Privacy Policy

LEDDAR respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how LEDDAR collects, uses, stores, shares, and protects personal data when you:

• visit our website
• create an account
• apply as a Brand or Artisan
• complete verification
• submit a production request
• request a sample
• make or receive payments
• communicate through the platform
• contact support
• otherwise use LEDDAR's services

This Privacy Policy should be read together with our Terms & Conditions and any related policies referenced on the platform.

LEDDAR is a technology platform that connects Brands and Artisans through structured workflows for samples, production requests, production tracking, quality control, and selected payment-related flows.

For the purposes of applicable data protection law, LEDDAR may act as a data controller in relation to personal data collected for its own platform operations. The Nigeria Data Protection Act 2023 recognizes obligations for both data controllers and data processors.

This Privacy Policy applies to:

• Brands
• Artisans
• website visitors
• business contacts
• support users
• anyone whose personal data is processed by LEDDAR in connection with the platform

It does not apply to third-party websites, services, or payment pages linked from or integrated into the platform. Those providers may have their own privacy policies.

Depending on how you use LEDDAR, we may collect the following categories of personal data.

4.1 Identity Data

• full name
• date of birth, where required
• gender, where required
• government-issued identification details, where required
• photograph or selfie, where required for verification

4.2 Contact Data

• email address
• phone number
• WhatsApp number
• business address
• delivery address
• billing address

4.3 Business and Profile Data

• business name
• brand or workshop name
• role or title
• category or specialization
• city, state, and country
• production capacity or service profile
• portfolio and uploaded work samples

4.4 Verification Data

• KYC documents
• identity validation results
• bank account verification information
• compliance-related information
• fraud screening results

4.5 Transaction and Order Data

• quote requests and production requests
• product specifications, quantity, and timeline details
• invoice, payment, and payout records
• refund or cancellation records
• support history related to orders

4.6 Communications Data

• messages sent through the platform
• emails to support
• WhatsApp or SMS messages sent through LEDDAR channels
• call notes where support interactions are recorded internally

4.7 Technical and Usage Data

• IP address, browser type, device type, operating system
• pages visited, date and time of access, referring links
• actions taken on the platform
• cookie and analytics data

4.8 Sensitive Personal Data

5.1 Directly from You

When you create an account, complete forms, request pricing, request a sample, submit a production request, upload documents, or contact us.

5.2 Automatically

When you use the platform, we may collect technical and usage data through cookies, logs, analytics tools, and related technologies.

5.3 From Third Parties

We may receive information from payment providers, verification providers, analytics providers, fraud prevention tools, customer support tools, and publicly available business sources where lawful.

We process personal data only where we have a lawful basis and a legitimate operational reason to do so.

6.1 Provide Platform Services

Create and manage accounts, onboard users, enable workflows, manage dashboards, records, and support interactions.

6.2 Verify Users and Prevent Fraud

Complete KYC checks, validate identity or business details, screen for fraud and abuse, enforce platform trust and safety rules.

6.3 Process Payments and Payouts

Support billing records, confirm payment status, support artisan payout workflows, handle refunds, reversals, and reconciliation.

6.4 Support Operations and Customer Care

Respond to user requests, resolve complaints, investigate incidents, and improve user experience.

6.5 Improve the Platform

Analyze usage, measure performance, fix bugs, improve features, and understand demand and supply behavior.

6.6 Marketing and Communications

Where permitted by law, we may send product updates, onboarding reminders, transaction notices, service messages, and marketing communications. You may opt out of non-essential marketing at any time.

6.7 Legal and Compliance Purposes

Comply with legal obligations, respond to lawful requests, enforce our contracts, investigate fraud or misuse, and protect our rights, users, and platform.

Depending on the context, our lawful basis may include:

We may use cookies, session technologies, analytics tools, and similar technologies to keep you logged in, remember preferences, improve performance, understand platform interactions, and support security and fraud monitoring.

You can manage cookies through your browser settings or any cookie controls we make available.

Your data may be stored or processed outside Nigeria where our service providers or infrastructure require it. Where we transfer personal data outside Nigeria, we will take reasonable steps to ensure that an appropriate legal basis and reasonable safeguards are in place.

We use reasonable technical, administrative, and organizational measures to protect personal data, including access controls, password protection, encrypted transmission where appropriate, role-based permissions, vendor controls, and logging and monitoring.

No system is completely secure, and we cannot guarantee absolute security.

LEDDAR is intended for adults and business users. We do not knowingly offer the platform to children or intentionally collect children's personal data. If you believe a child has provided personal data to LEDDAR improperly, contact us so we can take appropriate action.

LEDDAR may use rule-based systems or automated checks for risk screening, onboarding prioritization, fraud detection, verification routing, or service optimization. Where applicable, such processing will be conducted in line with applicable law.

Our platform may contain links to third-party services or use third-party tools. We are not responsible for the privacy practices of third parties. You should review their privacy policies separately.

We may send service-related communications necessary for account and platform operation. Where we send optional marketing communications, you may unsubscribe using the available link or by contacting us.

We may update this Privacy Policy from time to time. Where changes are material, we may notify users through the website, dashboard, or email. The "Effective Date" above shows when this version took effect.

If you believe your data rights have been violated, you may contact LEDDAR first so we can attempt to resolve the issue. You may also have the right to complain to the Nigeria Data Protection Commission, which is the data protection authority established under the NDPA.

9.1 With Service Providers

We may share data with vendors supporting cloud hosting, analytics, messaging, email delivery, KYC and identity verification, payment processing, fraud prevention, customer support, and document storage. These providers process data on our behalf under contractual controls.

9.2 Between Platform Users

We may share limited information between Brands and Artisans where necessary to perform a transaction or production workflow, limited to what is reasonably needed.

9.3 With Regulators, Authorities, or Courts

We may disclose personal data where required by law, lawful process, or to protect legal rights.

9.4 In a Corporate Transaction

If LEDDAR is involved in a merger, acquisition, or sale of assets, personal data may be disclosed as part of that process, subject to appropriate safeguards.

If a personal data breach occurs, LEDDAR will assess the incident and respond as required by applicable law. Where required, we may:

• contain and investigate the breach
• notify affected parties
• notify the appropriate authority
• take remedial action

We keep personal data only for as long as reasonably necessary for account administration, production and transaction records, compliance and audit requirements, dispute handling, fraud prevention, and legal defense.

We may retain some information after account closure for tax and accounting records, payment reconciliation, legal claims or defense, fraud prevention, and regulatory compliance.

Subject to law and verification of your identity, you may request to:

• access your personal data
• correct inaccurate or incomplete data
• withdraw consent where consent is the basis
• object to certain processing
• restrict certain processing
• request deletion where applicable
• request portability where applicable
• complain to the appropriate authority

To exercise your rights, contact us using the details below.