Privacy notice

Chara Networks, trading as Loca. is the data controller for personal information processed through this website, the Loca mobile experience and our operations services.

Privacy questions and requests can be sent to locaenterprises9@gmail.com.

• Account details such as your name, email address and verified phone number.
• Order and delivery information, including recipients, contact numbers, addresses and an optional map pin you choose to save.
• Cart activity, favourites, reviews, support requests and communication preferences.
• Farmer or supplier application information, catalogue details and operational records when you use a seller or staff service.
• Payment status and transaction references. Paystack handles card and bank details; Loca does not receive or store your full payment credentials.
• Security and service information such as session cookies, request times, error logs and one-way hashed rate-limit identifiers.

We process information where it is necessary to:

• create and secure your account and deliver one-time sign-in codes;
• price, accept, fulfil, deliver and support your orders;
• operate farmer, catalogue, warehouse and staff workflows;
• prevent fraud, abuse and unauthorised access;
• keep financial, tax and operational records required by law; and
• send optional updates where you have chosen to receive them. You may withdraw that choice without affecting an order already in progress.

Our lawful bases include performing our contract with you, complying with legal obligations, protecting legitimate business and security interests, and consent where the law requires it.

We share only what is needed with providers that help run the service, including Paystack for payments, our phone and email verification providers, Railway for application hosting, Neon for managed database hosting and Cloudinary when seller images are uploaded.

Delivery and authorised operations personnel receive the order information needed to fulfil or support your purchase. We may also disclose information where required by law, to protect users, or during a properly managed business transfer. Some providers may process information outside Nigeria under their contractual and legal safeguards.

Loca uses the essential loca_session cookie to keep you signed in securely. Your browser may also keep preferences, recent searches and recently viewed products on your own device. We do not currently use advertising cookies. If that changes, this notice and the consent controls will be updated before non-essential tracking is enabled.

We keep personal information only for as long as needed for the purposes above. Security counters expire on short windows. Account information is retained while your account is active; financial and order records may be retained where accounting, fraud-prevention or legal duties require it.

You can delete your account from the profile page once active deliveries are complete. Sign-in details, saved addresses, favourites and support history are removed; completed order records are retained in anonymised form. You can also contact us if you cannot access the account.

Subject to applicable law, you may ask to access, correct, erase, restrict or receive your personal information, object to certain processing, or withdraw consent. You may also complain to the Nigeria Data Protection Commission. We may verify your identity before acting on a request.

Start with your profile and account controls or email locaenterprises9@gmail.com.

We use access controls, encrypted connections, protected session cookies and limited-attempt verification to protect the service. No internet system is risk-free, so please report suspicious activity promptly.

We may update this notice as the service or law changes. The effective date above will change when a material revision is published.