Privacy Policy
Effective Date: 22 August 2026
Last Updated: 22 August 2026
1. Introduction
Skysoft Mall respects privacy and aims to process personal data fairly, lawfully, transparently and only as reasonably necessary for the marketplace and merchant-subscription services described here.
2. Who operates Skysoft Mall
Skysoft Mall is operated by the platform operator identified through its controlled support details below. Corporate registration, office and data-protection contact details have not been invented for this policy.
3. Scope
This policy covers the main Skysoft Mall marketplace, merchant accounts and storefronts, catalogues, enquiries, subscription payments, advertising and limited platform analytics. Merchants may have their own privacy responsibilities for customer information they receive.
4–6. Information we collect
Depending on your use, Skysoft Mall may process names, email addresses, phone numbers, account credentials in hashed form, business and store information, catalogue content, contact details, and customer enquiry details such as name, phone, optional email, delivery location, notes and requested items. Merchant account and subscription records associate owners and authorised staff with their business.
7. Payment-related information
For merchant subscription payments, Skysoft Mall records the plan, amount, currency, gateway, transaction reference, status and verification timestamps, plus limited provider response fields needed for verification and operations. Paystack processes new payment credentials on its hosted service. Historical records may identify a payment provider previously offered by Skysoft Mall. Skysoft Mall does not intend to collect or store card numbers, CVVs or online-banking credentials.
8. Technical and analytics information
Skysoft Mall records limited events such as marketplace, storefront, product, service, advertisement impression, advertisement click and enquiry activity, associated content identifiers and date/time. Security and audit records may contain the requesting IP address. Skysoft Mall does not implement browser fingerprinting, full browsing-history profiles, WhatsApp message capture or sensitive customer profiling.
9. Cookies and sessions
Laravel session and security cookies are used where necessary for login, request baskets, CSRF protection and core operation. Skysoft Mall does not currently describe non-essential marketing-cookie profiling as an implemented feature. Appropriate choices should be introduced before any future non-essential tracking cookies are deployed.
10–12. Purposes, lawful bases and use
Information is used to create and secure accounts, host stores, publish eligible content, route and retain enquiries, administer subscriptions, verify merchant payments, provide support, moderate content, prevent abuse, measure limited platform activity, comply with legal duties and protect legitimate platform and user interests. Depending on the context, processing may be necessary for a contract or steps requested before a contract, compliance with law, legitimate interests balanced against individual rights, consent, or another basis permitted by Nigerian law.
13–16. Sharing and service providers
Customer enquiry information is shared with the merchant selected by the customer so that merchant can respond. Merchants must use it lawfully and only for appropriate enquiry and transaction purposes. Skysoft Mall may use hosting, storage, email, security and professional service providers to the extent configured. Paystack receives merchant payment information required to run hosted checkout and verify new payments under its own privacy terms. Information may also be disclosed when legally required or needed to protect rights and safety.
17. Advertising
Skysoft Mall displays clearly labelled Sponsored campaigns and records limited impression and click events. Paid placement is kept distinct from verification and organic marketplace listings.
Merchant verification information
A merchant who voluntarily applies for verification supplies a government-issued identity document, recent proof of address, account and contact information, payment and verification records, and—where applicable and voluntarily supplied—a CAC certificate. Skysoft Mall uses this information to assess identity or business information, prevent misuse, administer the time-limited verification service and maintain an auditable decision record.
Verification documents are held in private application storage, are not published on storefronts or marketplace pages, and are restricted to authorised administrators and the owning merchant where appropriate. Controls include random filenames, content validation, access checks and private responses. No online safeguard is absolute. Documents and associated records are retained only as reasonably needed for review, renewals, fraud prevention, disputes and legal obligations, then securely deleted or anonymised where appropriate. Information may be disclosed when lawfully required. Merchants may use the rights and contact process below to request access or correction and, where applicable, deletion or restriction.
Independent merchants and customer caution
Skysoft Mall hosts independent merchants. Verified status means defined identity or business information supplied by a merchant was reviewed; it does not guarantee future conduct, delivery or quality. Customers should use additional caution with unverified merchants, confirm transaction terms, retain evidence and report suspicious activity through the Support Centre.
18. Retention
Data is kept only as reasonably needed for account and service operation, enquiry history, payment and accounting evidence, security, disputes, legal obligations and legitimate recordkeeping. Different records require different periods. Deletion or anonymisation is considered when the purpose and applicable retention duties end.
19. Security
Implemented safeguards include access control, tenant-aware authorisation, password hashing, CSRF protection, validated uploads, server-side payment verification, signed webhook checks and limited response storage. No online system can promise absolute security.
20. International processing
Payment, hosting or other configured providers may process information outside Nigeria. Where cross-border processing occurs, Skysoft Mall should assess and apply safeguards required by the Nigeria Data Protection Act 2023 and applicable NDPC instruments.
21–22. Your rights and requests
Subject to the law and relevant exceptions, individuals may request access, correction, deletion, restriction or objection, portability where applicable, and withdrawal of consent where consent is the basis. Identity or authority may need verification. Requests should be sent using the controlled support contact below. Rights are not absolute where retention or processing is permitted or required by law.
23. Children
Skysoft Mall is a general business marketplace and merchant SaaS service, not a service directed to children. A parent or guardian who believes a child supplied personal data should contact Skysoft Mall for appropriate review.
24. Changes
Material changes will update the version and dates displayed here. Where required, additional notice or consent will be obtained.
25. Contact
Email: admin@skysofticthub.com
26. Complaints and regulatory rights
Please contact Skysoft Mall first so the concern can be investigated. You may also lodge a complaint with the Nigeria Data Protection Commission where applicable, without affecting other lawful remedies.