Privacy Policy

1. Overview & Data Controller

MUBATIQUE (operated by Mubeen Technology Ltd, "we", "us", "our") takes privacy and data protection seriously. This Privacy Policy details the types of personal data we collect across our website (mubatique.com) and mobile applications, why we collect it, how it is safeguarded, and your rights under the Nigeria Data Protection Act 2023 (NDPA).

2. Information We Collect

We collect only information necessary to deliver marketplace, custom tailoring, and delivery services:

A. Customer Account & Order Information

• Identity & Contact: Full name, email address, telephone number, account password.
• Delivery Addresses: Shipping address, recipient name, contact phone number, state, and local government area (LGA).
• Order History & Receipts: Transaction history, order numbers, digital receipts, and payment references.

B. Body Measurements & AI Scanner Data

• Manual Body Measurements: Bust, waist, hips, shoulder width, sleeve length, inseam, and custom fitting notes.
• AI Body Scanner / Try-On Data: Images captured solely for estimating sizing and 3D garment visualization. Images are processed securely and are never sold or shared with advertisers.

C. Vendor & Tailor Partner Information

• Business Verification: Business name, CAC registration number, contact person, business address, and phone number.
• KYC & Regulatory Compliance: National Identity Number (NIN) image, government-issued photo ID, and face verification selfies (used solely for anti-fraud validation).
• Banking & Settlement Information: Encrypted bank account numbers, bank code, account holder name, and Paystack Subaccount codes (ACCT_...) required for automated split payment disbursement.

D. Logistics & Delivery Personnel Information

• Profile photos, valid driver/rider identification, delivery assignment records, live route checkpoints, and Proof of Delivery (POD) confirmations.
• Encrypted bank account numbers, bank codes, account holder names, and Paystack Subaccount codes (ACCT_...) for automated direct dynamic split disbursement.

E. Device & Technical Information

• Firebase Cloud Messaging (FCM) device tokens (for order notifications), IP addresses, browser types, and session security cookies.

3. Purpose and Legal Basis for Processing

We process your data under legitimate business and legal bases:

• Contractual Performance: Creating your account, matching with tailors, processing orders, and orchestrating delivery.
• Legal & Regulatory Compliance: Complying with Nigerian tax reporting, anti-money laundering (AML), and Know Your Customer (KYC) requirements.
• Security & Anti-Fraud: Verifying delivery via OTP, preventing account takeovers, and validating Paystack webhook signatures.
• Legitimate Interests: Improving application performance, bug diagnostics, and resolving customer service disputes.

4. Data Sharing & Third-Party Processors

MUBATIQUE does not sell, rent, or trade your personal data. We disclose data only to trusted operational entities as required to fulfill services:

• Independent Fashion Vendors: Receive customer names, delivery addresses, and body measurements required to produce and dispatch orders.
• Logistics Partners & Riders: Receive recipient name, delivery destination, phone number, and delivery OTP for courier fulfillment.
• Paystack Payments Limited: Handles payment collection, split disbursement, and card tokenization.
• Google Firebase: Used for secure push notifications and device routing.
• Law Enforcement / Regulatory Authorities: Only when strictly mandated by court order or Nigerian statutory law.

5. Data Retention & Security Architecture

We implement enterprise-grade technical and organizational safeguards:

• All network communications are encrypted via TLS 1.3 / HTTPS.
• Sensitive banking information is encrypted at rest and access-controlled.
• National ID and verification documents are stored in private, restricted-access storage with signed URL access.
• Transactional records are retained for statutory accounting periods (minimum 6 years under Nigerian commercial law).

6. Your Data Protection Rights

Under the Nigeria Data Protection Act 2023, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal information.
• Erasure: Request deletion of your account and personal data (subject to legal recordkeeping obligations).
• Withdrawal of Consent: Opt out of marketing notifications at any time.

7. Data Protection Officer & Privacy Contacts

To exercise your privacy rights or submit a complaint, contact our Data Protection Officer:

Data Protection & Privacy Officer
MUBATIQUE (Mubeen Technology Ltd)
Email: privacy@mubatique.com
Compliance: compliance@mubatique.com