Policy

Privacy

Last changed: 8 October 2026

The short version: We use your details to take the payment and to deliver the order. We do not sell data and we send no marketing SMS. We never hold a buyer's card or bank details: Paystack has those.

Who we are

STBRNATIVS is run by STBRN Studios, a business name registered in Nigeria (BN 9915652), at 20 Murphy Akins Street, Hercules Bus-stop, Iju Ishaga, Ikeja, Lagos State, Nigeria. STBRN Studios holds the details on this page. You can write to us at hello@stbrnativ.com.

What we hold about buyers

  • Your name, phone number and delivery address.
  • Your note for the seller, if you wrote one.
  • What you ordered.
  • The payment status and the payment reference.
  • The proof of delivery.
  • A problem report, and the words and photos that you add to it, if you sent one.
  • A review, if you left one.

We never hold your card or bank details. Paystack has those.

What we hold about sellers

  • Your phone number, name, shop name and area.
  • Your items: photos, text and prices.
  • Your bank name, account name and the last 4 digits of your account number. The full number goes to Paystack.
  • Your photos of packed parcels and of handovers.
  • Your words and photos when a buyer reports a problem with an order.
  • Your payout records.

Technical details

  • When a login code is asked for, or a question is sent to the assistant, we keep the network address (IP) of the request for about a day. This is to stop abuse.
  • On the forms that text a code, Cloudflare Turnstile checks that a person, not a program, is asking.
  • We count the views of shop pages, as plain counts per day.
  • We use no advertising trackers and no analytics cookies.
  • The buyer pages keep your basket in your browser.
  • When you buy again, the checkout offers the name and address of your last paid order with the same phone number, from any shop. It shows them only after you enter the code we text to that number.
  • The seller app keeps a sign-in token on the phone for 30 days.
  • The seller web (app.stbrnativ.com) keeps you signed in with one cookie for 7 days. It is needed to sign in. We do not use it to follow you.
  • Login codes are stored scrambled. They stop working after 10 minutes, and are deleted within 2 hours.

Why we use your details

The Nigeria Data Protection Act 2023 asks us to have a reason for each use. These are our reasons:

  • The order: to carry out the order that you made or received. This is the contract.
  • The law: to keep the records that the law asks for.
  • Safety: to stop fraud and abuse. This is our legitimate interest.
  • Your consent: where we ask for it.

Who we share details with

  • The seller: the buyer's name, phone number, address and note, to deliver the order. If the buyer reports a problem, also the buyer's words and photos about it.
  • The buyer: if the buyer reports a problem, the seller's words and photos about it.
  • The seller's rider: the same details, through a link that works only while the parcel is on the way.
  • The courier, through Shipbubble: the buyer's name, phone number and address.
  • Paystack: the payment, the buyer's phone number as part of the payment record, and the seller's bank details.
  • Termii: the phone number and the text of each SMS that we send.
  • Cloudflare: hosting. The database is in Western Europe, so your details leave Nigeria.
  • OpenAI or Anthropic, through Cloudflare (one of the two at a time, whichever our team picks): a seller's item photos and text, to write a listing. Also a seller's questions about their shop, with order data that has the buyer's first name only. It never has a buyer's phone number, address or note. Also the questions a buyer asks the assistant on an item or order page, with the facts of that item or order that the buyer can already see on the page (never the delivery code, a phone number, an address or a note). We keep these questions and answers so our team can help and make the answers better.
  • Cloudflare's own AI models (Workers AI): the words and photos of a problem report and its thread (with the listing's first photo and the seller's photo of the packed parcel), a buyer's messages to our team, and the words of a listing. They help our team check reports and spot requests to pay outside STBRNATIVS. Phone numbers, account numbers and email addresses are hidden first, and a buyer's name, address and note are never sent. The model only suggests: a person from our team makes every decision about a refund or a payout.

We do not sell data. We send no marketing SMS.

How long we keep details

Login codes and network addresses are deleted on their own (see above). Nothing else is deleted on its own yet. We keep order and payment records for as long as tax and payment rules ask.

If you ask, we correct or delete your details where the law allows.

Your rights

  • See the details that we hold about you.
  • Correct them.
  • Delete them.
  • Object to how we use them.
  • Take back a consent that you gave.
  • Get a copy.
  • Complain to the Nigeria Data Protection Commission (NDPC).

To use a right, write to us at hello@stbrnativ.com.

Adults only

The service is for adults. You must be 18 or older to use it.

Changes

The service and this page can change. The date at the top shows the last change.

More

Read the terms and the refund policy.