Privacy Policy

Who we are and how to reach us

ICON Tech & Ecom Services Ltd is the data controller for personal data collected through this website. Obana.Africa is a trademark of ICON Tech & Ecom Services Ltd.

• Email: contact@obana.africa
• Phone / WhatsApp: +234 809 653 5511
• Address: 77 Opebi Road, Ikeja, Lagos, Nigeria

For any privacy question, request or complaint, email contact@obana.africa with “Privacy” in the subject line.

Information we collect

Information you give us. We only ask for what a request actually needs:

• Contact enquiries: first and last name, email address, phone number and the content of your message.
• Quote and sourcing requests: name, email, phone number, business name and stage, product or fabric descriptions, brands, quantities and MOQs, size and specification ranges, target price or budget, intended use, design and trademark details, and any comments you add.
• Files you upload: sample product images, logos, business plans and similar attachments you choose to send with a request.
• Logistics and shipment bookings: sender and receiver names, email addresses, phone numbers, pickup and delivery addresses, city, state, country and postcode, plus item descriptions, weights, dimensions and declared values.
• Newsletter: your email address.
• Vendor, partner and seller applications: the business and contact details you submit when you apply to sell or partner with us.

Where you give us details about someone else — a shipment receiver, for example, or a colleague we should contact — you confirm you are allowed to share their information with us and that they have been told about this policy.

Information collected automatically. When you visit the site, our hosting and security infrastructure records technical data such as your IP address, browser and device type, referring page, pages viewed and the time of your visit. We use this to keep the site available, secure and working properly. Cookies and similar browser storage are covered separately in our Cookie Policy.

We do not deliberately collect special categories of personal data (such as health, religion or biometric data) through this website. Please do not include such information in free-text fields or attachments.

How we use your information

We use personal data to:

• respond to your enquiry and prepare, send and follow up on quotes;
• source products, arrange production or trademark and incubation services, and manage the resulting orders;
• arrange, price, book and track domestic and international shipments;
• verify and onboard vendors, sellers and partners, including standard anti-fraud and due-diligence checks;
• send transactional messages such as confirmations and status updates;
• send marketing emails and newsletters where you have subscribed or where we are otherwise permitted to;
• protect the site against spam, abuse and fraudulent submissions — our contact form uses Google reCAPTCHA for this;
• understand which services are in demand so we can improve them; and
• meet our legal, tax, customs and regulatory obligations, and establish or defend legal claims.

We do not sell your personal data, and we do not use it to make decisions about you by purely automated means that produce legal or similarly significant effects.

Our legal basis for processing

We rely on the following lawful bases under the Nigeria Data Protection Act 2023 — and, where it applies to you, the UK/EU GDPR:

• Performance of a contract — or steps you ask us to take before entering one — when we quote, source, fulfil, ship or invoice.
• Consent — for newsletter subscriptions and non-essential marketing. You can withdraw consent at any time without affecting processing already carried out.
• Legitimate interests — to secure our site, prevent fraud, keep business records, and market comparable services to existing business contacts, balanced against your rights.
• Legal obligation — to meet tax, customs, accounting and regulatory requirements.

Our specific obligations under each regime are set out in our NDPA compliance statement and our GDPR notice.

Who we share your information with

We share personal data only where there is a reason to, and only with:

• Suppliers, manufacturers and sourcing partners— the details needed to price and produce what you have asked for.
• Logistics providers, carriers and customs agents— sender and receiver details and item information needed to collect, clear and deliver a shipment.
• Technology providers who process data on our behalf — including Zoho (CRM, business email and email campaigns), Google (Sheets, reCAPTCHA), Cloudinary (file and image storage) and our hosting provider.
• Payment and financial partners — where a transaction needs to be processed or financed.
• Professional advisers — auditors, insurers and lawyers, under duties of confidentiality.
• Authorities — where disclosure is required by law, court order or a valid regulatory request, or to protect our rights, safety or property.
• A buyer or successor — if the business or its assets are reorganised, merged or sold, subject to this policy.

Our processors are bound by contract to use your data only on our instructions and to keep it secure.

International transfers

Obana operates across Sub-Saharan Africa and works with suppliers and service providers outside Nigeria, so your data may be transferred to and stored in other countries — including where our technology providers host their infrastructure.

Where we transfer personal data out of Nigeria, we do so on a basis permitted by the Nigeria Data Protection Act 2023: to a country with adequate protection, under contractual safeguards with the recipient, with your consent, or where the transfer is necessary to perform a contract with you. You can ask us for details of the safeguards used.

How long we keep it

We keep personal data only as long as we need it for the purpose it was collected for:

• Enquiries and quotes that do not convert — typically up to 24 months, so we can pick up the conversation if you come back to us.
• Customer, vendor and shipment records — for the life of the relationship and then as long as tax, customs and accounting law requires (generally at least six years).
• Newsletter subscriptions — until you unsubscribe, plus a short suppression record so we do not email you again by mistake.
• Uploaded files — for as long as needed to service the request, then deleted or anonymised.

How we protect your information

We use encryption in transit (HTTPS), access controls and role-based permissions, vetted service providers, and bot protection on public forms. Access to enquiry and customer records is limited to staff who need it to do their job.

No method of transmission or storage is completely secure. If a breach occurs that is likely to put your rights at risk, we will notify the Nigeria Data Protection Commission and affected individuals as required by law.

Your rights

Subject to the conditions in applicable law, you may:

• ask for a copy of the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• ask us to delete data we no longer have a good reason to keep;
• ask us to restrict how we use your data;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• request your data in a portable, machine-readable format; and
• withdraw consent you have given.

Email contact@obana.africa to exercise any of these. We will respond within 30 days and may ask you to verify your identity first. Every marketing email also carries an unsubscribe link.

If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission or to the data protection authority where you live.

Children

Obana is a business-to-business service and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

Third-party sites and Obana platforms

This site links to other Obana platforms and to third-party sites we do not control, including our blog, shop, logistics and vendor portals, and social media pages. Once you leave obana.africa, this policy no longer applies — please read the privacy notice of the site you move to.

Changes to this policy

We may update this policy as our services, partners or legal obligations change. The revised version takes effect when posted here, and the “last updated” date at the top will tell you when that was. If a change materially affects how we use your data, we will give you clearer notice — by email or a notice on the site.

Contact us

Questions about this policy, or about how we handle your data? Reach us at contact@obana.africa, on +234 809 653 5511, or through our contact page.