Privacy policy
Last updated 17 October 2026
This policy explains how Uru ("Uru", "we") handles personal information, in line with the Nigeria Data Protection Act 2023.
Our two roles
- For merchants and Uru Market visitors, we decide how your information is used (we are the "controller").
- For shoppers buying from a store, the store decides how their information is used, and we handle it on the store's behalf (we are a "processor"). Each store has its own privacy policy, linked at the bottom of its pages.
What we collect
- Merchants: your name, email, phone number and business details; your team members' names and emails; and how you use the dashboard.
- Business checks and payouts: your legal or company name, your BVN, NIN or CAC number, and your bank account details. Only a small number of our staff can see ID numbers, and only to check who we pay.
- Payments: handled by Paystack. We never see or keep full card numbers.
- Shoppers (for stores): name, email, phone, delivery address, what was ordered, reviews, and, if they agreed, marketing preferences.
- Uru Market visitors: pages and products viewed, searches, and clicks on sponsored listings, to run and improve the marketplace.
How we use it
- To run your store and Uru Market, take payments, pay merchants and arrange deliveries.
- To check businesses, and to prevent fraud and scams that put shoppers or merchants at risk.
- To send service messages (receipts, order updates, account and security notices).
- To send merchants news about Uru, which you can stop at any time. Stores send marketing to shoppers only if the shopper agreed.
- To improve Uru, using information that doesn't identify you wherever we can.
Who we share it with
- Paystack, for payments, transfers to merchants and confirming bank accounts.
- Gbam Logistics, our delivery partner, for deliveries we arrange (the recipient's name, phone number and address).
- Companies that host our systems and send our emails and text messages, under contracts that protect your information.
- Authorities, when the law requires it.
We don't sell personal information.
Where it's stored and how long we keep it
Some of our service providers store information outside Nigeria; when they do, we make sure it is protected as Nigerian law requires. We keep information while your account is open and afterwards only as long as the law requires (for example, financial and tax records) or as needed to settle disputes.
Keeping it safe
We use encryption, strict access controls and regular checks. If something goes wrong that puts your information at risk, we'll tell you and the regulator as the law requires.
Your rights
You can ask to see the information we hold about you, have it corrected or deleted, take a copy, or object to how we use it, including for marketing. Shoppers should contact the store first, since it decides how their information is used; we'll help the store respond. You can also complain to the Nigeria Data Protection Commission.
Contact
Privacy questions or requests: the contact details in your dashboard. See also our terms for merchants.