Legal

Privacy Policy

Last updated: June 13, 2026. Your privacy matters to us. This policy explains how Artisia collects, uses, and protects your data.

1. Who We Are

Artisia ("we", "us", or "our") is an online artisan marketplace operating in Nigeria. We are responsible for the personal data you provide when using our Platform at http://artisia.com.ng.

2. What Data We Collect

Data Type	What We Collect	Why
Account Data	Name, email, phone, password (hashed)	Account creation & login
Identity (KYC)	Government ID, selfie photo	Artisan verification
Location	City, state, GPS coordinates (if permitted)	Artisan discovery & map
Booking Data	Service details, dates, amounts, addresses	Transaction processing
Communications	In-app chat messages	Dispute resolution & support
Usage Data	Search queries, pages visited, device type	Platform improvement
Payment Data	Payment reference (via Paystack)	Transaction records (we do not store card details)

3. Location Data

Artisans may choose to share their precise location (GPS coordinates) so that customers can discover them on our interactive map. This permission is optional during registration, though it significantly increases booking visibility.

Your location is:

Only collected with your explicit permission
Stored securely in our database
Displayed publicly on the Artisia map only for verified artisans
Never sold to third parties

You can update or remove your location at any time from your profile settings.

4. How We Use Your Data

To create and manage your account
To verify artisan identities (KYC)
To facilitate bookings and payments
To show artisans on the discovery map
To send booking confirmations and notifications
To resolve disputes between users
To improve search results and platform features
To comply with legal obligations

5. Data Sharing

We do not sell your personal data. We share data only in the following limited circumstances:

Between users: When a booking is made, relevant contact information is shared between the customer and artisan
Payment processor: Paystack processes payments — see Paystack's Privacy Policy for their data handling
Legal obligations: We may disclose data to law enforcement if required by Nigerian law

6. Security Measures

We take security seriously. Our measures include:

All passwords are hashed using bcrypt with a high cost factor
All forms are protected with CSRF tokens
All database queries use prepared statements to prevent SQL injection
Session data is secured with httpOnly, SameSite, and strict mode settings
Security headers (X-Frame-Options, X-XSS-Protection, etc.) are sent on all pages
KYC documents are stored in secured directories with restricted access
Chat messages are monitored and phone numbers are blocked to prevent platform circumvention

7. User Tracking

We collect basic analytics data including search queries and page views to improve the platform. This data is anonymised and aggregated — we do not track individual users across the web or use third-party advertising trackers.

We do not use cookies for advertising. Session cookies are used solely for authentication and security purposes.

8. Your Rights

You have the right to:

Access the personal data we hold about you
Correct inaccurate data from your profile settings
Delete your account and associated data
Withdraw consent for location sharing at any time
Request a copy of your data by contacting us

To exercise any of these rights, contact us at support@artisia.ng.

9. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by law (e.g., transaction records for 7 years).

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or an in-app notification. Continued use of the Platform after updates constitutes acceptance.

11. Contact & Complaints

For privacy-related enquiries: privacy@artisia.ng
Artisia, Nigeria