Privacy policy

Last updated [date]

[Registered company name] (“Mint Voucher”) is registered with the Office of the Data Protection Commissioner as a data controller ([ODPC registration number]). This policy explains how we handle personal data under the Data Protection Act, 2019.

What we collect

• Buyers: name, email, phone number, company name (bulk orders) and payment reference. We never see or store card numbers; Paystack processes payments.
• Recipients: name, phone number, optional email, and any gift message you write.
• Shop staff: email address and sign-in activity.

Why we use it

• To deliver vouchers and receipts (SMS and email), verify and redeem vouchers, and provide support.
• To prevent fraud and meet legal and tax obligations.

We do not sell personal data or use recipients' details for marketing.

Who we share it with

Only service providers that help us run the service: Paystack (payments), Supabase (database), Resend (email), Advantasms (SMS), Upstash (queues), and DigitalOcean (hosting). The shop named on a voucher sees the voucher amount and the recipient's name when it is redeemed. [Confirm any cross-border transfer safeguards.]

How long we keep it

[Retention period, e.g. 7 years for transaction records required by tax law; contact details deleted [X] months after the voucher expires.]

Your rights

You can ask to access, correct or delete your data, or object to its use. You can also complain to the Office of the Data Protection Commissioner.