SACVIN/ Privacy Policy

Privacy Policy

How SACVIN Nigeria Limited collects, uses and protects your personal data. Fully compliant with NDPA 2023 and GAID 2025.

NDPA 2023 & GAID 2025 Compliant. SACVIN Nigeria Limited is the data controller for personal data processed through sacvin.com. This policy is prepared in line with the Nigeria Data Protection Act 2023 (NDPA) and the NDPA General Application and Implementation Directive 2025 (GAID). Contact: info@sacvin.com

1. WHO WE ARE

SACVIN Nigeria Limited (RC 41859) is registered in Nigeria, with its principal office at 43/49 Apapa-Oshodi Express Way, Oshodi, Lagos, Nigeria. We manufacture consumer and industrial plastic products and supply them to distributors across Nigeria.

2. DATA WE COLLECT

We collect data you give us and data generated when you use sacvin.com:

  • Identity: first and last name of the account holder and any authorised contacts.
  • Business: company name, RC number, TIN, business address.
  • Contact: email address, phone or WhatsApp number and delivery addresses.
  • Transaction: orders, invoices, payment method used and account history.
  • Technical: IP address, browser type, device, pages visited and session duration.
  • Marketing: your communication and marketing preferences.
  • Account: username, hashed password, saved lists, order history and store credit or coupon balance.

We never store: card numbers, CVV codes or bank PINs. Card payments are processed by Paystack, which holds PCI DSS certification.

3. HOW WE USE YOUR DATA
  • Process and fulfil orders, including delivery, invoicing and after-sales support.
  • Set up and manage your distributor account, including checking the business details you give us.
  • Respond to enquiries, returns, claims and complaints.
  • Send service messages, such as order confirmations and dispatch updates.
  • Send marketing messages where you have agreed to them. You can opt out at any time.
  • Improve our website, products and service using aggregated analytics.
  • Detect and prevent fraud and security incidents.
  • Meet our tax, accounting, regulatory and data protection obligations.
4. LEGAL BASIS FOR PROCESSING
  • Contract: processing needed to open your account and fulfil your orders.
  • Legal obligation: tax and accounting records, regulatory requirements and data protection audits.
  • Legitimate interests: fraud prevention, account management, analytics and service improvement.
  • Consent: marketing messages and non-essential cookies. You can withdraw consent at any time.
5. WHO WE SHARE DATA WITH

We do not sell or trade your personal data. We share it only with service providers that process it for us under written agreements, and with authorities where the law requires it:

  • Paystack: payment processing.
  • Shopify Inc.: website, accounts and order management.
  • Logistics partners (GIG Logistics, DHL, Kwik): name, address and phone number, for delivery only.
  • Oracle NetSuite: our internal business and accounting system (transaction data).
  • Google: analytics and advertising measurement, only with your cookie consent.
  • Meta Platforms: advertising measurement, only with your cookie consent.
6. HOW LONG WE KEEP DATA

We keep personal data for as long as we need it for the purposes set out in this policy, and for as long as the law requires.

  • Account and business records: we keep your account details, orders, invoices and payment records in our business and accounting system (Oracle NetSuite) for as long as we have a trading relationship with you, and after that as part of our accounting and tax records. When an account is closed, we mark it inactive and restrict who can access it.
  • Marketing preferences: until you opt out. We keep a record of the opt-out so that we do not contact you again.
  • Website analytics: held by Google Analytics for 14 months after which Google deletes it.
  • Support and claims records: kept with your account records.
7. YOUR RIGHTS UNDER THE NDPA
🔑
Access — access a copy of the personal data we hold about you
✏️
Rectification — correct inaccurate or incomplete data
🗑
Erasure — request deletion where we no longer have a lawful reason to keep it
🚫
Object — to direct marketing or processing based on legitimate interests
📦
Portability — receive your data in a machine-readable format
⏸
Restriction — restrict how we use your data in certain circumstances

To use any of these rights, email info@sacvin.com. We respond within 30 days.

8. SECURITY

We use TLS encryption for data in transit, restrict who can view customer data, and review our security regularly. If a personal data breach is likely to put your rights at risk, we will notify the NDPC within 72 hours of becoming aware of it, and tell you without undue delay where the risk to you is high.

9. INTERNATIONAL TRANSFERS

Some of our service providers store or process data outside Nigeria, for example Shopify Canada/USA, Google (USA) and Oracle (USA). Where this happens, we rely on the safeguards the NDPA allows, such as contractual clauses / adequacy.

10. CHANGES TO THIS POLICY

We may update this policy from time to time.

35+
Years Manufacturing
1K+
Product SKUs
200+
Distributors
5
Factories
ISO
Certified