This Privacy Policy explains how Makeda Inc. collects, uses, stores, and protects personal data in connection with our platform. By using Makeda, you acknowledge processing of your data as described below.
1Introduction
Makeda Inc. ("Makeda", "we", "us", or "our") is committed to protecting personal data and respecting the privacy rights of individuals whose information is processed on or through our platform.
This Privacy Policy explains how we collect, use, store, disclose, and otherwise process personal data in connection with the Makeda platform, website, and related services (collectively, the "Platform").
Makeda operates a transparency and consumer protection platform designed to improve trust and accountability in commercial transactions by enabling users to access structured information about vendors and submit reports relating to their experiences.
This Privacy Policy applies to: a. users of the Platform; b. vendors whose information appears on the Platform; and c. any individual whose personal data is processed in connection with the Platform.
By accessing or using the Platform, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.
2Scope and Role of Makeda
Makeda acts as a data controller in respect of personal data processed through the Platform. In certain limited contexts (such as technical hosting or third-party integrations), Makeda may also act as a data processor, but primarily determines the purposes and means of processing personal data in connection with its services.
Makeda's processing activities are carried out in accordance with the Nigeria Data Protection Act 2023 ("NDPA") and other applicable data protection laws.
3Categories of Personal Data We Collect
3.1 Data Collected from Users
When users create accounts or interact with the Platform, we may collect: a. full name or identifying information; b. email address; c. phone number; d. account credentials; e. reports submitted about vendors; f. descriptions of user experiences; g. supporting evidence (such as screenshots, receipts, or communications); h. communication records with Makeda; and i. activity data relating to use of the Platform.
3.2 Data Collected About Vendors
Makeda may collect and process information relating to vendors, including: a. business names or trading names; b. business contact information (such as phone numbers or email addresses); c. business handles or online identifiers (e.g., social media usernames); d. general location information (such as city or region); e. vendor-provided information (where a profile is claimed); f. publicly available information relating to the vendor; and g. data derived from user submissions, including complaint signals and reports.
In certain cases, where vendors opt into verification or where required for specific platform features, Makeda may process additional information such as: a. business registration details; b. identification documents; or c. verification-related data.
Such data is subject to enhanced safeguards and access controls.
3.3 Data Generated by the Platform
Makeda also generates and processes data derived from platform activity, including: a. aggregated complaint counts; b. dispute and resolution outcomes; c. vendor response indicators; d. structured trust indicators derived from user activity; e. internal risk flags and confidence scores; f. audit logs; and g. system-generated analytics and metrics.
This data is used to support transparency, fraud prevention, and platform integrity.
3.4 Data Collected from Third-Party and Public Sources
Makeda may collect information from: a. publicly available sources; b. online platforms where vendors advertise or conduct business; c. business directories or registries; d. user submissions; and e. other lawful third-party sources.
Where data is collected indirectly, Makeda takes steps to ensure that such collection is lawful and proportionate.
4How We Collect Personal Data
Makeda collects personal data through three primary channels:
a. Direct Collection — where users or vendors provide information directly (e.g., account registration, profile claims, report submissions); b. Indirect Collection — where data is obtained from public sources or third parties; and c. Platform Generated Data — where data is generated through user activity, platform processes, and system analytics.
Makeda applies data minimization principles to ensure that only data necessary for the stated purposes is collected.
5Purposes of Processing
Makeda processes personal data for the following purposes: a. to operate and maintain the Platform; b. to enable vendor identification and profile creation; c. to allow users to submit reports and share experiences; d. to generate trust indicators and structured data signals; e. to support fraud prevention and safer transactions; f. to facilitate dispute tracking and resolution processes; g. to enable vendors to claim, correct, or manage their profiles; h. to communicate with users and vendors, including transparency notices; i. to improve the functionality and performance of the Platform; j. to ensure platform security and prevent abuse; and k. to comply with legal and regulatory obligations.
Makeda does not process personal data for purposes that are incompatible with these objectives.
6Lawful Basis for Processing
6.1 Legitimate Interests
Makeda primarily relies on legitimate interests to process personal data, including: a. fraud prevention; b. consumer protection; c. transparency in commercial activity; d. platform integrity and security.
Makeda conducts internal assessments to ensure that such interests are balanced against the rights and freedoms of individuals.
6.2 Contractual Necessity
Where users create accounts or interact with the Platform, processing may be necessary for the performance of a contract between the user and Makeda.
6.3 Consent
Makeda relies on consent in limited situations, including: a. optional vendor verification processes; b. non-essential communications; and c. certain optional platform features.
6.4 Legal Obligations
Makeda may process personal data where required to comply with applicable laws or regulatory obligations.
7Vendor Notification and Transparency
Where Makeda collects personal data about vendors indirectly, Makeda may notify such vendors through available contact channels, including: a. SMS notifications; or b. email communications.
Such notifications may include: a. the purpose of processing; b. categories of data processed; c. sources of the data; d. available rights and actions (including claim, correction, objection, or removal requests); and e. links to this Privacy Policy.
Makeda structures such communications as rights-based transparency notices, rather than marketing communications.
8Data Sharing and Disclosure
Makeda may share personal data in the following circumstances: a. with service providers that support the operation of the Platform (e.g., hosting, analytics, infrastructure); b. with legal or regulatory authorities where required by law; c. with professional advisors; d. in connection with business transfers (e.g., mergers or acquisitions).
Makeda does not sell personal data. Where data is shared, Makeda ensures that appropriate safeguards are in place.
9Data Retention
Makeda retains personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. In particular: a. vendor profile data may be retained to support transparency and fraud prevention; b. dispute and transaction-related data may be retained for audit and legal purposes; c. minimal internal records may be retained even where public visibility is reduced or removed.
Makeda applies retention limits and periodically reviews stored data to ensure it remains necessary and proportionate.
10Data Subject Rights
Under the Nigeria Data Protection Act 2023, individuals have the right to: a. request access to their personal data; b. request correction of inaccurate data; c. request deletion of data (subject to legal limitations); d. object to certain processing activities; e. request restriction of processing; and f. withdraw consent where processing is based on consent.
Requests may be submitted through makedacgl@gmail.com. Makeda will respond to such requests in accordance with applicable law.
11Data Security
Makeda implements appropriate technical and organizational measures to protect personal data, including: a. access controls; b. encryption of sensitive data; c. system monitoring and logging; d. secure storage practices; and e. role-based access restrictions.
While Makeda takes reasonable steps to protect data, no system can be guaranteed to be completely secure.
12International Data Transfers
Makeda may store or process personal data in multiple jurisdictions, depending on infrastructure and service providers. Where personal data is transferred outside Nigeria, Makeda ensures that such transfers are carried out in accordance with applicable legal requirements and appropriate safeguards.
13Children's Data
The Platform is not intended for individuals under the age of 18. Makeda does not knowingly collect personal data from children.
14Changes to This Privacy Policy
Makeda may update this Privacy Policy from time to time to reflect changes in the Platform or legal requirements. Where material changes occur, Makeda will take reasonable steps to notify users.
15Contact Information
For questions, concerns, or requests relating to this Privacy Policy:
Makeda Inc. Email: legal@makeda.team
16Data Protection Contact / DPO
Where applicable, Makeda may designate a Data Protection Officer or contact person responsible for privacy matters.
Contact: legal@makeda.team