Last updated: 13 September 2026
1. Introduction
Ciza Farms Ltd (“CIZA Farms,” “we,” “us” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you visit https://cizafarms.com, create an account, purchase products, request delivery or local pickup, communicate with us, or otherwise use our services.
Ciza Farms Ltd is registered in Nigeria under RC 1671816 and is the data controller responsible for personal data processed through this website.
2. Personal Data We Collect
Depending on how you interact with our website, we may collect:
Information you provide
- Name
- Email address
- Telephone number
- Billing and delivery addresses
- Account and login information
- Products purchased, quantities and pack sizes
- Order, delivery and local-pickup information
- Payment status and transaction reference
- Messages, enquiries, reviews and other communications
- Any other information you voluntarily provide
Information collected automatically
When you visit the website, certain technical information may be collected automatically, including:
- Internet Protocol address
- Browser and device type
- Operating system
- Pages visited and time of access
- Referring website
- Cookie and session information
- Shopping-cart activity
- Login and security records
We collect only the information reasonably necessary to operate the website, process orders, provide customer service and comply with our legal obligations.
3. How We Use Personal Data
We may use your personal data to:
- Create and administer customer accounts
- Process, confirm and fulfil orders
- Calculate delivery charges
- Arrange delivery or local pickup
- Process payments and confirm payment status
- Send order, payment, delivery and pickup notifications
- Respond to enquiries, complaints and refund requests
- Prevent fraud, unauthorized transactions and misuse
- Maintain accounting, tax and business records
- Improve our website, products and customer experience
- Protect our legal rights and the security of our systems
- Send promotional communications where you have consented
- Comply with applicable laws, regulations and lawful requests
4. Lawful Bases for Processing
We process personal data when one or more of the following applies:
- Processing is necessary to perform a contract with you, including processing and delivering your order.
- Processing is necessary to comply with a legal or regulatory obligation.
- Processing is necessary for our legitimate business interests, provided those interests do not override your rights.
- You have given consent for a particular purpose.
- Processing is necessary to establish, exercise or defend legal claims.
You may withdraw consent at any time where processing is based on consent. Withdrawal will not affect processing lawfully carried out before the withdrawal.
5. Customer Accounts
Customers may purchase as guests or create an account.
If you create an account, we store the information supplied in your customer profile so that you can manage your details and view relevant order information. You are responsible for keeping your login credentials confidential.
Inactive customer accounts may be deleted after 24 months of inactivity. Associated transaction records may still be retained where required for accounting, tax, fraud-prevention, dispute-resolution or other legal purposes.
6. Orders and Payments
When you place an order, we collect information needed to process the purchase, arrange delivery or pickup, communicate with you and maintain transaction records.
Online payments are processed through Paystack Payments Limited. Paystack may collect and process payment and transaction information under its own privacy and security policies.
CIZA Farms does not ordinarily receive or store your complete debit- or credit-card number, card PIN or other full card credentials. We may receive limited payment information, including payment status, transaction reference, payment channel and amount paid.
Paystack’s privacy information is available at https://paystack.com/terms.
7. Delivery and Local Pickup
Where delivery is requested, we may share the minimum information necessary with authorised employees, delivery personnel or logistics providers. This may include your name, telephone number, delivery address and relevant order information.
Where local pickup is selected, we use your contact and order information to prepare the order, verify collection and notify you when the order is ready.
Delivery and pickup information must be accurate. We are not responsible for delays caused by incorrect or incomplete information provided by a customer.
8. Cookies and Similar Technologies
Our website uses cookies and related technologies necessary to:
- Maintain shopping-cart contents
- Remember checkout and session information
- Enable customer login
- Improve website security
- Remember user preferences
- Support payment and order processing
- Understand and improve website performance
Some cookies are essential for the website and online store to operate. Optional analytics or marketing cookies will be used only where permitted and, where required, with your consent.
You may block or delete cookies through your browser settings. Disabling essential cookies may prevent the shopping cart, checkout, login or other website functions from operating correctly.
9. Reviews, Comments and Communications
If you submit a product review, comment or enquiry, we may collect the information entered in the relevant form together with technical information used for security and spam detection.
Approved product reviews may be displayed publicly with the name or identifier you provide. Your email address will not ordinarily be displayed publicly.
Please do not submit sensitive personal information through product reviews or public comment areas.
10. How We Share Personal Data
We may share personal data only where reasonably necessary with:
- Paystack and participating financial institutions for payment processing
- Delivery and logistics providers
- Website hosting, email and technical-service providers
- WordPress, WooCommerce and compatible service providers supporting the website
- Professional advisers, including accountants, auditors, lawyers and insurers
- Government agencies, courts, regulators or law-enforcement authorities where legally required
- A successor or purchaser in connection with a lawful merger, restructuring or transfer of the business
Service providers are expected to process personal data only for authorised purposes and to apply appropriate confidentiality and security safeguards.
We do not sell or rent customers’ personal data.
11. International Data Transfers
Some technology, hosting, payment, email or support providers may process or store information outside Nigeria.
Where personal data is transferred internationally, we will take reasonable steps to ensure that the transfer is made under an appropriate legal basis and with safeguards required by applicable data-protection law.
12. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to satisfy legal, accounting, tax, security and dispute-resolution requirements.
Our current online-store retention periods are:
- Inactive customer accounts: 24 months
- Pending orders: 7 days
- Failed orders: 30 days
- Cancelled orders: 24 months
- Refunded orders: 7 years
- Completed orders: 7 years
When an applicable retention period expires, information may be securely deleted, anonymised or otherwise made non-identifiable, unless continued retention is legally required.
Payment providers and other independent service providers may maintain different retention periods under their legal obligations and privacy policies.
13. Data Security
We use reasonable administrative, technical and organisational safeguards designed to protect personal data against accidental loss, misuse, alteration, unauthorised access or disclosure.
These measures may include access restrictions, secure connections, software updates, authentication controls, backups, monitoring and reputable payment-processing services.
No internet transmission or electronic-storage system can be guaranteed to be completely secure. Customers should also protect their devices, email accounts and account credentials.
14. Your Data-Protection Rights
Subject to applicable law, you may have the right to:
- Be informed about how your personal data is used
- Request access to personal data held about you
- Request correction of inaccurate or incomplete information
- Request deletion of personal data where legally applicable
- Object to certain processing
- Request restriction of processing
- Request data portability
- Withdraw consent where processing is based on consent
- Object to direct marketing
- Request review of qualifying automated decisions
- Lodge a complaint with the Nigeria Data Protection Commission
Some rights are subject to legal limitations. For example, we may retain order, payment, tax or accounting information where required by law, even after an account-erasure request.
To exercise a right, contact us at info@cizafarms.com. We may request reasonable information to verify your identity before acting on the request.
15. Marketing Communications
We will send promotional emails or messages only where we have an appropriate lawful basis, including consent where required.
You may unsubscribe using the instructions in the communication or by contacting info@cizafarms.com. You may still receive essential service communications concerning orders, payments, security, delivery or local pickup.
16. Children’s Privacy
Our website and products are intended for adults and persons capable of entering into legally binding transactions.
We do not knowingly collect personal data directly from children without appropriate parental or guardian authorisation. If you believe a child has provided personal data improperly, please contact us so that we can take appropriate action.
17. Third-Party Websites
Our website may contain links to third-party websites or services. We do not control and are not responsible for their privacy practices.
We encourage you to read the privacy policy of any external website or service before providing personal information.
18. Changes to This Policy
We may update this Privacy Policy to reflect changes in our operations, technology, service providers or legal obligations.
The revised policy will be published on this page with an updated revision date. Material changes may also be communicated through the website or another appropriate method.
19. Contact Us
For privacy enquiries, requests or complaints, contact:
Ciza Farms Ltd
RC 1671816
Ajah, Lagos State, Nigeria
Email: info@cizafarms.com
Website: https://cizafarms.com
You may also lodge a complaint with the Nigeria Data Protection Commission if you believe your data-protection rights have been violated.