Privacy notice

TADECLABS INNOVATIONS, operating SendEbun, is the data controller. Contact us about anything in this notice at hello@ebun.com.ng, +234 906 704 2371, or Afro-Stuff Estate, Alagbaka Estate, Akure, Ondo State 340223, Nigeria.

We collect:

• your name and email address, for your receipt and if we need to reach you about the order;
• the order itself — the gift, the price, and the Paystack payment reference;
• the IP address your order came from, to detect fraud.

Paystack processes your payment. Your card or bank details go to Paystack, not to us. We use your details to fulfil the order you asked for (a contract with you), and to prevent fraud and keep accounting records (our legal obligations and legitimate interests).

Someone who wanted to send you a gift gave us your name and WhatsApp number, and their message to you. We use them only to deliver that gift: to address it to you, to show it to you when you open it, and to let a vendor hand it over. Our lawful basis is legitimate interests — delivering a gift meant for you — and we don’t use your details for anything else.

We don’t send you marketing because you received a gift. If you’d rather we didn’t hold your details, tell us and we’ll delete them once any gift waiting for you is collected, expired or refunded.

When a gift is collected, the vendor sees the gift and the recipient’s name so they can hand over the right thing. Counter staff may add their own name when confirming, so a disputed collection can be traced.

We use these services to run SendEbun, each only for its purpose:

• Paystack — payments and refunds.
• Supabase — our database.
• Vercel and Railway — hosting for our website and servers.
• WhatsApp (Meta) — when a gift link is sent through WhatsApp, including when you send it from your own WhatsApp.
• The vendor handing over a gift, as described above.

Some of these providers store data outside Nigeria. Where they do, we rely on their contractual and security commitments to protect it to the standard Nigerian law requires. We may also disclose data where the law requires it.

We keep order and payment records for as long as tax and accounting law requires. Gift messages and recipient details are kept with the order. You can ask us to delete them sooner, and we will, unless we need them to resolve a dispute or meet a legal obligation.

Data travels encrypted between your device and our servers. Access to order data is limited to the people and systems that need it, and gift links and collection codes are random and single-purpose.

Under the Nigeria Data Protection Act 2023, you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct anything that's wrong;
• delete your data, or stop or restrict how we use it;
• move your data to another service, where that applies.

Email hello@ebun.com.ng and we’ll respond within 30 days. If you’re unhappy with how we’ve handled your data, you can complain to the Nigeria Data Protection Commission (NDPC).

We use only the cookies needed to make the service work, such as keeping a vendor’s counter screen signed in. We don’t use advertising or tracking cookies.

SendEbun is for people aged 18 and over to buy gifts. We don’t knowingly collect data from children who buy gifts.