Effective Date: 31st December 2025 | Version 2.0 Applies to: zitt.com.ng, and all orders/interactions via WhatsApp, phone, or in-person with Zitt Communications Governing framework: Nigeria Data Protection Act, 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR)

1. 📋 Introduction

Zitt Communications (“Zitt”, “we”, “us”, “our”) respects your privacy and is committed to protecting the personal data of everyone who visits zitt.com.ng, places an order, or contacts us via WhatsApp, phone, or email. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, who we share it with, and the rights you have over it.

By using zitt.com.ng or placing an order with us, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, please do not use our website or services, or contact us using the details in Section 15 to discuss your concerns.

2. 🏢 Who We Are (Data Controller)

Zitt Communications is the data controller responsible for your personal data under this policy.

Registered/Office Address: Suite 3, Kembi Igbore Plaza, Alishiba Bus/Stop, Sango-Otta, Ogun State, Nigeria

Contact: 08143910261 | support@gmail.com

CAC Registration Number: 1977076

3. 📦 What Personal Data We Collect

We do not intentionally collect sensitive personal data (e.g., health information, religious or political beliefs, biometric data) and ask that you do not share such information with us unless directly necessary to resolve a support issue.

4. 🎯 How and Why We Use Your Data (Purpose & Legal Basis)

Under the NDPA, we must have a valid legal basis for every use of your personal data. The table below sets these out.

5. 💳 Payment Data & Paystack

Zitt does not store your full card number, CVV, or bank login details on our own systems. Payments made via card or bank transfer are processed directly by Paystack, a licensed and PCI-DSS-compliant payment processor. Paystack’s handling of your payment data is governed by Paystack’s own privacy policy, which we encourage you to review at paystack.com.

For Cash-on-Delivery (COD) orders, we retain only the transaction reference for the deposit paid via Paystack, plus a record that the balance was collected in cash by our logistics partner at delivery.

6. 🚚 Sharing Your Data

We share your personal data only where necessary to fulfill your order or comply with the law:

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

7. 🍪 Cookies & Tracking Technologies

zitt.com.ng uses cookies and similar technologies, including:

• Google Analytics (Site Kit) — to understand how visitors use our site (pages visited, time on site, traffic sources)
• Meta Pixel — for advertising and retargeting purposes, including measuring the effectiveness of our ads on Facebook/Instagram
• Essential cookies to keep items in your cart between visits and remember your session

Data collected through Google Analytics and Meta Pixel is subject to Google’s and Meta’s own privacy policies respectively, in addition to this policy. You can control or disable cookies through your browser settings, and you may opt out of Meta’s ad tracking through your Facebook/Instagram ad preferences. Disabling cookies may affect some site functionality (e.g., cart persistence).

8. 🗄️ Data Retention

We retain personal data only for as long as necessary for the purposes set out in this policy:

After the applicable retention period, personal data is securely deleted or anonymized unless a longer period is required by law.

9. 🔐 Data Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration, including:

• Restricting access to customer data to staff who need it to perform their role
• Using secure, PCI-DSS-compliant third parties (Paystack) for payment processing rather than storing card data ourselves
• Requiring logistics partners to handle delivery information only for the purpose of completing delivery

No method of transmission or storage is 100% secure. If we become aware of a data breach affecting your personal data, we will notify affected customers and, where required, the Nigeria Data Protection Commission (NDPC), in line with Section 10.

10. 🚨 Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, Zitt will:

1. Assess and contain the breach as quickly as possible.
2. Notify the Nigeria Data Protection Commission (NDPC) within the timeframe required under the NDPA.
3. Notify affected customers directly where the breach poses a significant risk, describing what happened and what steps we’re taking.

11. ⚖️ Your Rights Under the NDPA

As a data subject, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data, subject to our legal obligations to retain certain records (e.g., financial records)
• Restriction — request that we limit how we use your data in certain circumstances
• Object — object to processing based on legitimate interest, including direct marketing
• Withdraw consent — withdraw consent for marketing communications at any time, without affecting the lawfulness of processing before withdrawal
• Data portability — request your data in a structured, commonly used format, where technically feasible
• Lodge a complaint — with the Nigeria Data Protection Commission (NDPC) if you believe we have mishandled your data

To exercise any of these rights, contact us using the details in Section 15. We will respond within the timeframe required under the NDPA, and may need to verify your identity before actioning a request.

12. 📲 Marketing Communications

We may send you promotional messages via WhatsApp, SMS, or email about new products, offers, or updates, but only if you have opted in.

• You can opt out at any time by replying “STOP” to any WhatsApp/SMS message, unsubscribing via any marketing email, or contacting support directly.
• Opting out of marketing does not affect transactional messages (order confirmations, dispatch updates, delivery notifications), which are necessary to fulfill your order and will continue regardless.

13. 🧒 Children’s Privacy

zitt.com.ng and our services are not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

14. 🌍 International Data Transfers

zitt.com.ng and the personal data we collect are hosted on servers located in the United States. In addition, Google Analytics (Site Kit) and Meta Pixel, used on our website, process data on servers outside Nigeria.

This means your personal data is transferred outside Nigeria as part of the ordinary operation of our website. Under the NDPA, cross-border transfers of personal data are permitted where the receiving country provides an adequate level of data protection, or where appropriate safeguards are in place (such as standard contractual clauses with our hosting and service providers).

By using zitt.com.ng, you acknowledge that your personal data will be processed in the United States and other jurisdictions where our service providers (including Google and Meta) operate, and that these jurisdictions may have different data protection laws than Nigeria.

15. 📞 Contact Us / Data Protection Enquiries

For any questions about this Privacy Policy or to exercise your data protection rights, contact:

📱 WhatsApp/Call: 09113001960 | 09115665493 📧 Email: support@gmail.com 🏢 Office: Suite 3, Kembi Igbore Plaza, Alishiba Bus/Stop, Sango-Otta, Ogun State 🕐 Support hours: 10am – 4pm (Mon–Sat)

Privacy and data protection enquiries are handled through our general Customer Support channels above.

16. 🔄 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Effective Date” at the top will be updated accordingly. We encourage you to review this page periodically. Material changes affecting how we use your data will be communicated directly where required by law.

17. 📝 Revision History