Privacy Policy

PERSONAL DATA CONTROLLER

Pappipo Enterprise registered in the territory of Federal Republic of Nigeria, Office site at Innocent Obialor Street Abuja, Nigeria, will be the controller of your personal data.

By utilising our social media accounts (hereafter referred to as ‘Social media accounts’ or separately ‘Social medium account’), you connect with us by leaving likes or comments, sending or receiving messages, or subscribing or unsubscribing. Such behaviours and associated information may constitute personal data. This social media privacy policy outlines how we handle personal data related to our presence on the following social media platforms: Facebook, WhatsApp, Instagram, LinkedIn, TikTok, X (Twitter), Vimeo, Pinterest and YouTube.

Who controls your personal data?

The controller of your personal data is Pappipo Enterprsie, with its registered office at No.6 Innocent Obialor Street, Abuja, Nigeria (hereinafter referred to as the ‘Company’).

Contact our Data Protection Desk for further information on how your personal data is processed, including the scope of the Social Media privacy policy. Here are the contact details:

Email: [email protected].

What personal information do we handle?

Facebook. We process personal data of data subjects who subscribed to our Social Medium account by clicking the ‘Like’ or ‘Observe’ button, or who wrote a comment, shared it, or clicked the ‘Like’ button on any of our Social Medium postings. We process identification data (account ID [typically containing name and surname or nickname], profile picture, additional pictures [which may also include an image]), as well as other data (the content of your comments, statistical data on data subjects who visit our social media account).

LinkedIn. We process personal data of data subjects who visited the social media account, communicated with the company by exchanging messages, or published or transmitted data using LinkedIn’s features (e.g., filled forms, responses to surveys). We process identity data (name, surname, photograph, and other identification data that you make publicly available on your LinkedIn profile) as well as other data (the content of your comments, statistical data on data subjects who visit our social media account).

X (twitter). We process personal data of data subjects who subscribed to the Social medium account by clicking the ‘Like’, ‘Observe’, or ‘Retweet’ button, or who posted a comment, shared it, or clicked the ‘Like’, ‘Observe’, or ‘Retweet’ button on any of the posts posted within our Social medium account. We process identification data (account ID [typically containing name and surname or nickname], profile picture, additional pictures [which may also include an image]), as well as other data (the content of your comments, statistical data on data subjects who visit our social media account).

Pinterest. We handle personal data of data subjects who subscribed to the Social Medium account by clicking the ‘Observe’ button, or who wrote a remark, shared it, or clicked the ‘Observe’ button on any of the posts in our account. We process identification data (account ID [typically containing name and surname or nickname], profile picture, additional pictures [which may also include an image]), as well as other data (the content of your comments, statistical data on data subjects who visit our social media account).

TikTok. We process personal data of data subjects who subscribed to our Social Medium account by clicking the ‘Like’ or ‘Observe’ button, or who wrote a comment, shared it, or clicked the ‘Like’ button on any of our Social Medium postings. We process identification data (account ID [typically containing name and surname or nickname], profile picture, additional pictures [which may also include an image]), as well as other data (the content of your comments, statistical data on data subjects who visit our social media account).

YouTube. We handle personal data of data subjects who subscribed to the Social medium account by clicking the ‘Subscribe’ button, left a remark on any of the posts put inside our account, or reacted to any of the published videos. We process identification data (account ID [typically containing name and surname or nickname], profile picture, additional pictures [which may also include an image]), as well as other data (the content of your comments, statistical data on data subjects who visit our social media account).

Vimeo. We handle personal data of data subjects who subscribed to the Social medium account by clicking the ‘Subscribe’ button, left a remark on any of the posts put inside our account, or reacted to any of the published videos. We process identification data (account ID [typically containing name and surname or nickname], profile picture, additional pictures [which may also include an image]), as well as other data (the content of your comments, statistical data on data subjects who visit our social media account).

Instagram. We process personal data of data subjects who subscribed to our Social Medium account by clicking the ‘Like’ or ‘Observe’ button, or who wrote a comment, shared it, or clicked the ‘Like’ button on any of our Social Medium postings. We process identification data (account ID [typically containing name and surname or nickname], profile picture, additional pictures [which may also include an image]), as well as other data (the content of your comments, statistical data on data subjects who visit our social media account).

Purposes, legal bases and timeframes for the personal data processing?

The terms and conditions established by the social media operators govern how we manage our accounts on those platforms. Through these, we keep our community up to date on our activities, events, and promotions, as well as our goods and services (including content control over publication). We utilise them for communication as well using the various features (messages, comments). According to Article 6 (1) (f) of the General Data Protection Regulation, the Company’s legitimate interest in managing our social media accounts serves as the legal foundation for the processing of personal data. Personal information will be handled as long as the social media accounts are active.

We run promotional campaigns. The guidelines for processing your personal data, including the objective and legal basis, are detailed in the campaign’s regulations. The legal foundation and timing for such processing will be specified in the regulations for a specific advertising campaign. Please read the regulations for the promotional campaign before participating.

We compile data by examining user activity on our social media profiles. According to Article 6 (1) (f) of the General Data Protection Regulation, the Company’s legitimate interest in producing and analysing activity statistics serves as the legal foundation for the processing of personal data. In accordance with Article 26 (1) of the General Data Protection Regulation, we cooperate with social media operators who offer this feature when we process personal data for statistical reasons. Personal information will be handled as long as the social media accounts are active.

To whom can we transfer your personal data and who may have access to your personal data?

Your personal data may be accessible to the following parties: social media operators; authorised personnel of ours; entities that provide us with services (such as marketing, IT, and technical support); these parties need access to the data in order to carry out their duties; other social media users (because followers, likes, comments, posts, and other user-provided content are public unless you modify them); public authorities and entities carrying out public tasks or acting on behalf of public authorities; and social media operators under the terms specified in their privacy policies.

Operators of social media platforms are independent organisations in charge of handling users’ personal data, including yours. These organisations use the legal justifications they have developed to process your personal data for their own purposes. Specifically, they may gather and handle data from cookie files in accordance with their own policies. Our influence over such processing is quite limited. We respectfully request that you familiarise yourself with the rules and privacy policies of the social media operators as a result.

Do we transfer your personal information outside of the Nigerian or AU territories?

We do not directly send your personal data outside of Nigeria, the AU, or international agencies. However, we would like to draw your attention to the fact that social media operators have a global reach and thus an international structure, which may imply the transfer of personal data from entities in the AU territory to personal data processing centres located outside.

Your rights in Data Policy:

The General Data Protection Regulation grants you a variety of rights as a data subject. To exercise your rights, please contact us using the information provided at the beginning of the Social Media Privacy Policy.

The right to access personal data allows you to be informed by the Company about how your personal data is processed, including the purposes and legal grounds for processing, the scope of personal data retained, the entities with whom your data is shared, and the planned time of erasure. You have the right to acquire a copy of your personal data, which is processed by the Company.

If you discover that your personal data is wrong or incomplete, you have the right to request that it be corrected. If this is the case, we agree to correct any potential inaccuracies or errors in the personal data being processed, as well as to complete the personal data where necessary.

You have the right to erasure of personal data if: your personal data are no longer necessary for the purposes for which they were collected or otherwise processed by the Company; you withdraw your consent to personal data processing; you object to the processing of your personal data and there is no other legal basis for the processing; or your personal data have been unlawfully processed.

You have the right to request that the processing of your personal data be restricted if you discover that it is inaccurate. This request can be made for a period of time so that we can verify the accuracy of the data; if the processing is unlawful but you object to its erasure; if we no longer need your personal data but you may need it for the defence or exercise of legal claims; or if you have objected to processing of your personal data while we investigate whether our legitimate grounds outweigh yours.

You may exercise your right to personal data portability if your personal data is processed with your consent or under a contract between you and the Company, and the processing is carried out automatically.

You have the right to object to the processing of your personal data for marketing purposes at any time, without having to justify your objection.

You have the right to object to the processing of personal data for other purposes at any time, on grounds relating to your specific situation, if your data has been processed for the Company’s legitimate interests (e.g., for analytical or statistical purposes). Any objection in this regard must be justified.

You have the right to withdraw your consent at any time if your personal data is processed based on consent, without impacting the lawfulness of the processing prior to withdrawal.

You may exercise your right to human intervention, voice your perspective, and challenge an automatic decision made against you at any time, if the automatic decision has legal consequences or substantially affects you in a comparable way.

Please be aware that you have the right to file a complaint with a supervisory authority about how we process your Personal Data.

Are the terms of the Social Media Privacy Policy susceptible to change?

The provisions of the Social Media Privacy Policy are subject to change.

Cross Country Or International Data Transfer

To provide the Service described in the Terms of Use and for the purposes specified in this Privacy Policy, we may transfer personal data to nations other than the one in which it was originally gathered. We implement extra security measures if the regulations governing data protection in these nations differ from those in the nation where you first submitted the information. Specifically, we apply one of the following legal bases whenever we transfer personal data coming from the EEA to nations with insufficient data protection: (i) The European Commission-approved Standard Contractual Clauses (details available here); (ii) The European Commission’s adequacy rulings on certain nations. Please read the EU DATA Protection Policy and guidelines here

When processing your personal data, we take care to comply with the requirements of the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the ‘General Data Protection Regulation’), as well as generally applicable law and best market practices. We acquire your personal information directly from you when you connect with our social media platforms. Personal data is provided on a voluntary basis and is not subject to automated decision-making, including profiling.

This Policy applies to the providing of location via web browsers and mobile applications, as well as the part of the pappipo shopping platform and the Pappipo mobile application (hereinafter referred to as the Pappipo application).

What do we use location information for?

Pappipo application and Pappipo web services use the location check option, if you consent to make this information available to your browser or Pappipo application. If you do this, the pappipo mobile app and web services will display material (such as adverts and pickup spots) based on your device’s location. Pappipo does not save information about your location.

Is the location linked to my personal data on Pappipo?

No, Pappipo does not associate your location data from your browser or Pappipo application with your Pappipo account information. You may not be logged in to your Pappipo account, and the content displayed on pappipo.com and the Pappipo application will alter depending on whether you have given permission to share your location with the website or the app.

Location management

Pappipo Enterprise’s authorization to process location data is based on the consent provided by the pappipo.com user or the Pappipo application. This consent is provided by the user while configuring a web browser, a specific website or service, or system consent in the case of the Pappipo application. The User can return to these settings at any time to establish the conditions under which Pappipo Enterprise will store or access this information.

COOKIES

This Cookie Policy applies to all websites (platforms) administered by Pappipo Enterprise, which has its registered office in Abuja. The Cookie Policy contains information about the following:

What technologies do we use on our websites? What data do we process? How and for what purposes? Where and to whom do we communicate this data?

Pappipo uses cookies to ensure your shopping experience is a smooth one. Cookies are small data files that are shared between your device and Pappipo. They are used to remind us of who you are when you connect, so that we know if you are logged in or if you’ve previously added items to your basket. They are never shared with anyone else, and do not contain any personally identifiable information – they are just special numbers that only mean something useful to Pappipo.

What are Cookies?

Websites and mobile apps send cookies, which are IT data kept on users’ end devices (such as a computer, smartphone, or tablet). These files let the website to recognise the user’s device and display it correctly, including adapting it to the user’s personal preferences. They also allow the user to show the website in the language “remembered” by such files, as well as employ other website settings that the user has chosen. Cookies often include the name of the website from which they originated, the amount of time they will be stored on the end device, and a unique number. The type and quantity of cookies processed will differ depending on the website or device you are using. In services where cookies may not be available (for example, mobile apps), we may utilise technologies that act similarly to cookies to display adverts, do analytics, and make it easier for you to use our functions.

What do we use cookies for?

ensuring security and preventing misuse (including blocking unauthorised access);
Tailoring website content to the user’s preferences and end device, and optimising website use;
blocking bots from performing certain actions on our websites;
making it easier to check in to the user’s account, even through social media, and to travel between pages on the websites without having to log in again on each page;
Preparing anonymous aggregated data that let us understand how the user uses the websites, allowing us to improve their structure and content;
enhancing the operation of websites, including monitoring their efficiency;
Identifying ads that the user has displayed and displaying them on our and other websites, including those that are most relevant to the user’s online activities.

What information about you are we processing?

We may process data on how you use the website on your computer, mobile, tablet, or any other device through which you access websites. Some of these data, when combined with other data, may be considered personal data. We may use Internet technology to handle the following information:
the name of the website from which the cookies come, their storage time on the end device, and their unique number;
device information (e.g. device type/model, unique device ID, MAC address, IP address, operating system, operating system version and device settings, language set, screen resolution, type and version of Internet browser);
events (e.g. time spent on the website, last visit, duration of visit, type of websites and pages visited, user stage in the purchase process),
location data (e.g. IP address, location obtained using geolocation technologies), and information on website usage (e.g. source, advertising campaign, links clicked, ads seen, etc.).

Do we engage in automated processing of your personal data (including profiling) that violates your rights?

When you visit our websites, data from your end device is processed automatically as a result of being evoked or activity on the site. This enables us, as the data controller, to analyse specific criteria relating to you for the purposes for which we employ cookies.

How long are cookies stored on your end device?

The duration of the cookies’ storage on your end device is determined by whether they are persistent or session.

Persistent cookies are not destroyed when the browser is closed and remain on your device for a defined length of time or indefinitely, depending on the website’s settings.

Session cookies are cookies that are stored for the duration of your browsing session and are destroyed when you close the browser.

Where do these cookies come from?

First-party cookies are those that Pappipo places on websites directly.

Third-party cookies are those placed on websites by entities other than Pappipo.

Which cookies are used by us?

Cookies that are strictly necessary: Without them, we wouldn’t be able to offer many of the services we do. They are essential to ensuring the smooth operation of the website or the capabilities users desire to utilise. A portion of them moreover guarantee the safety of the web services offered by Pappipo Enterprise. It is not necessary to get permission before implementing them on the visitor’s end device. Using your browser’s settings, you can refuse the installation and configuration of cookies that are strictly essential or delete them; in the worst situation, this could make it impossible for the website to show at all or only partially, or it might make it more difficult to use or navigate.

Functional cookies save your preferences so that you can receive a more personalised experience. These kinds of cookie collection do not yield information about your online activities on Pappipo’s partner websites.

Tracking Pixels

Pappipo also utilises tracking pixels. The pixel is programming code that allows you to embed an object on a website, often a one-pixel picture, and track user behaviour on the websites where it is placed. The pixel may perform best when paired with first-party or third-party cookies. Once the required consent is provided, the browser automatically creates a direct connection with the server that stores the pixel; as a result, the data gathered by the pixel is processed in accordance with the data protection policy of the company that maintains the server, such as a Pappipo partner. If you have registered on Pappipo’s platform, the partner may link your visit to the website together with any cookies connected to your session.

Third-party features or technology

On our websites, we employ third-party tools and services, including those connected to offering services available through the site, analytics, advertising (including interest-based ads), re-marketing, and analysing the effectiveness of advertising campaigns. The providers of cookies and other technologies are listed here

Advertising

Pappipo incorporates third-party tools that use cookies, tracking pixels and related technologies. In a similar way, these are unique, secure and private numbers that only mean something useful to the third-party companies involved, and do not contain any personally identifiable information. This information is never shared with Pappipo, or anyone else, only between you and those third-party systems. They are used to personalise your experience, and may be used to target advertising to you on other websites.

For Apple iOS users, click here to opt out of personalized Adds.

For Android users, click here to opt out of personalized Adds.

For EU click here to learn more

Google Advertising

Google Marketing Platform (Server-side/SDK/Cookies)

We employ remarketing and advertising strategies. We use Google’s cookies for DoubleClick services in order to achieve this. Third-party providers install the necessary code or pixel on websites in order to gather data about user behaviour. Based on this data, they show our ads to users who have visited our websites when they visit other websites run by our third-party providers’ advertising network. They also gather data about the campaign that has been run, carry out site analytics, and conduct segment analysis.

Google Ads (Cookies/SDK/Server-side)

We may promote our offer on websites that are part of Google’s advertising network as well as within the Google search engine thanks to Google Ads. We can more effectively adapt the offer to consumers’ expectations by analysing the success of the advertising with Google AdWords. Once a person clicks on one of Google’s advertisements, cookies associated with the Ads service are stored on their computer.

Click here to read more about the processing of personal data in collaboration with Google.

Click here and here to read the processor’s data policy.

To learn more about using browser scripts to prevent Google Analytics cookies, click this link.

Security

Pappipo strives to ensure security, integrity and privacy of personally identifiable information of its customers. Pappipo a variety of physical and electronic security measures to keep personal information secure from misuse, loss or unauthorised access, modifications or disclosure, including restricting physical access to its offices and firewalls and secure databases .

Pappipo ensures that any personal information that you provide during the registration and checkout process is kept confidential and is solely used for the purpose of processing your order. Pappipo guarantees that the information entered on our site will not be disclosed to any external organizations or third parties.

You agree to abide by the security precautions we have put in place for Managed Payments, and you recognise their significance. Subject to pappipo seller protection regulations, you are in charge of keeping all passwords, codes, or other login credentials secure that are used to access your pappipo account and the associated Payment Services. You are also in charge of any transactions or actions that are carried out using your pappipo account.

If you become aware of an unauthorised payment transaction, or of a delayed or poorly completed transaction, you must notify us immediately by filling out the form under Contact Us and sending us an email at [email protected].

Please note: your email address will be used to receive information about new products and special offers when you subscribe to Pappipo updates. If you do not wish to receive updates, you may remove yourself from the mailing list by logging into your account and opting out of the mailing list.

Data Analytics

We utilise Google Analytics tools to collect information on user visits to our websites and mobile app usage in order to generate statistics on their functionality and assist activity analysis so that we can better tailor our offering to our users’ demands.

To opt out of Google Analytics’ data usage, click here

Delete cookies.

Your cookie usage preferences expressed when logging in to Pappipo are associated with your Pappipo account and remembered when you log in from another device or browser; thus, when opting out of cookies, you should first cancel your consents using the cookie management dashboard. By default, the browser permits cookies to be placed on the end device. You can modify the settings in your web browser to prevent cookies from being used automatically or to send information every time cookies are delivered to your device. The links below will take you to the instructions for configuring and deleting cookies in major browsers.

Cookies Modifications

We reserve the right to modify this policy at any time, in which case we’ll let you know.