Privacy Policy

Account information: Name, email address, phone number, and password when you register.

Order information: Delivery address, payment details (card type and last 4 digits only — we never store full card numbers), and purchase history.

Usage data: Pages visited, products viewed, search queries, and device/browser information to improve your experience.

Vendor information: Business name, CAC registration number, and verification documents submitted during onboarding.

• Process and fulfill your orders, and send order confirmations and updates.

• Personalise your shopping experience and recommend relevant products.

• Communicate with you about promotions, vouchers, and platform updates (you can opt out at any time).

• Detect and prevent fraud, abuse, and other harmful activities.

• Comply with legal obligations under Nigerian law, including the Nigeria Data Protection Act (NDPA) 2023.

We do not sell your personal data. We may share limited information with:

• Vendors: Your name, phone number, and delivery address are shared with the vendor fulfilling your order.

• Logistics partners: Delivery details are passed to couriers to complete delivery.

• Payment processors: Card transactions are processed by PCI-DSS compliant third-party gateways.

• Legal authorities: When required by law or court order.

We retain your account data for as long as your account is active. Order records are kept for 7 years for accounting and legal purposes. You may request deletion of your account and personal data at any time, subject to legal retention requirements.

We use cookies and similar technologies to keep you logged in, remember your cart, and analyse site usage. You can manage cookie preferences at any time via the Cookie Preferences option in the Help menu.

Essential cookies (authentication, cart) cannot be disabled as they are required for the platform to function.

Under the Nigeria Data Protection Act 2023, you have the right to:

• Access the personal data we hold about you.

• Correct inaccurate data via your Profile page.

• Request deletion of your data (“right to be forgotten”).

• Object to or restrict certain processing activities.

• Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, contact us at privacy@celestahub.ng.

We use industry-standard encryption (TLS/HTTPS) for all data in transit. Passwords are hashed and never stored in plain text. Access to personal data is restricted to authorised personnel only.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the platform. Your continued use of CelestaHub after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests, contact our Data Protection Officer:

Email: privacy@celestahub.ng

Address: CelestaHub Ltd, Lagos, Nigeria