What we collect, why we collect it, and how we look after it.

We collect as little as we need. This page explains what we hold, who processes it, and the rights you have over it.

Effective: [EFFECTIVE DATE]. Draft: under review — not yet in force.

1. Who we are

The digital ebook store at patakemvingir.com is operated by [LEGAL ENTITY NAME], registered in the Federal Republic of Nigeria at [REGISTERED BUSINESS ADDRESS]. We are the data controller for personal data collected through the Store.

Data protection contact: books@patakemvingir.com · [DPO / PRIVACY CONTACT NAME, if separate].

2. What we collect

2.1 When you buy an ebook

the email address you provide at checkout;
the ebook title, price, order reference, timestamp, and payment status;
metadata Paystack returns about the transaction (e.g. reference, currency, status). We do not receive or store your full card details.

2.2 When you subscribe to the newsletter

your email address and the time you subscribed.

2.3 Basic technical data

Like most websites, our hosting provider (Netlify) records standard server logs — including IP address and user-agent — for security, abuse prevention, and traffic diagnostics. These logs are retained for a short operational period.

3. How we use your data

to process your order, send your receipt, and deliver your download link;
to answer support requests and issue refunds where applicable;
to prevent fraud, abuse, and unauthorised access;
to send our newsletter, only where you have opted in, until you unsubscribe;
to meet legal and accounting obligations.

4. Legal basis

We process order and delivery data on the basis of the contract we form with you when you place an order. We process newsletter data on the basis of your consent, which you can withdraw at any time. We process security and log data on the basis of our legitimate interest in keeping the Store safe.

5. Who processes it on our behalf

We use a small number of specialist providers to run the Store. Each of them processes personal data only on our instructions and under a contract that requires appropriate security.

Provider	Purpose	Region
Paystack	Payment processing	Nigeria
Resend	Transactional email (receipts, download links, refund notices)	European Union (eu-west-1)
Supabase	Database and encrypted file storage for order records and ebook files	European Union (eu-west-1)
Netlify	Website and serverless function hosting	Served from a global content delivery network

Each provider maintains its own privacy notice. Where these providers process data outside Nigeria, we rely on appropriate safeguards permitted under the Nigeria Data Protection Act and the NDPR.

6. How long we keep it

Order records: retained for [RETENTION PERIOD, e.g. 7 years] to meet Nigerian tax and accounting requirements.
Ebook download entitlements: retained for the lifetime of the order.
Newsletter subscriptions: retained until you unsubscribe.
Server logs: retained for [RETENTION PERIOD, e.g. 30 days] by our hosting provider.
Support correspondence: retained for [RETENTION PERIOD] after the ticket is closed.

7. Your rights

Under the Nigeria Data Protection Act and the Nigeria Data Protection Regulation (NDPR), you have the right to access the personal data we hold about you, to request correction of inaccurate data, to request deletion where we are not required to keep it, to object to certain uses, and to withdraw consent where our processing is based on consent. To exercise any of these rights, email books@patakemvingir.com with enough detail for us to locate your record (order reference or subscribed email address).

You also have the right to complain to the Nigeria Data Protection Commission (NDPC) if you believe we have handled your data unlawfully. We would appreciate the chance to address your concern first.

8. Cookies

The public parts of the Store do not set marketing or analytics cookies. The admin area uses a session cookie strictly necessary for authenticated staff access. If we add analytics or embedded media in future, this section will be updated and, where required, a cookie notice will be shown.

9. Security

Payments are handled by Paystack over TLS; we never see or store card numbers. Ebook files live in a private storage bucket and are only served via short-lived signed URLs tied to a specific order. Access to our systems by staff is restricted and audited.

10. Children

The Store is not directed at children under the age of 18 and we do not knowingly collect personal data from them. If you believe a child has provided us with data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The current version is always published on this page, with the effective date shown above. Material changes affecting existing customers will be flagged where reasonably practical.

12. Contact

Privacy questions: books@patakemvingir.com.