Privacy Policy

STOKK is provided by Lexium Industries Ltd (RC 9161328), 59C I.C.E. Road, Benin City, Edo State 300102, Nigeria (“we”, “us”).

We are the data controller for the account information of merchants and their staff: who you are, how you sign in and how you use STOKK.

Each shop decides what it records about its own customers, such as their names, phone numbers and debts. For those customer records we act as a data processor: we store and process them only on the shop’s instructions so we can provide the service, and the shop is responsible for collecting them lawfully. If you are a shop’s customer and want to see, correct or remove your details, please ask the shop first. If you cannot reach them, contact us and we will help.

We collect the minimum needed to provide the service:

We use your information to operate STOKK, sync your data across devices, process subscription payments, provide support, and keep the service secure.

We do not sell your personal information, and we do not use your business records for advertising.

The NDPA requires a lawful basis for each use of personal data. We rely on:

Owners sign in with their phone number and a 6-digit PIN. We send a one-time code by SMS to verify your number when you sign up, sign in on a new phone or reset your PIN. Staff join by scanning a QR code or opening an invite link, and use a 4-digit PIN on phones paired to the business.

If you choose to link a Google account, we receive your name and email address from Google, and we never see or store your Google password.

Our servers are in France, in the European Union, hosted by Contabo GmbH. We use a small number of service providers to run STOKK, each only for the job listed here:

Because our servers and some of these providers are outside Nigeria, your information is transferred abroad. These transfers are protected by our contracts with the providers and by the providers’ own safeguards, as the NDPA allows.

Subscription payments are processed by our payment partners (Paystack and Flutterwave). Your card details are handled by them and never stored on STOKK servers.

We keep your account and records for as long as your account is active.

You can delete your account in the app at any time, or ask us by email if you no longer have the app. Deletion happens after a 30-day grace period, during which you can sign in and cancel. After that your account, every business you own and everything in them are permanently deleted, and any copies left in our backups are overwritten within a further 30 days. See how to delete your account.

We keep subscription and payment records for 6 years for tax and accounting. They are anonymised, so they no longer include your name, phone number or email.

Under the NDPA you have the rights below, and you may have similar rights under the laws of the other countries where STOKK works. To use them, use the app or email [email protected]. We may first confirm it is you, for example with a code sent to your registered phone number.

If we become aware of a personal data breach that is likely to put people’s rights and freedoms at risk, we will notify the Nigeria Data Protection Commission within 72 hours, and tell affected users without undue delay what happened and what they can do. See our Security page for how we protect your account.

Questions about this policy, or about how we handle your information? Contact the Data Protection Officer, Lexium Industries Ltd, at [email protected], or write to us at 59C I.C.E. Road, Benin City, Edo State 300102, Nigeria.