Privacy policy
Operator: Amanovations International — Lagos, Ojo Nigeria. Effective date: 20 October 2026. Contact: support@mallplot.com.
What this policy covers
This policy explains how MallPlot handles personal information in its marketplace, account services, service-point collection and optional WhatsApp alerts. Features still in development do not collect information through MallPlot until connected and enabled.
Information we handle
- Account identifiers, email address, role, account status, authentication and security records. Authentication credentials and multi-factor authentication are handled through our security systems; do not send passwords or authenticator codes to support.
- When provided through an enabled feature: shop or manufacturer details, product and stock records, orders, transaction references, returns, collection confirmations and support communications.
- When optional WhatsApp alerts are enabled: your verified phone number, category choices, consent/withdrawal records and message delivery status.
- Technical information needed to operate and secure the service, such as request, error and audit records. Your browser can store shop preferences, basket contents and profile drafts locally. Clearing browser storage removes those local copies, not records held by MallPlot or its providers.
Why information is used
Information is used to create and protect accounts, show appropriate marketplace functions, process and reconcile orders, administer collection checks, handle returns and disputes, prevent fraud, maintain audit records, respond to support requests and meet applicable obligations. MallPlot may offer promotional, marketing and advertising communications about its own products and services or offers from its partners. These opportunities may arise when you respond to an advert, make an enquiry, register or access mallplot.com. Direct marketing messages are sent only with consent where required or another lawful basis that applies to the particular communication. Merely visiting the website, responding to an advert or accepting user terms does not by itself provide blanket consent to every channel or to disclosure of your contact details to partners. Marketing choices must identify the sender, channel and purpose, explain partner involvement, and provide an accessible way to decline or withdraw. Optional promotional or event alerts require a separate choice; accepting user terms alone does not enrol you.
The legal basis depends on the activity and applicable law, including providing a requested service, consent where required, legal obligations and legitimate operational/security interests where permitted. MallPlot must identify the applicable basis and retention rules before expanding processing.
Who receives information
Our hosting and infrastructure service providers support the website, data storage and operation of the platform. Our security systems protect account authentication and access credentials. When a payment feature is enabled, our payment service provider receives the information needed for that transaction. Payment processing is currently unavailable. Manufacturers, shop owners and service-point staff receive only the order and operational information needed for their assigned role.
When WhatsApp alerts are enabled, our messaging service provider processes the recipient phone number, approved message content and delivery information under its own applicable terms and privacy notices. The built alert service uses an opaque MallPlot reference as its template variable; pickup credentials and payment details are not included by that service. Providers may process information in countries other than yours. Required transfer safeguards must be assessed before production activation; MallPlot does not promise that all information stays in one country.
Your WhatsApp choices
We collect your WhatsApp number to share updates about new goods, events and promotions. By responding to Mallplot’s promotional or marketing adverts, shopping on Mallplot or creating an account, you authorise us to open a communication channel with you.
You can withdraw your consent to optional alerts through the available controls, by contacting support, or by replying STOP, UNSUBSCRIBE or CANCEL.
Withdrawing consent does not cancel an order or remove records needed to provide the service.
Advertising and partners
MallPlot may display advertisements and invite you to receive promotional messages from MallPlot or identified partners when you access mallplot.com or respond to an advert. Any future advertising cookies, pixels, remarketing or audience-sharing tools must be disclosed and use consent controls where required before activation. Direct contact by a partner, or sharing your personal information with a partner for its own marketing, requires an appropriate legal basis and clear notice; consent must be obtained where required. You can object to direct marketing or withdraw optional messaging consent without closing your account. A marketing opt-out does not prevent essential, lawful service communications about an existing order or account security.
Children and guardians
Children under 13 may use MallPlot only with a parent or legal guardian’s guidance through that adult’s account. Do not create an independent child account or submit a child’s personal details. Any future processing of children’s information must first have the required age, guardian and consent safeguards. Applicable law may require protections for older children too. A guardian who believes a child’s information has been submitted should contact support for review and appropriate removal.
Retention, security and requests
Information should be kept only for the purposes described and for applicable operational, dispute, accounting, fraud-prevention or legal requirements. Retention depends on the record type and the obligations and purposes that apply to it. Access controls, encrypted storage and secure transport are used in the backend, but no service can promise absolute security.
Contact support to request access, correction, deletion, consent withdrawal or other rights available under applicable law. MallPlot may need proportionate identity verification and may retain limited records when required or permitted, explaining relevant limits. You may also raise a complaint with the applicable data protection authority.
Google Analytics: your choice
With your separate permission, we use Google Analytics 4 to measure campaign sources, page engagement, shop registration and checkout activity. Google processes pseudonymous browser identifiers, device information and approximate location. We do not send your email, name, form contents, private invitation token or account identifier. Advertising personalisation and Google Signals are disabled. You can withdraw permission in Privacy settings; Google collection is off until you allow it. Google reports are separate from Mallplot's operational records. How Google uses information from sites that use its services.
Optional shopping analytics
By default, unless you choose essential only, Mallplot records first and later visits, selected navigation and product actions, visible sections, active viewing time, submitted product searches, device categories and source/campaign information. A random browser identifier can be linked to your account after verified sign-in. We do not merge accounts by IP address. Signing out resets the browser’s account tracking context.
Submitted searches are associated with the shop where they were made, or with the marketplace for a global search. They help us measure unmet demand and suggest available products. Shop owners receive their own shop’s aggregated reports. Authorized administrators can inspect retained customer journeys. Recommendations are estimates based on purchases and consented interactions, not statements of your intentions.
Observed IP addresses are encrypted in restricted network records and masked in ordinary reports. Approximate location is available only when its provider is configured; IPinfo then processes the observed address to return approximate country, region and city. An IP change alone does not establish fraud. Full-address access requires an authorized review reason and is audited.
Unmet product searches can be grouped into private sourcing opportunities. When image generation is enabled, OpenAI receives a cleaned product description and category to generate a labelled reference illustration. Customer identities, IP addresses and browsing histories are not included in image prompts. Generated illustrations are not photographs of actual stock.
Default retention is 90 days for detailed interactions, 30 days for network records, 365 days for daily aggregates and one year of inactivity for first-source account tags. Administrators can shorten detailed/network retention. Account privacy settings let you decline collection, change your choice or delete retained optional account history. Financial, identity and security records have separate operational purposes and are not erased by an analytics deletion. Analytics is enabled by default. You can switch to essential only or delete analytics history in account settings or through Privacy settings below. A small notice appears at most once every 30 days in this browser. Browser privacy signals keep optional collection off. We do not collect passwords, authentication codes, ID documents or bank details into analytics.
Changes
Material changes should be published with a new effective date and brought to affected users’ attention where required. A new purpose requiring consent must not be enabled solely by changing this notice.
Questions? support@mallplot.com