Pistice
Privacy policy
What we collect, why we collect it, and what we promise never to do with it.
Last updated 1 May 2026
Scope
This policy covers how Pistice Communications ("Pistice", "we", "us") handles personal information collected through pistice.ng, our mobile app, our WhatsApp business line, and our physical shop in Ughelli. We comply with the Nigeria Data Protection Act (NDPA, 2023) and the directions of the Nigeria Data Protection Commission (NDPC).
What we collect
- Account info — name, email, phone, password (hashed)
- Delivery info — addresses you save, recipient phone numbers
- Order history — what you bought, when, where it went
- Payment info — handled by Paystack; we receive only a transaction reference and the last four digits if applicable
- Device + browsing — pages viewed, anonymized device IDs (for fraud detection and analytics)
Why we collect it
- To process and deliver your orders
- To support you (returns, warranty, dispute resolution)
- To send transactional messages (order updates on email, SMS, WhatsApp)
- To improve the product — what features people use, what's broken
- To detect fraud — chargebacks, duplicate accounts, bot signups
- To meet our legal and tax obligations
Your rights
Under the NDPA you can ask us at any time to:
- See what data we hold on you
- Correct anything that's wrong
- Delete your account and the data tied to it (subject to tax/audit obligations we have to keep some order records for 6 years)
- Export your data in a portable format
- Object to certain processing (e.g. marketing — we don't do this without consent anyway)
Email privacy@pistice.ng or message our WhatsApp business line and we'll respond within 7 days.
How we protect it
- TLS encryption on every request
- Passwords hashed with bcrypt — even we can't see them
- Card details never touch our servers (Paystack handles PCI)
- Access to customer data inside the team is role-restricted and audited
Contact our data office
Pistice Communications · Ughelli, Delta State, Nigeria · privacy@pistice.ng