Privacy Policy

Surgical Bazaar processes personal information to operate the marketplace, fulfil orders, support customers and vendors, prevent fraud and comply with applicable Nigerian privacy requirements, including the Nigeria Data Protection Act 2023 where applicable.

Information we collect

When you use the platform, we may collect your name, contact details, delivery addresses, account identifiers, purchase and support history, supplier business details, payment references and relevant security logs. We do not intentionally require clinical records to purchase ordinary marketplace products.

Why we process information

We use personal information to register and secure accounts, display vendor listings, process and reconcile orders, coordinate delivery and refunds, send service notifications, answer enquiries, comply with legal duties and protect platform integrity. Where consent is required, we request it and allow withdrawal subject to applicable exceptions.

Sharing information

Order information is shared only as needed with the responsible vendor, logistics provider, payment processor and approved service providers. Providers such as Paystack, Flutterwave and courier partners may independently process information under their own notices. We do not sell personal data to advertisers.

Security and retention

We apply role-based access, encrypted sensitive payout fields, audit logging and access controls. No online service can guarantee absolute security. Information is retained only as reasonably necessary for orders, account services, legal records, dispute resolution and security, then deleted or anonymised as appropriate.

Cookies and technical information

Essential session cookies keep users signed in and support cart and security functions. Operational logs may include device, IP and browser information. Optional analytics or promotional tracking, if introduced, will follow applicable notice and consent requirements.

Your rights

Subject to law, you may request access, correction, deletion, restriction, portability where applicable, objection to certain processing and information about our practices. Submit privacy requests through the Contact Us page; we may verify identity before disclosing account information. You may also contact the relevant Nigerian data-protection regulator.

International services and policy updates

Some service providers may process information outside Nigeria with appropriate safeguards where required. Updates to this notice will be posted here with notice of material changes as appropriate.