1. Information We Collect

We collect various types of personal and technical information to enhance and provide our Services. This includes:

• Personal Information: Name, email address, phone number, shipping address, payment information, and account details.
• Device & Browser Information: Technical data such as IP address, browser type, operating system, and other device-specific data.
• Transactional Information: Purchase details, order history, preferences, and communication related to transactions.
• Public Profile Information: Information you share publicly, including product reviews and social media interactions.
• Cookies & Similar Technologies: Data collected through cookies and similar technologies to enhance your experience. For further information, please refer to our Cookies Policy.

Sensitive Data: In some cases, we may collect sensitive data (such as payment details or health information for specific products), but only with your explicit consent and for specific purposes.

Automated Decision-Making & Profiling: We may use automated systems to personalize your experience, including providing tailored product recommendations.

2. How We Use Your Information

We use the information we collect to:

• Provide and enhance our Services.
• Process transactions, including payment and order fulfillment.
• Communicate with you about your orders, account updates, promotions, or changes to our Services.
• Maintain the security and integrity of our platform.
• Comply with applicable legal requirements.

We process your data based on the following legal grounds:

• Performance of a Contract: To fulfill our obligations under our Terms of Use.
• Consent: For certain activities, such as marketing communications.
• Legitimate Interests: To improve our Services, detect fraud, and personalize your experience.
• Legal Obligations: To comply with applicable laws and regulations.

3. How We Share Your Information

To provide and enhance our Services, we may share your information with the following entities:

• Xaysi Group Companies: To operate the marketplace, process payments, and maintain security.
• Sellers: Specific information (e.g., purchase history) may be shared with sellers to fulfill your orders and enhance service.
• Service Providers: Third-party companies that support payment processing, fraud detection, customer service, and other functions.
• Business Partners: Delivery services, marketing partners, and others involved in completing your orders.
• Legal Compliance: We may disclose your information if required by law or to protect the rights, property, or safety of Xaysi and our users.

Third-Party Transparency: We may share your data with third-party advertisers, analytics providers, or service providers who help improve your experience. You can manage your preferences through your account settings.

4. How We Transfer Your Information

As part of Xaysi’s global operations, your information may be transferred and processed in countries outside your jurisdiction, including the United States, the European Economic Area (EEA), and other regions where we operate or use service providers. These countries may have different privacy laws, and we take necessary measures to ensure your data is transferred securely and in compliance with applicable privacy regulations.

• For UK and EU Users: We rely on legal frameworks such as the EU-U.S. Privacy Shield, Standard Contractual Clauses (SCCs), or Adequacy Decisions to ensure appropriate protection when transferring personal data outside the EEA.
• For Canadian Users: Your data may be transferred to countries with different privacy protections, but we will take steps to comply with Canadian privacy laws.
• For U.S. Users: Data transfers may occur internationally as required, in accordance with U.S. privacy laws.
• For Nigerian Users: We comply with the Nigeria Data Protection Regulation (NDPR), ensuring that any data transfers outside Nigeria adhere to relevant regulations.

5. How We Protect Your Information

We employ both technical and administrative security measures to protect your personal data from unauthorized access, misuse, or loss. These measures include encryption, secure socket layer (SSL) technology, and regular security audits.

While we work diligently to safeguard your information, no system is completely infallible. We recommend using strong passwords, enabling two-factor authentication (2FA), and monitoring your account activity regularly.

6. Data Retention

We retain your information only for as long as necessary to provide our Services, fulfill legal obligations, and resolve disputes. Retention periods are based on the nature of the data and its intended purpose.

• For EU and UK Users: We comply with the General Data Protection Regulation (GDPR) and retain data only for as long as necessary to fulfill the purposes for which it was collected.
• For Canada and U.S. Users: Personal data is retained for as long as needed to provide our Services or comply with legal obligations.
• For Nigerian Users: We adhere to the Nigeria Data Protection Regulation (NDPR) and retain personal data only as necessary.

7. Your Rights & Choices

Depending on your location, you may have the following rights concerning your personal data:

• Access: Request a copy of your personal data.
• Correction: Request updates or corrections to inaccurate data.
• Deletion: Request the deletion of your personal information, subject to certain legal exceptions.
• Restriction: Request limitations on the processing of your data.
• Objection: Object to certain types of data processing, such as processing based on legitimate interests.
• Withdrawal of Consent: If processing is based on consent, you may withdraw it at any time.
• Data Portability: Request a copy of your data in a machine-readable format.

For UK & EU Users (GDPR): You may exercise your rights by contacting us, and we will respond within the prescribed timeframes.

For Canadian Users (PIPEDA): You have the right to access and correct your personal data, subject to legal exceptions.

For U.S. Users: Depending on your state of residence, you may have additional rights under state laws such as the California Consumer Privacy Act (CCPA).

For Nigerian Users (NDPR): You have the right to access, rectify, erase, or object to the processing of your personal data under the Nigeria Data Protection Regulation (NDPR).

You may exercise your rights by contacting us directly. To opt-out of targeted advertising, adjust your preferences via your account settings.

8. Your Responsibilities

As a Buyer, you are responsible for ensuring the accuracy and currency of the personal information you provide. If you are a Seller on our platform, you must comply with applicable data protection laws when handling personal information from Buyers.

9. Privacy Policy Updates

We may update this Privacy Policy from time to time. If significant changes occur, we will notify you through our platform or via email. We encourage you to review this policy periodically for the latest updates.

10. Contact Us

For any questions or concerns regarding this Privacy Policy or our data practices, please contact us at:

Email: support@xaysi.com

By using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please refrain from using our Services.