Privacy Policy

Declutter Pawn Shop ("DPS", "we", "us") runs a marketplace for pre-owned goods in Lagos. This policy explains how we handle personal information when you use our website, the Telegram channel, Dayo (our bot), or Dina (our Instagram automation for Partners).

We've tried to write this in plain language. Where legal terms are unavoidable, we've flagged them. If anything is unclear, email us — we'd rather explain it than have you guess.

By using DPS, you agree to this policy. If you don't, please stop using our services.

We collect the minimum needed to run the platform. Nothing more.

Information you give us directly

Information we collect automatically

Information from payments

When you buy or pay a negotiation fee, Paystack processes the payment and shares a transaction reference with us. We never see or store your full card number, CVV, or PIN. Paystack holds that data under its own compliance obligations.

• To run transactions.Coordinate sales, hold funds in escrow, and release payouts.
• To verify identity.Prevent fraud, duplicate accounts, and bad actors.
• To communicate.Send offer notifications, sale confirmations, payout receipts, and reminders.
• To coordinate pickup.Share buyer and seller details only after payment, so the exchange can happen.
• To improve the platform.Understand which features work and which don't, via aggregated analytics.
• To comply with the law.Retain records as required and cooperate with legitimate legal requests.

Under the Nigeria Data Protection Act (NDPA) 2023, we process your data on these grounds:

• Contract performance.Most data is processed because it's necessary to fulfil the sale, purchase, or partnership agreement between us.
• Legitimate interest.Fraud prevention, platform security, and service improvement — balanced against your rights.
• Legal obligation.Tax, financial records, and responses to lawful requests.
• Consent.Marketing emails and non-essential analytics — you can withdraw anytime.

All payments — item purchases, offer negotiation fees, and partner transactions — run through Paystack, a PCI-DSS compliant payment processor.

• We never store card data.Card numbers, CVVs, and payment PINs are handled entirely by Paystack.
• What we see:The customer email, transaction reference, amount, and success/failure status.
• What we store:Transaction reference, buyer email, amount, and timestamp — for reconciliation and payout processing.
• Paystack's own privacy practices:Governed by Paystack's privacy policy.

We don't sell your data. We don't rent it. We share it only when necessary to run the platform.

Who we share with

• Buyers and sellers.Once a sale is agreed, we share contact details between the two parties so they can coordinate pickup. Never before payment.
• Paystack.For payment processing and reconciliation.
• Google (Tag Manager / Analytics).Aggregated, anonymized usage data.
• Gmail (Google Workspace).To send transactional and notification emails.
• Telegram.For bot interactions through Dayo.
• Law enforcement.If legally required, or in good-faith belief that disclosure is necessary to prevent fraud or harm.

• Account data.Kept while your account is active. Deleted or anonymized within 90 days of account closure, unless a legal retention period applies.
• Transaction records.Retained for 7 years for tax, accounting, and legal compliance.
• Listing photos and descriptions.Kept while the listing is live plus 12 months after removal, in case of dispute.
• Analytics data.Aggregated and anonymized, retained indefinitely for platform improvement.
• Marketing consent records.Kept indefinitely to prove you opted in or out.

We take reasonable and appropriate measures to protect your data. No system is perfect, but we aim high.

• Encryption in transit.All traffic to and from DPS runs over HTTPS/TLS.
• Restricted access.Only a small team of authorised DPS staff can access user data, and only when needed for support or operations.
• Vendor security.Our key infrastructure providers — Paystack, Google, Telegram — are industry-standard and audited independently.
• Fraud monitoring.Suspicious activity gets flagged and reviewed.

Under the NDPA, you have the following rights over your personal data:

• Access.Request a copy of the personal data we hold about you.
• Correction.Ask us to fix inaccurate or incomplete data.
• Deletion.Request that we delete your personal data, subject to legal retention requirements.
• Restriction.Ask us to stop processing your data in certain ways while a concern is reviewed.
• Portability.Request your data in a structured, machine-readable format.
• Objection.Object to processing based on legitimate interest or direct marketing.
• Withdraw consent.If processing is based on consent, withdraw it anytime — the withdrawal takes effect going forward.

To exercise any of these, email info@declutterpawnshop.com from the email address on your account. We'll respond within 30 days.

We use a small number of cookies and similar technologies to keep the site working and to understand how people use it.

• Essential.Session management, form state, and security. Can't be disabled without breaking the site.
• Analytics.Google Tag Manager, running in an aggregated fashion. We see patterns, not individuals.
• No advertising cookies.We don't retarget you across the web, and we don't sell usage data to advertisers.

You can block or clear cookies through your browser settings. Essential cookies are required for the platform to function properly.

Our platform links to external services — Telegram, Instagram, Facebook, Paystack, WhatsApp. Once you leave DPS, the privacy practices of those services apply. We recommend reviewing their policies if you have concerns.

We're not responsible for the content, security, or privacy practices of third-party sites.

DPS is not intended for anyone under 18. We don't knowingly collect personal data from children.

If you believe a child has provided us with personal information, contact us immediately. We'll delete the account and any associated data promptly.

DPS operates in Nigeria, but some of our service providers (Google, Paystack, Telegram) may process data outside Nigeria. Where that happens, we rely on their standard data protection commitments and, where applicable, contractual safeguards.

By using DPS, you consent to the transfer of your data to these providers under their standard terms.

We may update this Privacy Policy periodically. When we do, we'll revise the effective date at the top of the page. Material changes will be announced on the Telegram channel and by email to registered users.

Continuing to use DPS after an update means you accept the revised policy.

Questions about your data, or want to exercise any of your rights? Reach us. Write to us at info@declutterpawnshop.com.