Privacy policy

Krated Global Limited (RC 9619431), 366, Murtala Muhammed Way, Yaba, Lagos, Nigeria, is the data controller. Questions, corrections or complaints: support@krated.africa.

To create your account: your phone number and your name. Your phone number is how you sign in, so we cannot operate without it. An email address is optional.

To fulfil an order: what you ordered, your delivery choice and the address or pickup point it is going to, and the payment reference returned by Paystack.

To refund you: your bank name, account number and account name, collected only when a refund is actually due.

We do not ask for your BVN or NIN to place an order, and we never store your card details. Card data goes directly to Paystack, our payment processor, and never touches our servers.

You have no password. You sign in with a one-time code sent to your phone, so there is no password of yours for us to store or for anyone to steal from us.

Bank details are encrypted at rest using AES-256-GCM, and staff outside our finance role see only the last four digits of an account number.

Our database is hosted in the European Union and our servers in Germany, which means your data is transferred outside Nigeria. It is held under the same protections described here.

We share the minimum necessary, and only with:

Paystack — to take your payment. Our SMS and email providers — to send your sign-in code and order updates. Our logistics partners — the name, phone number and delivery address needed to get your goods to you.

We do not sell your data, and we do not share it for advertising.

Suppliers in China never receive your identity. They see an order, not a customer, which is deliberate: it is how we stay accountable for what arrives instead of leaving you to chase a factory.

Order and payment records are kept for seven years, which Nigerian tax and company law requires of us. Bank details collected for a refund are kept only as long as needed to complete that refund and to satisfy those same record-keeping duties.

Under the Nigeria Data Protection Act you may ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Email support@krated.africa and we will respond within 30 days.

Deletion has a limit worth stating plainly: we cannot delete records we are legally required to keep, such as the transaction history behind a completed order.

You can also complain to the Nigeria Data Protection Commission if you are unhappy with how we have handled your data.

We use browser storage to keep you signed in and to remember your cart. There is no advertising or third-party tracking on this site.

If this policy changes materially we will say so on this page and update the date at the top.