Get started

Privacy Policy

Last updated: October 28, 2026

1. Introduction

This Privacy Policy explains how Bizthom Services Ltd ("Bizthom", "we", "us", "our") collects, uses, stores, discloses, and protects your personal information when you use our website at https://bizthom.com, our mobile applications, and our services (collectively, the "Services").

This Privacy Policy is incorporated by reference into our Terms of Service and Acceptable Use Policy.

As used in this policy, "Vendor" or "Merchant" means any person or business that creates a store on Bizthom. "Customer" or "Buyer" means any person who buys from, chats with or is saved as a contact by a vendor on Bizthom. "User" means any person who accesses or uses the Services in any capacity.

1.1 Who Is Responsible for Your Information

  • Vendors and visitors to bizthom.com: Bizthom is the data controller. We decide how your account, billing, identity verification and usage information is used.
  • Customers of a vendor: the vendor is the data controller of its customers' information (orders, chats, contacts, campaigns and automations). Bizthom processes that information on the vendor's behalf and on the vendor's instructions, to run the vendor's store, inbox and tools. If you are a customer and want to use your rights, contact the vendor first; we will help them answer you.
  • Where Bizthom acts for itself: Bizthom is the data controller when it uses customer information for its own purposes: payments and payouts, fraud prevention, legal obligations, fixing and improving the Services (including the AI tools in Section 2.5), and the cross-store indicator in Buy Predict (Section 2.11).

2. Information We Collect

2.1 Information Vendors Provide

When you register as a vendor, we collect:

  • Account information: Full name, email address, phone number (WhatsApp), and business name
  • Identity verification: Bank Verification Number (BVN), which is verified through our licensed payment processing partners. BVN verification returns your legal name, date of birth, and phone number
  • Financial information: Bank account details (bank name, account number, account name) for withdrawal purposes, verified through our payment processing partners
  • Store content: Product listings, descriptions, images, pricing, and other content you upload
  • Business information: Business stage, product categories, and goals (collected during onboarding for platform personalisation)
  • How you found us: the website or ad that referred you, the campaign tags in the link, and the first and last page you landed on before signing up

2.2 Information About Customers

When customers buy from, chat with or are added by a vendor, we hold on the vendor's behalf:

  • Order information: Name, delivery address, phone number, email address, what was ordered, and payment and delivery status
  • Contact details: name, phone number and, where given, email address. A person who messages a vendor's connected WhatsApp number is saved as a contact with the name and number WhatsApp shows (see Section 2.12)
  • Chats: messages, voice notes, photos and files exchanged with the vendor on WhatsApp, Instagram, Facebook Messenger, Telegram and the website chat
  • Reviews: reviews a customer writes, and kind words, photos or voice notes from their chats that the vendor chooses to show as a review
  • Activity in the store: products viewed, bags, checkouts, loyalty points, referrals and sign-in codes sent to the customer
  • Payment information: Payment details are processed directly by our licensed payment processing partners (Paystack, Nomba). Bizthom does not store credit card numbers, debit card numbers, or bank login credentials

2.3 Information Collected Automatically

When you use the Services, we may automatically collect:

  • Usage data: Pages visited, features used, actions taken, time spent on the platform
  • Device information: Browser type, operating system, device type, screen resolution
  • Log data: IP address, access times, referring URLs, error logs
  • Cookies and similar technologies: See Section 7 below

2.4 Information from Third Parties

We may receive information about you from:

  • Payment processing partners (Paystack, Nomba): Transaction status, verification results, chargeback notifications
  • Identity verification services: BVN verification results, bank account verification results
  • Analytics providers: Aggregated usage and traffic data
  • Messaging platforms (WhatsApp, Meta, Telegram): the messages, names, profile pictures and phone numbers they deliver to a vendor's Inbox (Sections 2.10 and 2.12)
  • Google (when you connect Google Contacts): see Section 2.6 below
  • Zoho (when you connect Zoho Books): see Section 2.7 below

2.5 AI Tools

Bizthom's AI tools help vendors sell. Message content, photos and voice notes are processed by AI model providers acting on our behalf (Section 4.3), only to run these tools:

  • Ejiro, the AI sales agent: when a vendor switches it on, Ejiro chats with customers on the vendor's website and in their WhatsApp, Instagram and Facebook DMs. It reads the conversation, finds products (including from a photo the customer sends), answers questions about price, delivery and pickup, takes orders and payment, and follows up when a customer goes quiet. The vendor's team can take over any chat at any time
  • Ejiro learning: Ejiro may suggest new answers for a store from what the vendor's team has said in that store's own website and WhatsApp chats. A suggestion is used only after the vendor approves it, and only for that store
  • Reading chats for the vendor: voice notes are turned into text; photos are checked for payment receipts and products; and messages are read to fill in an order from a chat, spot reviews, spot customers who may need a follow-up, and show how likely a customer is to buy (Section 2.11)
  • AI Admin: what a vendor's team types or says to the dashboard assistant, and the store information it needs to answer and to do what the team asks
  • Records: Ejiro's conversations and the AI's results are stored with the vendor's records so the vendor can review them and so we can fix mistakes and improve these tools

AI providers process this information for us under their business terms, which do not let them train their models on it. Ejiro and the other AI tools do not make decisions that have legal or similarly significant effects on a customer; prices, refunds and whether to serve a customer stay the vendor's decisions.

2.6 Google User Data (Optional Integrations)

If you choose to connect your Google account to Bizthom (via "Connect Google Contacts" or similar features), we access specific Google user data only with your explicit consent during the Google OAuth flow:

  • Data accessed: Your Google Contacts (read and write access via the Google People API), under the scope https://www.googleapis.com/auth/contacts.
  • What we do with it: When a new customer is added to your Bizthom account — whether they message you on WhatsApp, place an order on your storefront, are imported from a spreadsheet or another platform, or are added by your team — Bizthom writes that customer as a new entry in your Google Contacts so their name appears in your phone book and WhatsApp chats. We read existing Google Contacts only to the extent necessary to avoid creating duplicates.
  • Storage: We store the Google OAuth access token and refresh token encrypted in our database, scoped to your Bizthom business account. We do not store a copy of your Google Contacts on our servers — writes are made directly to your Google account via the People API.
  • Sharing: We never share Google user data with third parties, advertisers, or AI/ML training systems. Google user data is not used for any purpose other than the integration feature you connected it for.
  • Retention and deletion: You can disconnect Google at any time from Extensions → Google Contacts. On disconnect, we immediately revoke and delete the stored tokens. Contacts already written to your Google account remain in your Google account and are subject to Google's own retention rules; you can delete them directly in Google Contacts.
  • Compliance: Bizthom's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2.7 Zoho Books and Commerce Data (Optional Integration)

If you connect Zoho Books, you authorise Bizthom to exchange the accounting information required to keep your selected Zoho Books organization current. If you separately approve Zoho Commerce read access, Bizthom can also verify your connected store's catalogue, stock and fulfilment records.

  • Data sent to Zoho: Customer contact details, products, sales invoices, payments, refunds, expenses, fees and settlement transfers from the cutover date you choose.
  • Data received from Zoho: Organization settings, chart of accounts, currencies, taxes and expenses. With optional Commerce access, this can also include store identity, products, variants, sellable stock, sales-order fulfilment, returns and refund statuses. Commerce access is read-only.
  • Storage: Zoho OAuth tokens are encrypted. We retain Zoho record identifiers, mappings and sync audit history to prevent duplicate accounting entries and explain sync failures. Commerce connection checks retain only store identity and verification status until you start a separate migration.
  • Control and deletion: You can disconnect from Extensions → Zoho Books. We revoke and delete the shared Zoho token immediately; records already held in Zoho Books or Commerce remain under your control in Zoho.

2.8 Facebook Login (Optional)

If you choose to sign in with Facebook ("Continue with Facebook"), we receive, with your consent during the Facebook authorisation flow, your name, email address, profile photo, and Facebook user ID (scope email plus Facebook's default public profile). We use this information only to create or access your Bizthom account.

  • Storage: We store your Facebook user ID and profile photo against your Bizthom account so we can recognise you on future sign-ins.
  • Retention and deletion: You can remove this link at any time. On a Facebook data-deletion or deauthorization request, we delete the Facebook link and the profile photo we retrieved from Facebook.

2.9 Meta Ads Data (Optional Integration)

If you connect your Meta (Facebook) Ads account, we access data only with your explicit consent during the Meta authorisation flow, under the ads_read permission:

  • Data accessed: your list of Meta ad accounts (account ID, name, currency); and, for the ad account you select, your campaign names and statuses and the per-campaign daily advertising spend, impressions, reach, and clicks. We do not access customer or contact data, conversions, or the contents of your ads, and we never create, edit, or manage your campaigns.
  • What we do with it: We display your advertising spend and performance inside your Bizthom dashboard alongside your sales, so you can compare advertising cost to revenue.
  • Storage: The Meta access token is stored encrypted at rest, scoped to your business. Your ad-account details and the performance figures above are stored against your business. We do not store a Meta refresh token.
  • Sharing: We never sell or share Meta data with third parties, and never use it to train AI/ML systems.
  • Retention and deletion: You can disconnect at any time from Extensions → Meta. When you do, we delete the stored token, the ad-account link, and all campaign and performance records obtained from Meta. We also honour Meta's Data Deletion and Deauthorization callbacks automatically, which delete the same data.
  • Compliance: Our use of data received from Meta adheres to the Meta Platform Terms and Developer Policies.

2.10 Meta DMs — Facebook Messenger and Instagram Direct (Optional Integration)

If you connect Meta DMs (Extensions → Meta), customer conversations from your Facebook Page and/or your Instagram professional account appear in your Bizthom Inbox, where your team replies. We access data only with your explicit consent during the Facebook Login for Business or Instagram Business Login flow, under the pages_show_list, pages_manage_metadata, pages_messaging, instagram_business_basic and instagram_business_manage_messages permissions:

  • Your account details: the list of Facebook Pages you manage, so you can choose which single Page to connect, and the connected Page's name; and, for Instagram, the connected professional account's ID, username, display name, and profile picture. We display these so you can confirm which account your Inbox is receiving messages from, and we use the account IDs to route incoming messages to the right business. We do not access your Instagram media, insights, or followers.
  • Message content: the messages customers send to your connected Page or Instagram account, and the replies you send back — including text, attachments, reactions, and delivery/read status. Message attachments are copied to our own media storage so they remain viewable in your Inbox after Meta's temporary links expire (see Section 4.3).
  • Information about the customer messaging you: where Meta makes it available, the sender's name (or Instagram username) and profile picture, so the conversation shows a person rather than an anonymous ID. If the sender's privacy settings withhold this, we keep the ID-based label instead. We do not receive their email address, phone number, or friend list.
  • Automated messaging and AI: your team replies in the Bizthom Inbox. If you switch Ejiro on for Instagram or Facebook, Ejiro also reads and answers these conversations (Section 2.5). Message content is also read by AI providers acting on our behalf to fill in orders from a chat, spot reviews, spot customers who need a follow-up and show how likely a customer is to buy (Sections 2.5 and 2.11).
  • Storage: Page and Instagram access tokens are stored encrypted at rest, scoped to your business. Conversations are stored against your business as part of your Inbox history.
  • Sharing: We never sell this data or share it with third parties for their own purposes, and never use it to train AI models. AI providers process it only on our behalf to run the features above.
  • Retention and deletion: You can disconnect either channel at any time from Extensions → Meta. Disconnecting — and Meta's Deauthorization callback, which we honour automatically when you remove the app — deletes the stored access token and the connected Page/Instagram account details and stops all message delivery, while your existing Inbox history is kept so your own records stay intact. A Meta Data Deletion request, which we also honour automatically, goes further and deletes the conversations, the messages within them, and the sender details we stored for that channel.
  • Compliance: Our use of data received from Meta adheres to the Meta Platform Terms and Developer Policies.

2.11 Buy Predict in the Inbox

On plans that include it, Bizthom shows a vendor's team how likely a customer who messages the vendor is to buy, so they can reply to likely buyers first. This appears only to that vendor's team, as a label with the reasons behind it. To produce it:

  • Conversation content: We analyse the messages in the vendor's Inbox conversation, including the vendor's own replies, together with activity in the vendor's store such as bags, draft orders and orders. Message text is analysed with the help of AI service providers acting on our behalf (see Section 4.3).
  • Payment receipts: We may read images sent in a conversation to check whether they are payment receipts. We never create an order or mark one as paid automatically.
  • Purchase history across Bizthom: We may check whether a customer's phone number is linked to recent paid orders with other stores on Bizthom. The vendor sees only a general indicator that the customer often completes purchases on Bizthom, never which stores, what was bought, or how much was paid.
  • History of labels: Changes to a conversation's label, and any correction the vendor's team makes, are recorded against the conversation so the labels can be checked and improved.

We carry out this processing on the basis of our and our vendors' legitimate interests in responding to customers promptly and running their businesses. The labels are guidance for the vendor's team: they are not used to refuse anyone service, set prices, or make any decision about a customer automatically. You can object to this processing at any time (see Section 8.6).

2.12 WhatsApp and Telegram Chats

When a vendor connects its WhatsApp number or a Telegram bot to the Bizthom Inbox:

  • Messages: messages, voice notes, photos and files sent and received on that number or bot pass through Bizthom and are stored with the vendor's Inbox history. Media is copied to our storage so it stays viewable
  • Contacts: a person who messages the vendor's WhatsApp number is saved as the vendor's contact with the name and phone number WhatsApp shows. On Telegram, the name and Telegram user ID are saved
  • AI: WhatsApp chats are read by the AI tools in Section 2.5, and Ejiro answers on WhatsApp when the vendor switches it on
  • Messages from the vendor: vendors can send their contacts campaigns and automated messages by WhatsApp, SMS and email. Customers can opt out with the unsubscribe link in an email, by replying STOP in a chat with the vendor, or by asking the vendor

Bizthom also uses its own WhatsApp Business number to send vendors account alerts and to confirm opt-outs.

2.13 Advertising and Measurement

  • On bizthom.com: we use Google Analytics and the Meta Pixel to measure our own marketing, and product analytics in the vendor dashboard. When you sign up through one of our campaigns, we send Meta your email address, phone number and first name in hashed (scrambled) form so Meta can tell us which ads brought sign-ups
  • On vendors' stores: a vendor can add its own Meta, TikTok and Google tracking to its store. Those tools run in the visitor's browser for the vendor. If the vendor connects Meta's or TikTok's conversion service, Bizthom sends that platform, on the vendor's behalf, what the visitor did (such as viewing a product, adding to bag, checking out or buying) with their email address, phone number and name in hashed form

3. How We Use Your Information

3.1 Provide and Operate the Services

  • Create and manage your account
  • Generate and host your online store
  • Process orders and track fulfillment
  • Credit earnings to your wallet and process withdrawals
  • Verify your identity (BVN verification, bank account verification)
  • Facilitate communication between vendors and customers
  • Provide AI-powered sales and engagement tools
  • Show vendors how likely the customers messaging them are to buy (see Section 2.11)
  • Write customers to your Google Contacts when you have connected Google (see Section 2.6)

3.2 Improve the Services

  • Analyse usage patterns to improve features and user experience
  • Develop new products and services
  • Fix bugs, resolve issues, and maintain platform performance
  • Conduct research and analysis (using aggregated, anonymised data)

3.3 Communicate with You

  • Send order notifications, payment confirmations, and withdrawal alerts
  • Send platform updates, feature announcements, and service notices
  • Respond to your enquiries and support requests
  • Send marketing communications (you can opt out at any time)

3.4 Safety and Compliance

  • Detect, prevent, and investigate fraud, abuse, and security threats
  • Enforce our Terms of Service and Acceptable Use Policy
  • Comply with legal obligations, court orders, and regulatory requirements
  • Respond to lawful requests from law enforcement or government authorities

3.5 Our Legal Bases

The Nigeria Data Protection Act 2023 lets us use personal information when:

  • It is needed for our contract with you: your account, store, inbox, orders, payments, payouts, plan billing and the service messages that go with them
  • The law requires it: identity (BVN) and bank verification, tax and financial records, and answering lawful requests
  • It is in our or a vendor's legitimate interests, and those interests are not outweighed by yours: preventing fraud and abuse, keeping the Services secure, fixing and improving them, measuring our own marketing, and Buy Predict (Section 2.11). You can object (Section 8.6)
  • You have consented: optional connections such as Google, Zoho and Meta, which you can withdraw at any time

For customers' information that we process for a vendor, the vendor decides the legal basis (Section 1.1).

4. How We Share Your Information

Bizthom does not sell, rent, or trade your personal information to third parties. We share your information only in the following circumstances:

4.1 With Payment Processing Partners

We share necessary information with our licensed payment processing partners (currently Paystack and Nomba) to process payments, verify identities (BVN, bank accounts), create virtual accounts, and process withdrawals. Our payment partners are bound by their own privacy policies and regulatory obligations.

4.2 Between Vendors and Customers

When a customer places an order, the vendor receives the customer's name, delivery address, phone number, and order details to fulfill the order. We do not share customer payment card details with vendors.

A vendor never receives details of a customer's orders with other stores on Bizthom. Where Buy Predict is enabled, a vendor may see only the general indicator described in Section 2.11.

4.3 With Service Providers

We may share information with third-party service providers who help us operate the Services, including:

  • Hosting, storage and delivery of files: our servers, database, backups, and the photos, voice notes and files in stores and chats
  • AI model providers: chat messages, photos, voice notes and store information, to run Ejiro and the other AI tools in Section 2.5
  • SMS, email and push notification providers: phone numbers, email addresses, device tokens and message content, to deliver order updates, sign-in codes, alerts, campaigns and automations
  • Messaging platforms: WhatsApp, Meta (Instagram and Facebook Messenger) and Telegram, to send and receive the vendor's chats
  • Analytics and error monitoring: how the dashboard and website are used, and technical details of errors
  • Domain registrar: the vendor's name, email, phone number and address, when a vendor buys a domain through Bizthom, as domain registration rules require
  • Delivery partners: the recipient's name, phone number and address, when a vendor books a delivery with a delivery company it has connected
  • Event and webinar tools: name, email and phone number, when you register for a Bizthom event
  • Accounting and inventory tools you connect: such as Zoho (Section 2.7) and Google (Section 2.6)

These providers may use your information only to provide their services to us and must keep it secure.

4.4 With Distributors

When a vendor onboards distributors, limited order and customer information may be shared with those individuals to facilitate fulfillment. This sharing is managed by the vendor, not by Bizthom.

4.5 For Legal and Safety Reasons

We may disclose your information if we believe in good faith that disclosure is necessary to:

  • Comply with applicable law, regulation, legal process, or government request
  • Enforce our Terms of Service or Acceptable Use Policy
  • Detect, prevent, or investigate fraud, security issues, or technical problems
  • Protect the rights, property, or safety of Bizthom, our users, or the public
  • Respond to a chargeback or payment dispute

4.6 Business Transfers

If Bizthom is involved in a merger, acquisition, reorganisation, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4.7 Google User Data

We do not share Google user data with third parties, advertisers, or AI/ML training systems. Where data must be transmitted to Google APIs to operate the feature you connected (e.g., writing a contact to your Google Contacts via the People API), it is sent directly to Google under your authorisation. See Section 2.6 for the full disclosure.

4.8 Meta / Facebook Data

We do not sell or share data obtained from Meta — whether Facebook Login profile data, Meta Ads reporting data, or the Facebook Messenger and Instagram Direct conversations delivered to your Inbox — with third parties for their own purposes, and we do not use it to train AI models. AI providers process conversations only on our behalf (Section 2.10). See Sections 2.8, 2.9 and 2.10 for the full disclosure.

4.9 Transfers Outside Nigeria

Our servers and database are in the United Kingdom, and photos, voice notes and files are stored in the European Union. Some providers, including AI model, email, analytics and error-monitoring providers, process information in the United States. So personal information leaves Nigeria when you use the Services.

We share it only with providers that may use it just to provide their services to us.

4.10 With Advertising Platforms

Meta and TikTok receive the hashed sign-up and store activity described in Section 2.13, and Google Analytics receives how pages are used: for Bizthom's own marketing, and for a vendor's store when that vendor connects them. Hashed details are scrambled before they leave Bizthom, but the platform can match them to its own accounts.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. Specifically:

  • Account data: Retained for the duration of your account, then for as long as needed for legal, tax and dispute resolution purposes
  • Deleting your account: You can delete your account in the Bizthom app. If you own a store, it closes at once: your website goes offline and takes no new orders. Your account is deleted within 30 days, once the money in your wallet has been sent to your bank. Your name, email, phone number, picture and sign-in details are then removed. Orders and payments stay as your business's records, without your personal details, for as long as the law requires. Signing in before then lets you keep your account.
  • Customers' information held for a vendor: kept while the vendor's account is active, unless the vendor deletes it sooner
  • Transaction records: Retained for at least six years after the tax year they relate to, as the Nigeria Tax Administration Act 2025 requires
  • Identity verification data: BVN verification records are retained for the duration of your account and as required by regulatory obligations
  • Usage and log data: Retained for as long as needed to keep the Services secure and working
  • Marketing preferences: Retained until you change them
  • Buy Predict labels: Kept with the conversation they describe and deleted with it; an objection to the cross-store indicator is kept for as long as it applies
  • Google OAuth tokens: Stored encrypted; deleted immediately when you disconnect Google or close your account. See Section 2.6 for details on the Google Contacts integration.
  • Zoho OAuth tokens: Stored encrypted and deleted when you disconnect Zoho Books and Commerce or close your account. Non-secret mappings, store identity and sync audit records are retained with your business records.
  • Meta OAuth token: Stored encrypted; deleted immediately when you disconnect Meta Ads, on a Meta data-deletion or deauthorization request, or when you close your account.
  • Meta Ads reporting data: The ad-account link, campaigns, and daily performance figures are deleted when you disconnect Meta Ads or on a Meta data-deletion request.
  • Meta DMs access tokens and account details: The Page and Instagram access tokens are stored encrypted; they and the connected Page/Instagram account details (ID, name or username, and profile picture) are deleted when you disconnect that channel from Extensions → Meta, and on a Meta data-deletion or deauthorization request.
  • Facebook Messenger and Instagram Direct conversations: Retained as part of your Inbox history under the account-data rule above, so your customer records stay intact when you disconnect the channel. Deleted on a Meta data-deletion request, or on request under Section 8.3. See Section 2.10.

After the retention period, your data will be securely deleted or anonymised. Anonymised data (which cannot be used to identify you) may be retained and used indefinitely to improve the Services.

6. Data Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of information in transit, and of secrets such as access tokens at rest
  • Secure authentication and access controls
  • Limiting access to personal information to employees and service providers who need it

However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

If a breach of personal information is likely to put people at risk, we will report it to the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and tell the people at high risk without delay, as the law requires.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Keep you logged in to your account
  • Remember your preferences and settings
  • Analyse how you use the Services
  • Improve platform performance

Types of Cookies We Use

  • Essential cookies: Required for the Services to function (login, security, session management). These are always on
  • Analytics cookies: Google Analytics and our product analytics, to understand how the website and dashboard are used
  • Advertising cookies: the Meta Pixel, to measure our own ads (Section 2.13)

Vendors' Stores

A vendor can add its own tracking tools (such as the Meta Pixel, TikTok Pixel or Google Analytics) to its store. The vendor is responsible for those tools and for asking visitors' consent to them; what each tool collects is also governed by that platform's own privacy policy.

Your Cookie Choices

You can block or delete cookies through your browser settings, and limit ad tracking in your Meta and Google account settings. Disabling essential cookies may affect the functionality of the Services.

8. Your Rights

Under the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Commission's General Application and Implementation Directive (GAID) 2025, you have the following rights:

8.1 Right of Access

You have the right to request a copy of the personal information we hold about you.

8.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal information.

8.3 Right to Deletion

You have the right to request that we delete your personal information, subject to our legal and regulatory obligations. Some information may be retained as required by law (e.g., transaction records for tax purposes).

8.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information in certain circumstances.

8.5 Right to Data Portability

You have the right to request that we provide your personal information in a structured, commonly used, and machine-readable format.

8.6 Right to Object

You have the right to object to the processing of your personal information for direct marketing purposes. You can opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us.

You also have the right to object to processing based on legitimate interests, including Buy Predict, described in Section 2.11. If you do not want your purchase history on Bizthom used for the cross-store indicator, contact us at support@bizthom.com with the phone number you use, and we will stop using it for that purpose.

8.7 Right to Withdraw Consent

Where we process your information based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8.8 Automated Decisions

You have the right not to be subject to a decision based only on automated processing that has legal or similarly significant effects on you. We do not make such decisions (Section 2.5).

To exercise any of these rights, contact our Data Protection Officer at support@bizthom.com. We will respond to your request within 30 days. If you are a vendor's customer and your request is about that vendor's records, we will pass it to the vendor and help them answer it.

9. Children's Privacy

The Services are not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete that information.

10. International Data Transfers

Your information is stored and processed outside Nigeria, in the United Kingdom, the European Union and the United States. Section 4.9 explains where and on what legal basis.

11. Third-Party Links and Services

The Services may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you interact with.

Vendors may install third-party tools (payment gateways, social media integrations, shipping providers, analytics tools) on their stores. Bizthom does not control how these third-party services use your personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on the platform. The updated policy will be effective upon posting, unless otherwise stated.

We advise that you check this page regularly, referring to the "Last updated" date above.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact us:

Bizthom Services Ltd
Abuja, Nigeria

If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).