Brandsquare · Legal
Privacy Policy
What information we collect, why we collect it, who we share it with, and the choices you have.
We respect your privacy. This policy explains, in plain language, how Brandsquare handles the personal information of the people who visit our websites, send us enquiries, message us on WhatsApp or buy machines from us.
1. Who We Are
Brandsquare (“we”, “us”) is a machinery procurement and sales company headquartered in Lagos, Nigeria, operating at brandsquare.shop. We decide how and why your personal information is used, which makes us the data controller under the Nigeria Data Protection Act 2023 (NDPA).
This policy covers brandsquare.shop and our related websites and landing pages, our WhatsApp Business number, email, phone calls, social media and any order you place with us. For anything about your information, contact hello@brandsquare.shop.
2. Information We Collect
Information you give us
- Enquiry and quote forms: your name, phone number, email address, company, location, the machine you are interested in and any other answers you type into the form.
- WhatsApp: your WhatsApp name and number, and the messages, photos and documents you send us.
- Email, calls and social media: what you tell us when you contact us.
- Orders: business and billing details, delivery address, and payment confirmations. We do not collect or store your card details; payments go through banks or payment platforms.
Information collected automatically on our websites
- The pages you visit, how long you stay, how far you scroll and where on a page you click, so we can see which pages are useful.
- Your device type (mobile, tablet or desktop), screen width and browser.
- The site or ad that brought you to us, including campaign tags (such as utm_source and utm_campaign) and ad click identifiers (such as Facebook’s fbclid).
- A random visitor code kept in your browser’s storage, so repeat visits can be counted. It does not contain your name or contact details.
- When you send a form, a scrambled (one-way hashed) version of your IP address, used to stop spam and abuse.
Information from others
When you respond to one of our adverts on Facebook or Instagram, or message us through them, Meta passes us the details needed to reply to you, such as your name and the message you sent.
3. How We Use Your Information
- To answer your enquiry, advise you on the right machine and prepare quotations.
- To process your order: payments, production, shipping, customs coordination and delivery.
- To provide warranty, spare parts, installation and after-sales support.
- To keep you updated about your order, and, where you have agreed, to send you offers about machines that may interest you. You can opt out at any time.
- To understand which pages and adverts work, and to improve our website and campaigns.
- To prevent spam, fraud and misuse.
- To meet our legal, tax and accounting obligations.
4. Our Legal Basis
Under the NDPA we rely on one or more of the following for each use of your information:
- Contract: to prepare a quotation you asked for, and to perform an order.
- Consent: for marketing messages, which you can withdraw at any time.
- Legitimate interests: to run and improve our business, measure our advertising and protect our website, balanced against your rights.
- Legal obligation: to keep financial records and respond to lawful requests from authorities.
5. Advertising and Meta
We advertise on Facebook and Instagram. To learn which adverts bring genuine customers, we use Meta’s Conversions API: when an enquiry moves forward (for example it becomes a qualified lead or a sale), we tell Meta that the event happened.
The contact details sent with these events, such as email address and phone number, are hashed before they leave our systems — turned into a code that cannot be reversed back into the original. Meta uses them only to match the event to its own users and to measure and improve ad delivery. We never receive information from Meta about who you are in return.
Meta handles this information under its own Privacy Policy. You can control the adverts you see in your Facebook or Instagram Ad preferences.
6. WhatsApp
We use the WhatsApp Business Platform, provided by Meta, to talk to customers. Messages you send to our business number pass through WhatsApp’s systems and are stored in our customer management system so our sales and support team can reply and see the history of your enquiry.
Only Brandsquare staff who handle enquiries can read these conversations. You can ask us to stop messaging you at any time by replying STOP.
7. Who We Share Your Information With
We share only what is needed for each purpose:
- Our team: staff who handle your enquiry or order, each with access limited to their role.
- Manufacturers in China: the specifications and order details needed to build your machine.
- Shipping, freight and customs partners: your name, contact details and delivery address, so your machine can reach you.
- Banks and payment platforms: to receive and confirm payments.
- Service providers: website hosting, email delivery, and Meta for WhatsApp and advertising measurement.
- Professional advisers and authorities: accountants and lawyers, and government bodies where the law requires it.
We do not sell your personal information.
8. International Transfers
Because our machines are manufactured in China and some of our service providers operate servers outside Nigeria, your information may be transferred to other countries. Where this happens, we take the steps required by the NDPA to make sure it remains protected, and we share only what the recipient needs.
9. Cookies and Browser Storage
Our own website analytics does not use cookies. It keeps a random visitor code in your browser’s local storage and a session code in session storage, used only to count visits and understand how pages are used.
Other tools on our site, such as Meta advertising tools, may set their own cookies. WordPress sets cookies for staff who sign in. You can clear or block cookies and site storage at any time in your browser settings; the website will still work.
10. How Long We Keep Your Information
- Enquiries that did not lead to an order: up to three years after our last contact with you, then deleted.
- Clients and orders: for as long as warranty and after-sales support apply, and at least six years after the order for tax and accounting purposes.
- Website analytics: up to 24 months.
- Marketing: until you opt out; after that we keep only a note that you opted out, so we do not contact you again.
11. How We Protect Your Information
Our websites use encrypted connections (HTTPS). Access to customer records is limited to named staff accounts with role-based permissions, activity on each record is logged, and the keys we use to connect to services such as WhatsApp are stored encrypted. IP addresses collected with forms are stored only in hashed form. No system is perfectly secure, but we review our safeguards regularly and will tell you and the regulator if a breach puts your rights at risk.
12. Your Rights
Under the Nigeria Data Protection Act 2023 you have the right to:
- ask for a copy of the personal information we hold about you;
- have inaccurate information corrected;
- have your information deleted where we no longer need it;
- object to, or ask us to restrict, how we use it, including for marketing;
- withdraw your consent at any time;
- receive your information in a portable format.
To use any of these rights, email hello@brandsquare.shop. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission (NDPC).
13. How to Delete Your Data
You can ask us to delete the information we hold about you at any time, including information received through Facebook, Instagram or WhatsApp:
- Email hello@brandsquare.shop with the subject “Delete my data”, or send “Delete my data” to our WhatsApp business number.
- Include the phone number and/or email address you used with us, so we can find your records.
- We will confirm your request and complete it within 30 days, and tell you when it is done.
We may need to keep some records, such as invoices for a completed order, where the law requires it. If so, we will tell you what we keep and why.
14. Children
Our services are for businesses and adults. We do not knowingly collect information from anyone under 18. If you believe a child has sent us their details, contact us and we will delete them.
15. Changes to This Policy
We may update this policy from time to time. The latest version will always be on this page with its effective date. Where a change is significant, we will highlight it on our website.
16. Contact Us
Brandsquare, Lagos, Nigeria
Email: hello@brandsquare.shop
Website: www.brandsquare.shop
Questions about your privacy? Email hello@brandsquare.shop. See also our Terms and Conditions.