Privacy Policy

Effective date: 2026-07-31

Javern Fashion, operated by Nixon Cloud Limited ("Javern", "we", "our", "us"), is committed to protecting your privacy. This Privacy Policy explains what personal data we collect when you use javern.com, the Javern shopping app, and the Javern Vendor app (together, the "Services"), how we use it, who we share it with, and the rights you have over it. By using the Services, you agree to this Privacy Policy.

1. Who this policy applies to

This policy applies to everyone who interacts with the Services — Buyers, Vendors, and website visitors — regardless of country. Where local law grants stronger rights, those local rights apply.

2. Information we collect

2.1 Information you give us

• Account details — name, email, phone number, password, date of birth, and (for Vendors) BVN, store name, business details, and bank account information.
• Profile information — profile picture, username, addresses, saved payment cards (via Paystack tokens, not full card numbers).
• Order information — items ordered, quantities, prices, shipping address, and delivery notes.
• Chat and messaging — messages, images, and attachments you send in the Buyer-Vendor chat.
• Support communications — messages, emails, and files you send to Javern support.
• Store content — product listings, photos, descriptions, and store branding submitted by Vendors.

2.2 Information we collect automatically

• Device and connection data — IP address, device type, operating system, app version, browser, timezone, and language.
• Usage data — pages viewed, buttons tapped, items browsed, search queries, and time spent.
• Push notification tokens — used to send you order updates and campaign messages.
• Cookies and similar technologies — see the Cookie Policy.

2.3 Information from third parties

• Payments and identity verification — Paystack shares back payment confirmations, BVN verification results, and dedicated virtual account details.
• Analytics providers — aggregated usage data.
• Marketing partners — where you engage with a promotion or referral programme.

3. How we use your data

We use your data to:

• Run the Services — create and manage your account, process orders, credit and debit your wallet, generate and validate one-time codes, send you order updates, and enable the Buyer-Vendor chat.
• Process payments and payouts — through Paystack, including BVN verification, virtual account creation, and bank transfers.
• Support and dispute resolution — respond to your enquiries, mediate disputes, and investigate reports of fraud or abuse.
• Security and fraud prevention — detect and prevent unauthorised access, spam, fraud, and abuse.
• Improve the Services — analyse how the Services are used to fix bugs, add features, and improve reliability.
• Marketing and communications — send you order-related notifications, and (where you've opted in) promotional emails, push notifications, and campaign messages from Vendors you follow.
• Legal compliance — meet obligations under Nigerian law and cooperate with lawful requests from courts, regulators, or law enforcement.

4. Legal basis for processing

Where applicable law requires a legal basis for processing, we rely on:

• Performance of a contract — to fulfil our obligations under the Terms of Service.
• Consent — for optional processing such as marketing communications; you can withdraw consent at any time.
• Legitimate interests — for fraud prevention, security, product improvement, and platform moderation, balanced against your rights.
• Legal obligation — for tax, accounting, and regulatory compliance.

5. Who we share your data with

We only share your data where we need to, and only what's necessary:

• Between Buyers and Vendors — Vendors receive Buyer name, delivery address, phone number, and Order details so they can fulfil orders. Buyers see Vendor store name, contact details published on the store page, and communicate via the order chat.
• Payments and financial services — Paystack, our sole payment processor, receives payment, refund, BVN, and transfer information.
• Infrastructure and service providers — cloud hosting (backend and database), Firebase (chat, push notifications), Cloudinary (image storage), email delivery, and analytics. These providers process data on our behalf under contractual confidentiality and security obligations.
• Law enforcement and regulators — where required by court order, subpoena, or applicable law.
• In the event of a corporate transaction — if Javern is acquired, merged, or restructured, your data may be transferred to the successor entity subject to this Privacy Policy.

We do not sell your personal data to third parties.

6. Data retention

We keep your data for as long as your account is active and afterwards for:

• Order and payment records — up to 7 years, for tax, accounting, and dispute resolution.
• Chat logs — up to 3 years after the related order is closed.
• Support tickets — up to 3 years after resolution.
• Marketing preferences — until you unsubscribe or delete your account.
• Device and usage logs — up to 12 months.
• BVN verification records — kept for as long as your Vendor Wallet is active; retained per Nigerian financial regulations after closure.

We may retain data longer where required by law or for the establishment, exercise, or defence of legal claims.

7. How we protect your data

• Passwords are stored using one-way hashing — nobody at Javern can read them.
• Card details are tokenised through Paystack and are never stored on Javern servers in a readable form.
• Sensitive traffic runs over encrypted connections (HTTPS/TLS).
• Access to production systems is restricted, logged, and reviewed.
• We regularly review our security practices.

No online system is perfectly secure, and we cannot guarantee absolute protection. If you believe your account has been compromised, see How do I secure my account?.

8. Your rights

Depending on your jurisdiction, you have some or all of the following rights over your personal data:

• Access — request a copy of the data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request that we delete your account and associated data, subject to legal retention requirements.
• Restriction — ask us to limit how we process your data in certain situations.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — for any processing based on your consent.
• Complain — lodge a complaint with the Nigeria Data Protection Commission (NDPC) or your local data protection authority.

To exercise any of these rights, contact our support team or email privacy@javern.com.

9. Children

The Services are not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International transfers

Some of our service providers process data outside Nigeria. Where we transfer your data internationally, we use recognised safeguards such as standard contractual clauses or equivalent protections.

11. Cookies

See the separate Cookie Policy for details on the cookies and similar technologies we use.

12. Third-party links

The Services may contain links to third-party sites (for example, courier tracking pages or Vendor social profiles). We are not responsible for the privacy practices of those third parties — read their own policies before sharing data with them.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we'll notify you through the Services, by email, or by push notification. The "Effective date" at the top shows the latest version.

14. Contact us

For questions about this Privacy Policy or your data:

• Email — privacy@javern.com
• Support — contact our support team