Privacy Policy Last Updated: July 2026

This Privacy Notice explains how GenesisOrb collects and processes your personal data when you visit or use our website, mobile applications, devices, products, services, social media platforms, and any other channels that reference this Notice. It sets out what we do with your personal data, how we keep it secure, and the rights available to you under applicable data protection law, including the Nigeria Data Protection Act 2023 (NDPA).

1. Who We Are

GenesisOrb is a technology-driven products and services company committed to delivering innovative solutions to our customers. Our platform connects consumers including but not limited to quality Afrocentric products through a seamless digital experience, supported by reliable logistics and secure payment services.

Any personal data provided to or collected by GenesisOrb is controlled by GenesisOrb Limited, the data controller responsible for your personal data under this Notice.

For any questions regarding this Notice, contact us at: genesisorb.ltd@gmail.com

2. Scope of This Notice

This Notice applies whenever GenesisOrb processes your personal data, including when you:

  • Visit our website
  • Purchase or use our internet-connected products
  • Register a product or create an account with us
  • Participate in surveys, promotions, or questionnaires
  • Subscribe to newsletters, product updates, or offers
  • Contact us through any channel

Minors (Under 18): In line with the Nigeria Data Protection Act 2023, GenesisOrb does not knowingly collect personal data from children under the age of 18 without verifiable parental or guardian consent. If you are under 18, please obtain consent from a parent or guardian before providing your personal data. Where we discover that personal data of a minor has been collected without appropriate consent, we will delete it promptly.

3. Personal Data We Collect

Personal data means any information that can be used to identify, directly or indirectly, a specific individual. We collect your personal data to provide tailored products and services and to continually improve our offerings and services.

In the course of our business, we may collect and process the following categories of personal data:

  • Identity & Contact Data: Full name, email address, phone number, and residential or business address
  • Demographic Data: Age, gender
  • Transaction & Shipment Data: Billing and shipping addresses, payment method, card details including verification number and expiry date
  • Purchase History: Warranty registration, order history, and shipping records
  • Product & Usage Data: Information generated through use of our products, firmware, or software including registration details, product setup data, crash logs, and geographic location
  • Account Data: Login credentials, email address, and account preferences
  • Communication & Preference Data: Records of interactions with us including via Live Chat, survey responses, shopping preferences, and complaints
  • Technical Data: IP address, device ID, browser type and language, operating system, screen resolution, timestamps, pages visited, and time spent on pages
  • Social Media Data: Where your social media privacy settings permit, we may receive information such as interests, username, profile photo, and activity
  • Third-Party Recipient Data: Where you ship products to another person, you are responsible for ensuring that person consents to sharing their data with us

4. Cookies

GenesisOrb uses cookies and similar tracking technologies on its website and mobile applications to distinguish you from other users and to enhance your browsing experience. For full details on the cookies we use and how to manage them, please refer to our Cookie Notice.

5. Purposes of Processing

We process your personal data for the following lawful purposes:

  • Delivering our products and services to you
  • Activating, registering, and enhancing product functionality
  • Conducting research to improve our products and services
  • Responding to your enquiries and service requests
  • Marketing, advertising, and personalised communications
  • Administering our business operations
  • Handling customer service, complaints, and disputes
  • Storing your preferences to improve future interactions
  • Sending relevant offers, surveys, and product updates
  • Notifying you of new products and services
  • Fulfilling legal, regulatory, and professional obligations
  • Conducting audits including accounting reviews
  • Preventing and detecting fraud
  • Pursuing or defending legal claims
  • Facilitating mergers, acquisitions, or asset transfers
  • Responding to regulatory enquiries or investigations

Failure to provide your personal data may result in:

  • Inability to deliver requested services
  • Delays in service or responses
  • Failure to receive product updates
  • Reduced product performance or functionality

6. Legal Bases for Processing

Under the Nigeria Data Protection Act 2023, we process your personal data on the following lawful bases:

  • Consent: where you have freely given, specific, informed, and unambiguous consent
  • Contractual Necessity: where processing is required to perform a contract with you
  • Legal Obligation: where we are required to process your data to comply with applicable law
  • Legitimate Interest: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. Where we rely on legitimate interest, we conduct a balancing assessment to ensure your rights are protected.

7. Data Retention

We retain your personal data only for as long as is necessary for the purposes stated in this Notice, or as required by applicable law or regulatory retention obligations. Upon expiry of the retention period, your data will be securely deleted or anonymised, unless retention is required for a specific lawful purpose such as ongoing legal proceedings or regulatory compliance.

8. Sharing Your Personal Data

We may share your personal data with:

  • Group Companies: Our subsidiaries and affiliates, for the purposes set out in this Notice
  • Third-Party Service Providers: Processors acting on our behalf, including payment processors, logistics partners, marketing agencies, website hosts, analytics providers, and music content platforms
  • Cookie and Analytics Partners: As described in our Cookie Notice
  • Law Enforcement and Government Agencies: Where required by court order, subpoena, or applicable law
  • Legal and Corporate Transactions: In connection with mergers, acquisitions, divestitures, or bankruptcy proceedings

All third-party processors are bound by data processing agreements requiring them to implement appropriate technical and organisational safeguards in line with the Nigeria Data Protection Act 2023. We do not sell, rent, or trade your personal data. Anonymous or aggregated data that cannot identify you may be shared for statistical purposes.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures include:

  • Access controls and role-based authorisation
  • Firewalls, encryption, and system patching
  • Password protection for portable devices
  • Confidentiality obligations for all staff
  • Incident response procedures for data breaches

In the event of a data breach likely to result in risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission (NDPC) and affected individuals in accordance with the NDPA 2023. All data is stored on secured servers. You are responsible for keeping your account password confidential.

10. Your Rights Under the Nigeria Data Protection Act 2023

As a data subject under the Nigerian Data Protection Act 2023, you have the following rights:

  • Right of Access: To request a copy of your personal data held by us and information on how it is used
  • Right to Rectification: To request correction of inaccurate or incomplete personal data
  • Right to Erasure: To request deletion of your personal data, subject to legal or regulatory retention obligations
  • Right to Restriction: To request that we temporarily suspend processing of your data
  • Right to Object: To object to processing based on legitimate interest or for direct marketing purposes
  • Right to Data Portability: To receive your personal data in a structured, commonly used format for transfer to another controller, where technically feasible
  • Right to Withdraw Consent: To withdraw consent at any time without affecting prior lawful processing
  • Right Against Automated Decision-Making: To request human review of any decision made solely by automated means that significantly affects you

To exercise any of these rights, contact us at genesisorb.ltd@gmail.com with:

  • Your full name and relevant contact details
  • The type of personal data concerned
  • The nature of your request
  • Proof of identity
  • Where applicable, reasons for correction or erasure

We will respond within 21 days of receiving your request, as required under the Nigeria Data Protection Act 2023. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng.

11. Targeted Advertising

We work with third-party advertising and analytics partners to personalise content and display relevant advertisements. This may involve sharing identifiers such as IP addresses, device IDs, cookies, and browsing data. Where such sharing constitutes a disclosure of personal data under the NDPA 2023, it is carried out on the basis of your consent or our legitimate interest, subject to appropriate safeguards.

12. Physical Locations and Events

Where GenesisOrb operates physical premises, we may use Closed-Circuit Television (CCTV) systems strictly for the security of visitors, staff, and assets, and for the prevention and detection of crime.

At corporate or social events, we may take photographs or record videos for promotional, educational, or archival purposes. These may be shared on our website, social media channels, and internal publications. By attending a GenesisOrb event, you acknowledge that your image may be captured. If you have concerns about this, please contact us in advance.

13. Global Privacy Control and Do Not Track

GenesisOrb recognises Global Privacy Control (GPC) signals as an expression of your privacy preferences, including opt-out of data sharing. You may enable GPC through your browser settings or a compatible extension. Visit https://globalprivacycontrol.org for more information. Please note that Do Not Track (DNT) signals are not yet standardised and we may not respond to all DNT requests.

This Notice is subject to periodic review and update to reflect changes in law, regulatory guidance, or our business practices. Material changes will be communicated to you through our website or directly.