Privacy Policy

Lushstem Technologies Ltd (“we”, “us”, “our”) operates the Lushstem platform. We are committed to protecting your personal data and this policy explains how we collect, use, and store it.

Contact: privacy@lushstem.com

Account data: Email address, full name, phone number, and delivery address when you register or complete your profile.

Usage data: Pages viewed, search queries, listings clicked, and time spent on the platform. Collected via cookies and analytics.

Vendor data: Business name, WhatsApp number, location, store logo, bio, and listing images for approved vendors.

Communications: Any messages you send to us via email or our contact form.

• To create and manage your account
• To display your vendor store and listings to buyers
• To send transactional emails (account verification, vendor approval notifications)
• To improve the platform based on usage patterns
• To send marketing emails (you may opt out at any time)
• To comply with Nigerian law and our legal obligations

We do not sell your personal data. We share it only with:

• Supabase — our database and authentication provider (servers hosted in EU/US)
• Cloudinary — image hosting and processing
• Paystack — payment processing for vendor subscriptions
• Termii — SMS notifications
• Law enforcement, when legally required

We use essential cookies (required for authentication and session management) and optional analytics cookies. You may disable non-essential cookies in your browser settings, though this may affect platform functionality.

Account data is retained for as long as your account is active. If you delete your account, we remove personal data within 30 days. Some data may be retained longer where required by Nigerian law.

You have the right to: access your personal data; correct inaccurate data; request deletion of your data; object to processing for marketing; withdraw consent at any time.

To exercise any right, email privacy@lushstem.com. We will respond within 14 days.

The Platform is not directed at children under 18. We do not knowingly collect data from children. If we become aware that a child's data has been collected, we will delete it promptly.

We may update this policy from time to time. We will notify you of material changes by email or by a notice on the Platform before the change takes effect.