Buy Now, Pay Small Small: No Hidden Fees
Ebencolinks Logo
Ebencolinks
NDPA 2023 & NDPR Compliant

Privacy Policy

At Ebencolinks Electronics, we are deeply committed to safeguarding your privacy, building user trust, and protecting your personal data in accordance with the laws of the Federal Republic of Nigeria.

Effective & Last Updated: September 12, 2026

Privacy Policy Summary at a Glance

What we collect: Contact details, order history, payment information (via secure gateways), and social login details (Google/Facebook).
Why we process: To fulfill your electronics purchases, process deliveries, offer installment plans, and improve customer service.
No Selling of Data: We never sell your personal information to third-party marketers or advertisers.
Your Legal Rights: You have full rights under NDPA 2023 to access, correct, port, or request deletion of your personal data at any time.

1Introduction & Legal Framework

Ebencolinks Limited ("Ebencolinks", "we", "us", or "our"), operating as Ebencolinks Electronics in Nigeria, respects your personal privacy. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal information when you visit our website, register an account, purchase products (such as Smart TVs, Audio Systems, Air Conditioners, Laptops, or Appliances), or use our flexible installment payment options.

This Privacy Policy is promulgated pursuant to the Nigeria Data Protection Act 2023 (NDPA 2023), the Nigeria Data Protection Regulation 2019 (NDPR) enforced by the Nigeria Data Protection Commission (NDPC), the Federal Competition and Consumer Protection Act 2018 (FCCPA), and the Cybercrimes (Prohibition, Prevention, etc.) Act.

2Information We Collect

We collect personal information that you voluntarily provide to us when creating an account, making a purchase, subscribing to communications, or interacting with customer support.

A. Personal & Contact Information

  • First Name, Last Name, and Contact Person details.
  • Email address and Phone number (for order updates and verification).
  • Shipping address, Street address, City, State (within Nigeria), and Zip code.

B. Social Authentication Data (Google & Facebook OAuth)

If you register or log in using Google or Facebook authentication, we receive profile information authorized by your privacy settings on those platforms:

  • Facebook User ID / Google Account ID.
  • Full Name and Email Address associated with your social profile.
  • Profile Avatar/Picture URL.

Note: We do not receive access to your social media passwords, friend lists, or private messages.

C. Payment & Financial Data

All credit card, debit card, bank transfer, and USSD payments are handled directly by PCI-DSS certified payment processors (e.g., Paystack) or licensed credit providers (e.g., Klump BNPL). Ebencolinks does not store complete credit/debit card numbers or CVV codes on our servers.

D. Technical & Usage Data

  • IP address, browser type, device information, and operating system.
  • Pages visited, product search queries, cart additions, and interaction timestamps.
  • Cookies and session tokens stored locally in your browser for session security and shopping cart persistence.

3Lawful Bases & Purposes of Data Processing

In compliance with Section 25 of the Nigeria Data Protection Act (NDPA 2023), we process your personal data under the following lawful bases:

Performance of Contract

Processing orders, invoicing, handling payments, arranging door-step delivery in Nigeria, and honoring product warranties.

User Consent

Sending promotional emails, marketing newsletters, and granting permissions via Facebook/Google Social Single Sign-On.

Legal Obligation

Complying with tax reporting regulations (FIRS/LIRS), maintaining sales ledgers via Zoho Books, and responding to lawful regulatory requests.

Legitimate Interests

Preventing fraudulent transactions, enhancing site cyber-security, and optimizing website navigation performance.

4Third-Party Data Sharing & Sub-Processors

We only share your information with trusted third-party service providers who process data strictly on our behalf under confidential data protection agreements:

  • Payment Gateways (Paystack): To process card transactions, bank transfers, and generate payment receipts.
  • Installment Providers (Klump BNPL): To process eligibility for "Pay Small Small" weekly/monthly installment purchases.
  • Accounting & Logistics ERP (Zoho Books & Zoho Inventory): For customer record synchronization, stock allocation, and official sales invoicing.
  • Email Services (ZeptoMail / Zoho): To dispatch automated verification codes, order receipts, and delivery notifications.
  • Logistics & Courier Partners: Delivery agencies and drivers fulfilling orders within Lagos and across Nigeria.

5Your Legal Data Rights (NDPA 2023)

Under the Nigeria Data Protection Act 2023, as a data subject, you possess the following enforceable rights:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Update or correct inaccurate or incomplete profile information.
Right to Erasure ("Right to be Forgotten"): Request deletion of your account and personal records.
Right to Withdraw Consent: Revoke consent for email marketing or social logins at any time.

Facebook / Google OAuth Data Deletion Requests

To request the deletion of data collected via Facebook or Google OAuth, navigate to your Account Profile and select "Delete Account" or email our Data Protection Officer at privacy@ebencolinks.com with the subject line "Data Deletion Request".

6Data Security & Retention

We implement robust technical and organizational security measures—including SSL/TLS encryption for data in transit, bcrypt password hashing, HTTP-only cookies, and restricted administrative access controls—to protect against unauthorized access, loss, or alteration.

We retain personal data for as long as your account remains active or as needed to provide services, resolve disputes, and satisfy legal accounting retention requirements (up to 7 years under Nigerian financial reporting standards).

Contact Our Data Protection Officer (DPO)

If you have any questions, concerns, or requests regarding this Privacy Policy or your data rights, please contact our Data Protection Officer:

Office AddressLekki Phase 1, Lagos, Nigeria

You also have the right to lodge a complaint directly with the Nigeria Data Protection Commission (NDPC) via email at info@ndpc.gov.ng if you believe your data protection rights have been infringed.