Privacy Notice

Effective date: 9TH OCTOBER

Data controller/operator contact: [admin@attportal.name.ng]

1. PURPOSE
This notice explains how Achievers Market Place collects, uses, stores, shares and protects information when people register, browse, sell, buy, contact support or participate in a dispute.

2. INFORMATION WE MAY COLLECT
Depending on the user's activity, AMP may collect name, email address, phone number, account ID, password hash, seller application and business details, product listings, order items, delivery address, order and payment references, buyer confirmation, dispute evidence, reviews, payout bank name/account name/account number, security logs and communications with support. Passwords must be stored using WordPress's secure password-hashing functions and must never be stored or sent in readable form.

3. HOW WE USE INFORMATION
We use information to create and secure accounts; issue Buyer IDs and Seller IDs; review seller applications; display seller storefronts and listings; process and track orders; verify payment status; manage delivery, refunds, disputes and payouts; provide support; detect fraud and abuse; maintain financial and audit records; improve the platform; and meet applicable legal or provider obligations.

4. PUBLIC INFORMATION
A seller's public storefront may show the store name, seller display name, profile/store image, description, public listings, prices, public reviews and Seller ID or verification badge if AMP enables those fields. Public pages must not expose a seller's private email, phone, identity documents, home address, bank details or internal verification notes unless the seller has specifically chosen to publish permitted contact information.

5. PAYMENT AND BANK INFORMATION
Payment providers process payment data under their own terms and privacy notices. AMP should retain only the provider references and transaction details reasonably needed for verification, reconciliation, refunds, fraud prevention and accounting. Seller bank details are collected for payout purposes, access is limited to authorized personnel, and stored account numbers should be encrypted and masked in routine views. AMP must not put full account numbers, passwords or secret API keys in email notifications or ordinary audit logs.

6. SHARING
AMP may share necessary information with payment providers, delivery/fulfilment partners, hosting and technical service providers, authorized administrators, and competent authorities where required or permitted by law. Information should be shared only to the extent necessary for the relevant task, with appropriate safeguards. AMP does not make private seller payout details public.

7. SECURITY
AMP uses access controls, secure password handling, nonces and request validation, limited administrative permissions, audit records and reasonable technical safeguards. No internet service can guarantee absolute security. Users should protect their credentials, use a unique password and promptly report suspected account compromise.

8. RETENTION
AMP retains account, order, payment, refund, payout, dispute and audit information for as long as reasonably needed for the purposes described above, to resolve disputes, maintain financial records, prevent abuse and comply with legal obligations. Retention periods should be defined and reviewed by the operator. Data no longer required should be securely deleted or anonymized where appropriate.

9. USER REQUESTS
Subject to applicable law and legitimate record-retention needs, users may contact AMP to request access to or correction of their account information, raise a privacy concern, or request deletion/closure of an account. Some transaction records may need to be retained even after account closure.

10. COOKIES AND TECHNICAL DATA
AMP/WordPress may use essential cookies or similar technical mechanisms for login sessions, cart continuity, security and site functionality. Any analytics or optional tracking should be disclosed and configured in line with applicable requirements.

11. CHILDREN
The marketplace is not intended to collect information from children who cannot legally participate in transactions without appropriate authorization. If AMP becomes aware that an account was created in violation of applicable age requirements, it may restrict the account and take appropriate steps.

12. CHANGES AND CONTACT
AMP may update this notice when its practices or legal obligations change. The current version and effective date should be displayed on the Marketplace. For privacy questions or requests, contact [support@attportal.name.ng].