Privacy Policy

Account data: When you create an account, we collect your name, email address, and password (stored as a secure hash).

Order data: When you place an order, we collect your delivery address, phone number, and payment transaction references. We do not store card details — payments are processed by Flutterwave, Paystack, or OPay.

Usage data: We automatically collect information such as your IP address, browser type, pages visited, and referring URLs to help us improve the site.

Cookies: We use session cookies for authentication and preference cookies to remember your cart and settings.

We use your data to: process and fulfil your orders; send transactional emails (order confirmations, shipping updates, and password resets); respond to enquiries; prevent fraud and maintain site security; and improve our products and services.

We will only send you marketing communications if you have opted in, and you can unsubscribe at any time.

We do not sell your personal data. We share data only with trusted third parties necessary to fulfil our services:

• Payment processors (Flutterwave, Paystack, OPay) — to complete transactions
• Logistics partners — to deliver your orders
• Email service providers — to send transactional messages
• Analytics providers — to understand site usage in aggregate

All third parties are required to handle your data securely and in accordance with applicable law.

We retain your account data for as long as your account is active. Order records are kept for a minimum of six years for accounting and legal compliance. You may request deletion of your account and associated personal data at any time by contacting us.

You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data (subject to legal obligations); object to or restrict certain processing; and withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at support@gexco.com.

We use industry-standard security measures including HTTPS, hashed passwords, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Our site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

Our services are not directed to children under 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or a prominent notice on our site. The date at the top of this page indicates when the policy was last revised.

If you have questions about this Privacy Policy or your data, please contact:

GEXCO Mercantile
Enugu, Nigeria
support@gexco.com