Privacy policy

• Your account: name, email address, phone number and a password. We store your password only as a one-way scrambled value, never in a readable form. We also keep your choices for order updates, WhatsApp updates and promotions. Promotions are off unless you turn them on.
• Your orders: name, email, phone, delivery address, any note you add, what you ordered, amounts and the order’s history.
• Your payments: Paystack tells us the payment reference, whether it was card or bank transfer, the amount and whether it worked. We never see your full card number.
• Your requests: if you ask for a quote, a consultation or a back-in-stock message, we keep your name, phone, email and what you asked.
• Your messages: what you send us by WhatsApp or email.
• Your device: small files called cookies (listed below) and, once switched on, simple visit counts and advertising measurement (see Cookies).

• To take and deliver your order, process payment and look after you afterwards. This is needed to carry out your contract with us.
• To keep accounting and tax records. This is a legal duty.
• To prevent fraud and keep the shop secure, and to improve the site. This is our legitimate interest.
• To send promotions. We do this only if you ask for them, and you can switch them off at any time.

We do not sell your data. We use these providers to run the shop:

• Paystack takes your payment.
• Supabase stores our database and uploaded images. Its servers are in Frankfurt, Germany.
• Vercel hosts the website.
• Resend sends our emails.
• Cloudflare looks after our domain and forwards email sent to our support address.
• OpenStreetMap services (Nominatim and OSRM) find your address on the map and the road distance to it, so we can work out the delivery fee. The address you type at checkout is sent to them.
• Delivery riders or couriers we work with, and the installers we partner with, get your name, phone number and address so they can reach you.
• WhatsApp (Meta) carries the messages you send us there.
• Meta receives events from our advertising pixel, such as viewing a product, adding to the cart and a purchase with its value.

We may also share data with the authorities when the law requires it.

Some of these providers store or process data outside Nigeria, including in the European Union and the United States. We choose providers with security measures in place, and we move personal data abroad only as the Nigeria Data Protection Act 2023 allows.

• Account details: until you ask us to delete your account.
• Orders and payment records: 6 years, to meet accounting and warranty needs.
• Quote and consultation requests: 2 years.
• Sign-in sessions: 30 days. Password reset links: 1 hour.

Pages are served over HTTPS. Passwords are stored scrambled. Our database is not open to the public, and only signed-in staff can see orders. No system is perfectly secure. If a breach puts your data at risk, we will tell you and the regulator as the law requires.

Vercel Web Analytics counts visits and pages without cookies.

We do not show a cookie banner.

You can ask us to show you the data we hold about you, correct it, delete it, restrict or stop how we use it, give you a copy, or stop sending you promotions. You can withdraw consent at any time. Email support@sunstock.net. We reply within 30 days. If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission.

The shop is not meant for anyone under 18, and we do not knowingly collect data from children.

If we change this policy, we post the new version here with a new date.

support@sunstock.net · WhatsApp +234 707 021 0497