Privacy Policy

LEDDAR respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how LEDDAR collects, uses, stores, shares, and protects personal data when you:

• visit our website
• create an account
• apply as a Brand or Artisan
• complete verification
• submit a production request
• request a sample
• make or receive payments
• communicate through the platform
• contact support
• otherwise use LEDDAR's services

This Privacy Policy should be read together with our Terms & Conditions and any related policies referenced on the platform.

LEDDAR is a technology platform that connects Brands and Artisans through structured workflows for samples, production requests, production tracking, quality control, and selected payment-related flows.

For the purposes of applicable data protection law, LEDDAR may act as a data controller in relation to personal data collected for its own platform operations, onboarding, verification, security, support, analytics, and compliance activities. Where necessary, LEDDAR may also engage service providers that process personal data on its behalf.

The Nigeria Data Protection Act 2023 recognizes obligations for both data controllers and data processors.

This Privacy Policy applies to:

• Brands
• Artisans
• website visitors
• business contacts
• support users
• anyone whose personal data is processed by LEDDAR in connection with the platform

It does not apply to third-party websites, services, or payment pages that may be linked from or integrated into the platform. Those providers may have their own privacy policies.

Depending on how you use LEDDAR, we may collect the following categories of personal data.

4.1 Identity Data

• full name
• date of birth, where required
• gender, where required
• government-issued identification details, where required
• photograph or selfie, where required for verification

4.2 Contact Data

• email address
• phone number
• WhatsApp number
• business address
• delivery address
• billing address

4.3 Business and Profile Data

• business name
• brand name
• workshop or artisan name
• role or title
• category or specialization
• city, state, and country
• production capacity or service profile
• portfolio and uploaded work samples

4.4 Verification Data

• KYC documents
• identity validation results
• bank account verification information
• compliance-related information
• fraud screening results

4.5 Transaction and Order Data

• quote requests
• production requests
• sample requests
• product specifications
• quantity and timeline details
• invoice details
• payment records
• payout records
• refund or cancellation records
• support history related to orders

4.6 Communications Data

• messages sent through the platform
• emails to support
• WhatsApp or SMS messages sent through LEDDAR channels
• call notes where support interactions are recorded internally

4.7 Technical and Usage Data

• IP address
• browser type
• device type
• operating system
• pages visited
• date and time of access
• referring links
• actions taken on the platform
• cookie and analytics data

4.8 Sensitive Personal Data

We collect personal data:

5.1 Directly from You

When you:

• create an account
• complete forms
• request pricing
• request a sample
• submit a production request
• upload designs, specifications, or KYC documents
• contact us

5.2 Automatically

When you use the platform, we may collect technical and usage data through cookies, logs, analytics tools, and related technologies.

5.3 From Third Parties

We may receive information from:

• payment providers
• verification providers
• analytics providers
• fraud prevention tools
• customer support tools
• publicly available business sources where lawful

We process personal data only where we have a lawful basis and a legitimate operational reason to do so.

6.1 Provide Platform Services

• create and manage accounts
• onboard Brands and Artisans
• enable quote, sample, and production request workflows
• match users where relevant
• manage dashboards, records, and support interactions

6.2 Verify Users and Prevent Fraud

• complete KYC checks
• validate identity or business details
• screen for fraud, abuse, and circumvention risk
• enforce platform trust and safety rules

6.3 Process Payments and Payouts

• support billing records
• confirm payment status
• support artisan payout workflows
• handle refunds, reversals, and reconciliation

6.4 Support Operations and Customer Care

• respond to user requests
• resolve complaints
• investigate incidents
• improve user experience

6.5 Improve the Platform

• analyze usage
• measure performance
• fix bugs
• improve features
• understand demand and supply behavior

6.6 Marketing and Communications

Where permitted by law, we may send:

• product updates
• onboarding reminders
• transaction notices
• service messages
• marketing communications

You may opt out of non-essential marketing communications at any time.

6.7 Legal and Compliance Purposes

• comply with legal obligations
• respond to lawful requests
• enforce our contracts
• investigate fraud or misuse
• protect our rights, users, and platform

Depending on the context, our lawful basis may include:

The NDPA sets out both principles of processing and lawful bases for processing personal data.

We may use cookies, session technologies, analytics tools, and similar technologies to:

• keep you logged in
• remember preferences
• improve website performance
• understand how users interact with the platform
• support security and fraud monitoring

You can manage cookies through your browser settings or any cookie controls we make available.

9.1 With Service Providers

We may share data with vendors that support:

• cloud hosting
• analytics
• messaging
• email delivery
• KYC and identity verification
• payment processing
• fraud prevention
• customer support
• document storage

These providers may process data on our behalf under contractual controls.

9.2 Between Platform Users

We may share limited information between Brands and Artisans where necessary to perform a transaction or production workflow. We will aim to limit this to what is reasonably needed.

9.3 With Regulators, Authorities, or Courts

We may disclose personal data where required by law, lawful process, or to protect legal rights.

9.4 In a Corporate Transaction

If LEDDAR is involved in a merger, acquisition, restructuring, financing, or sale of assets, personal data may be disclosed as part of that process, subject to appropriate safeguards.

Your data may be stored or processed outside Nigeria where our service providers or infrastructure require it. The NDPA contains rules on cross-border transfers and recognizes adequacy and other lawful bases for such transfers.

Where we transfer personal data outside Nigeria, we will take reasonable steps to ensure that an appropriate legal basis and reasonable safeguards are in place.

We use reasonable technical, administrative, and organizational measures to protect personal data, including measures designed to reduce the risk of:

• unauthorized access
• loss
• misuse
• disclosure
• alteration
• destruction

Security measures may include:

• access controls
• password protection
• encrypted transmission where appropriate
• role-based permissions
• vendor controls
• logging and monitoring

No system is completely secure, and we cannot guarantee absolute security.

If a personal data breach occurs, LEDDAR will assess the incident and respond as required by applicable law. Where required, we may:

• contain and investigate the breach
• notify affected parties
• notify the appropriate authority
• take remedial action

We keep personal data only for as long as reasonably necessary for:

• account administration
• production and transaction records
• compliance and audit requirements
• dispute handling
• fraud prevention
• support and legal defense

We may retain some information after account closure where necessary for:

• tax and accounting records
• payment reconciliation
• legal claims or defense
• fraud prevention
• regulatory compliance

Subject to law and verification of your identity, you may request to:

• access your personal data
• correct inaccurate or incomplete data
• withdraw consent where consent is the basis
• object to certain processing
• restrict certain processing
• request deletion where applicable
• request portability where applicable
• complain to the appropriate authority

To exercise your rights, contact us using the details below. We may ask for proof of identity before acting on a request.

LEDDAR is intended for adults and business users. We do not knowingly offer the platform to children or intentionally collect children's personal data for ordinary platform use. The NDPA contains specific provisions on children and persons lacking legal capacity to consent.

If you believe a child has provided personal data to LEDDAR improperly, contact us so we can take appropriate action.

LEDDAR may use rule-based systems or automated checks for risk screening, onboarding prioritization, fraud detection, verification routing, or service optimization. Where applicable, such processing will be conducted in line with applicable law. The NDPA addresses rights relating to automated decision-making.

Our platform may contain links to third-party services or use third-party tools. We are not responsible for the privacy practices of third parties. You should review their privacy policies separately.

We may send you service-related communications that are necessary for account and platform operation. Where we send optional marketing communications, you may unsubscribe using the available link or by contacting us.

We may update this Privacy Policy from time to time to reflect legal, operational, or platform changes. Where changes are material, we may notify users through the website, dashboard, or email. The "Effective Date" above shows when this version took effect.

If you believe your data rights have been violated, you may contact LEDDAR first so we can attempt to resolve the issue. You may also have the right to complain to the Nigeria Data Protection Commission, which is the data protection authority established under the NDPA.