as hosting, email delivery and payment processing, under contracts that require them to protect it, or where the law requires us to.

Where a provider stores data outside Nigeria, we make sure the transfer is allowed under the Act and that the data receives adequate protection.

How we protect it

• Encrypted connections (HTTPS) for all traffic
• Passwords, sign-in codes and PINs stored only in hashed form
• Roles that limit who in your team can see customer phone numbers, cost prices and finances
• Records of sensitive actions, with the person and time

If a breach is likely to put people’s rights at risk, we will notify the Nigeria Data Protection Commission and, where required, the affected people and our customers, within the time the law sets.

How long we keep it

We keep account and customer data while your account is active. When you close your account we delete or anonymise it within a reasonable period, except records we must keep by law, such as invoices.

Your rights

You may ask to access, correct, delete or receive a copy of your personal data, object to or restrict how it is used, and withdraw consent. Your customers should send requests about their order data to you, the seller; we will support you in answering them.

To make a request, contact us at the contact details on our Contact page. You may also complain to the Nigeria Data Protection Commission.

This website

This website sets no tracking cookies and runs no analytics scripts. Links to sign up carry simple labels in the address (for example, which page you came from) so we know which pages are useful.

Changes

We will update this notice when our practices change and show the date at the top. For significant changes we will tell account holders by email.