At Cradigg, we are committed to protecting your privacy and handling your personal information transparently, in line with the Nigeria Data Protection Act.
At Cradigg, we collect information to provide better services to all our users. We only collect data that is necessary for operating the platform. We collect information in the following ways:
We collect information through the following methods:
Directly from you
When you create an account, make a purchase, list a product or service, or contact support.
Automatically
When you browse the platform, we collect technical and usage data such as IP address, browser type, and pages visited.
From payment processors
Flutterwave shares transaction confirmations and payment status with us. We do not receive or store your full card details.
From cookies and similar technologies
We use cookies and local storage to keep you logged in, remember preferences, and understand how the platform is used.
We use the information we collect to provide, maintain, and improve our services. Specifically, we use your information to:
Provide Services
Process purchases, deliver products, and manage your account
Improve Experience
Personalize recommendations and enhance user interface
Communication
Send transactional updates, receipts, and important account notices
Security & Fraud Prevention
Detect and prevent fraud, abuse, and security issues
We take reasonable steps to protect your personal information. Our current measures include:
Encrypted Connections
Data transmitted between your browser and our servers is encrypted using HTTPS/TLS
Access Control
Only authorized personnel have access to production systems and user data
Secure Infrastructure
We rely on reputable cloud providers with their own security safeguards
Ongoing Review
We review our practices as the platform grows and new risks emerge
Important: No method of transmission or storage is completely secure. While we work to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at support@cradigg.com.
We keep your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Our general retention practices are:
Account Data
Retained while your account is active. If you delete your account, we remove or anonymize your personal data within 30 days, except where we must keep it for legal or accounting reasons.
Transaction Records
Retained for at least 6 years to comply with Nigerian financial and tax record-keeping requirements.
Content (Listings, Reviews, Messages)
Retained while your account is active or until you delete the content. Deleted content may remain in backups for a limited period before being overwritten.
Technical & Usage Logs
Retained for up to 12 months for security, fraud prevention, and troubleshooting purposes.
You have the right to request deletion of your account and personal data. Here is how it works:
How to Request Deletion
Email us at support@cradigg.com with the subject line "Data Deletion Request" from the email address associated with your account. You can also use the account settings page if available.
What Happens Next
We will verify your identity and confirm your request within 7 days. We will then delete or anonymize your personal data within 30 days, except for records we are legally required to keep.
What We Cannot Delete Immediately
Transaction records required for tax and financial compliance (retained for at least 6 years), and data needed to resolve ongoing disputes or prevent fraud.
Backups
Residual copies of your data may remain in encrypted backups for up to 90 days before being permanently overwritten.
Under the Nigeria Data Protection Act (NDPA) 2023, you have specific rights regarding your personal data:
Request a copy of the personal data we hold about you
Ask us to correct inaccurate or incomplete data
Request deletion of your personal data, subject to legal retention requirements
Ask us to limit how we use your data in certain circumstances
Receive your data in a structured, commonly used format
Object to processing based on legitimate interests or for direct marketing
To exercise any of these rights, contact us at support@cradigg.com. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).
Cradigg is based in Nigeria, but some of our service providers (such as cloud hosting and payment processing partners) may store or process data outside Nigeria. When we transfer personal data outside Nigeria, we take steps to ensure it receives an adequate level of protection consistent with the Nigeria Data Protection Act. This may include contractual safeguards with our providers.
Cradigg is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately at support@cradigg.com and we will take steps to delete it.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will notify you by posting the updated policy on this page with a new "Last Updated" date, and where appropriate, by email or in-app notification.
Last Updated: 15 November 2026
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how we handle your information, please contact us:
Address
Cradigg Marketplace, Lagos, Nigeria
© 2026 Cradigg. All rights reserved.
Built with ❤️ in Africa