ONESTOP PHONES AND GADGETS

Privacy Policy

www.onestop.ng

Effective Date: 1 June 2026 | Last Updated: June 2026

1. Introduction and Our Commitment to Your Privacy

OneStop Phones and Gadgets (“OneStop,” “we,” “us,” or “our”) operates the e-commerce website located at www.onestop.ng (the “Site”) and associated in-store services. We are committed to protecting the privacy and personal data of every person who visits, browses, or makes a purchase on our Site.

This Privacy Policy explains what personal information we collect, how we use and protect it, with whom we share it, and what rights you have in relation to your data. It applies to all users of the Site, including registered account holders, guests, and visitors.

By accessing or using the Site, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Site immediately.

2. Identity of the Data Controller

The data controller responsible for your personal information is:

OneStop Phones and Gadgets

Website: www.onestop.ng

Country of Operation: Federal Republic of Nigeria

Regulatory Framework: Nigeria Data Protection Act 2023 (NDPA); Nigeria Data Protection Regulation 2019 (NDPR)

For all data protection enquiries or to exercise any of your rights under this Policy, please contact us at the details set out in Section 16 of this Policy.

3. Information We Collect

We collect personal information through various means, including directly from you, automatically through your use of the Site, and from third parties where applicable.

3.1 Information You Provide Directly

When you interact with the Site, create an account, place an order, or contact us, you may provide:

Full name and contact information, including email address, phone number, and delivery address;
Billing information, including payment card details processed through a secure payment gateway;
Account credentials, including username and password;
Order details, including items purchased, order history, and transaction records;
Communications you send us, including support requests, feedback, and enquiry messages;
Any information provided when participating in promotions, surveys, or loyalty programmes.

3.2 Information Collected Automatically

When you visit or navigate the Site, we automatically collect certain technical data, including:

IP address and approximate geographical location;
Browser type, version, and operating system;
Device identifiers and screen resolution;
Pages visited, time spent on each page, and navigation paths;
Referring website or search engine;
Cookie identifiers and session data (see Section 9 on Cookies).

3.3 Information from Third Parties

We may receive personal information from third parties in limited circumstances, including:

Payment processors for the purpose of verifying and completing transactions;
Logistics and delivery partners for the purpose of fulfilling orders;
Social media platforms where you choose to connect your account or log in via a social login feature;
Fraud prevention and identity verification service providers.

4. How We Use Your Information

We process your personal data only for specified, lawful purposes. The primary purposes for which we use your information are:

4.1 To Fulfil Your Orders and Provide Our Services

Processing, confirming, and fulfilling purchase transactions;
Arranging delivery or in-store collection of orders;
Managing account registration and authentication;
Providing customer support and responding to enquiries;
Processing returns, exchanges, and after-sales service requests.

4.2 For Security and Fraud Prevention

Verifying your identity and preventing fraudulent transactions;
Detecting, investigating, and reporting suspicious activity or stolen devices;
Maintaining the security and integrity of the Site and our systems.

4.3 For Legal and Regulatory Compliance

Meeting our obligations under Nigerian law, including tax, consumer protection, and data protection legislation;
Responding to lawful requests from regulatory authorities or law enforcement;
Maintaining transaction records as required by applicable law.

4.4 For Marketing and Communications (With Your Consent)

Sending promotional emails, SMS messages, or notifications about new products, offers, and services;
Personalising your experience on the Site based on your browsing and purchase history;
Inviting you to participate in surveys, reviews, or loyalty programmes.

You may withdraw your consent to marketing communications at any time by clicking the unsubscribe link in any marketing email, updating your account preferences, or contacting us directly. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

5. Legal Basis for Processing Your Personal Data

In accordance with the Nigeria Data Protection Act 2023, we process your personal data on the following legal bases:

Contractual Necessity: Processing required to fulfil a purchase contract or provide services you have requested;
Legal Obligation: Processing necessary to comply with applicable Nigerian law;
Legitimate Interests: Processing for fraud prevention, site security, and improving our services, where such interests are not overridden by your rights;
Consent: Processing for direct marketing or non-essential cookies, where you have provided clear, informed consent.

6. How We Share Your Information

OneStop does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share your data only in the following circumstances and only to the extent necessary:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers who process data on our behalf, including:

Payment processors and financial institutions for transaction processing;
Logistics, courier, and delivery companies for order fulfilment;
Cloud hosting and IT infrastructure providers;
Customer support software providers;
Email and SMS marketing platforms (only where you have consented to receive communications).

All service providers are contractually required to process your data securely and only for the specific purposes authorised by OneStop.

6.2 Legal and Regulatory Disclosure

We may disclose your personal information where required or permitted by law, including:

To comply with a court order, subpoena, or lawful request from a government or regulatory authority;
To investigate, prevent, or take action against suspected fraud, theft of devices, or other illegal activities;
To protect the rights, property, or safety of OneStop, our customers, or the public.

6.3 Business Transfers

In the event that OneStop undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Site prior to any such transfer and ensure that the receiving entity is bound by privacy protections consistent with this Policy.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The following retention principles apply:

Account information is retained for the duration of your account and for a period of three (3) years following account closure or last activity;
Transaction and order records are retained for a minimum of six (6) years in accordance with Nigerian tax and commercial record-keeping requirements;
Marketing consent records are retained for the period of active consent and for six (6) months following withdrawal;
Technical and log data is typically retained for a maximum of twelve (12) months.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in a manner that prevents re-identification.

8. Data Security

OneStop implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption for all data transmitted between your browser and the Site;
Secure payment processing through Payment Card Industry Data Security Standard (PCI DSS) compliant payment gateways; OneStop does not store full payment card details on its servers;
Access controls restricting access to personal data to authorised personnel only, on a need-to-know basis;
Regular security assessments and vulnerability monitoring of our systems;
Staff training on data protection and privacy obligations.

While we take all reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account and to notify us immediately if you suspect any unauthorised access.

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by a website to remember information about your visit. We also use similar technologies such as web beacons, pixels, and local storage.

9.2 Cookies We Use

Strictly Necessary Cookies: Essential for the Site to function, including shopping cart and session management. These cannot be disabled.
Performance and Analytics Cookies: Help us understand how visitors use the Site, enabling us to improve functionality and user experience.
Functionality Cookies: Remember your preferences, such as language settings and login status.
Marketing and Targeting Cookies: Track your browsing activity to deliver relevant advertisements. These are only deployed with your consent.

9.3 Managing Cookies

You may control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Site. You may also adjust your cookie preferences at any time via the cookie consent banner displayed on your first visit to the Site.

10. Third-Party Links and External Websites

The Site may contain links to third-party websites, payment platforms, and social media channels. These third-party sites operate independently and are governed by their own privacy policies. OneStop is not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policy of any external site before providing your personal information.

11. Children’s Privacy

The Site is not directed at or intended for use by children under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately and we will take steps to delete such information from our records.

12. International Data Transfers

OneStop operates primarily within Nigeria and processes personal data within the Federal Republic of Nigeria. Where it is necessary to transfer personal data to service providers or technology platforms located outside Nigeria, such transfers will be made only to jurisdictions that provide an adequate level of data protection, or subject to appropriate safeguards such as data processing agreements and standard contractual clauses, in accordance with the Nigeria Data Protection Act 2023.

13. Your Data Protection Rights

Under the Nigeria Data Protection Act 2023 and related regulations, you have the following rights in relation to your personal data:

Right of Access: You may request confirmation of whether we process your personal data and obtain a copy of that data.
Right to Rectification: You may request that we correct inaccurate or incomplete personal data held about you.
Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to applicable legal obligations.
Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances.
Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transmission to another service provider.
Right to Object: You may object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
Right to Lodge a Complaint: You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data protection rights have been violated.

To exercise any of the above rights, please submit a written request to us using the contact details in Section 16. We will respond to all verified requests within thirty (30) days in accordance with applicable law. We may require you to verify your identity before processing any request.

14. Marketing Communications and Opt-Out

Where you have consented to receive marketing communications, we may contact you by email, SMS, or push notification with information about new products, promotions, and offers from OneStop.

You may opt out of marketing communications at any time by:

Clicking the “Unsubscribe” link in any marketing email;
Replying “STOP” to any promotional SMS;
Updating your communication preferences in your account settings on www.onestop.ng;
Contacting our team directly at the details provided in Section 16.

Please note that opting out of marketing communications will not affect transactional communications, including order confirmations, shipping notifications, and responses to your direct enquiries.

15. Changes to This Privacy Policy

OneStop reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. The most current version of this Policy will always be available at www.onestop.ng/privacy-policy, with the effective date clearly indicated at the top of the document.

Where any material change is made to this Policy, we will notify you by email (where we hold your email address) or by a prominent notice on the Site prior to the change taking effect. Your continued use of the Site after the effective date of any amendment constitutes acceptance of the updated Policy.

16. Contact Us and Data Protection Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy, your personal data, or your data protection rights, please contact us through the following:

OneStop Phones and Gadgets — Data Protection Team

Website: www.onestop.ng

Email: info@onestop.ng

Phone: +234 201 330 9492 or Whatsapp: +234 912 122 5959

Address: Police Station Junction, Beside First Warri Park, Abraka, Delta State, Nigeria.

We are committed to resolving all data protection concerns promptly and fairly. If you remain unsatisfied with our response, you may escalate your complaint to the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng.

17. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act 2023, the Nigeria Data Protection Regulation 2019, the Federal Competition and Consumer Protection Act 2018, and any other applicable federal legislation relating to data protection and privacy.

Any dispute arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of the Federal Republic of Nigeria.

OneStop Phones and Gadgets — Committed to Your Privacy and Trust