Last updated: 2 September 2026
Who we are
Our website address is: https://zmrshop.store.
1. Introduction
This Privacy Policy explains how ZMR SHOP (“we”, “us”, or “our”) collects, uses, stores and protects personal information when you visit zmrshop.store, create an account, place an order, contact customer support or otherwise use our services. This policy applies primarily to customers and website visitors in Nigeria.
2. Data We Collect
| Category | Examples | Purpose |
|---|---|---|
| Identity data | Name, age-verification status | Account creation, age compliance |
| Contact data | Email, phone number, address | Order fulfilment, communications |
| Transaction data | Purchase history, payment method type | Order processing, fraud prevention |
| Device data | IP address, browser type, operating system | Security, analytics |
| Usage data | Pages visited, clicks, search queries | Site improvement, personalisation |
| Marketing data | Communication preferences | Targeted offers (with consent) |
| Support data | Contact-form messages and order-related enquiries | Customer service and issue resolution |
We do not store full card numbers. Payment processing is handled by certified PCI-DSS compliant partners.
3. How We Use Your Data
- Process and fulfil your orders
- Verify your age and identity for compliance with tobacco regulations
- Send order confirmations, shipping updates, and receipts
- Improve our products, website, and services
- Prevent fraud, chargebacks, and unauthorised access
- Send marketing communications (only with your consent)
- Comply with legal obligations
4. Lawful Basis for Processing
We process personal data in accordance with the Nigeria Data Protection Act 2023 and other applicable data protection requirements. Depending on the purpose, we rely on your consent, performance of a contract, compliance with legal obligations, or our legitimate interests, provided that those interests do not override your rights and freedoms.
5. Data Sharing
We may share data with service providers who assist us with hosting, payments, delivery, analytics, marketing platforms, and customer support—only as needed for their services and subject to appropriate safeguards. We may disclose information if required by law, to protect rights and safety, or in connection with a business transfer (for example a merger), where permitted.
6. International Transfers
Some of our service providers, including hosting, payment, email, analytics or customer-support providers, may process personal data outside Nigeria. Where personal data is transferred internationally, we take reasonable steps to ensure that the transfer is protected by appropriate safeguards and handled in accordance with applicable Nigerian data protection requirements.
7. Data Retention
We retain personal data only as long as necessary for the purposes described, including legal, tax and accounting requirements. Retention periods vary according to the type of data and applicable legal, accounting and operational requirements.
8. Your Rights
Depending on your location, you may have the right to access, correct, delete, or restrict processing of your personal data, to object to certain processing, to data portability, and to withdraw consent where processing is based on consent. You may lodge a complaint with a supervisory authority. To exercise your rights, contact us using the details in the Privacy Contact section below.
9. Cookies
We and our partners may use cookies and similar technologies to operate the site, remember preferences, measure performance, and (where allowed) deliver relevant marketing. You can control cookies through your browser settings and, where available, our cookie preference tools.
10. Children’s Privacy
Our Services are intended only for adults aged 21 and over in Nigeria. We do not knowingly collect personal information from anyone under 21. If you believe we have collected such data, please contact us and we will take appropriate steps to delete it.
11. Security
We implement technical and organisational measures designed to protect your personal data against unauthorised access, loss, or misuse. No online transmission is completely secure; please use strong passwords and protect your account credentials.
12. Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the current version. We encourage you to review this page periodically. Material changes may be communicated through the Services or by email where appropriate.
13. Privacy Contact
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at support@zmrshop.store or through our Contact Us page. You may also lodge a complaint with the Nigeria Data Protection Commission where applicable.