This Privacy Policy explains how Impala limited and its affiliates ("Impala", "we", "our", or "us") collect, use, disclose, store, transfer, and otherwise process personal data when you access or use the Impala website, mobile application, marketplace platform, wallet features, customer support channels, and related services (collectively, the "Platform").
Impala operates a technology marketplace that connects buyers with independent vendors and facilitates order placement, payments, communications, fulfilment coordination, and related services. This Privacy Policy applies to personal data relating to buyers, prospective buyers, vendors, prospective vendors, logistics partners, website visitors, and other individuals who interact with us.
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. Where consent is required by applicable law for a specific processing activity, we will request that consent separately.
Impala is the data controller for the personal data described in this Privacy Policy, except where this Privacy Policy states otherwise or where a vendor, payment provider, logistics partner, or other third party independently determines how your personal data is processed.
Data controler details
Legal entity name: Impala limited
Registered business address:
Privacy email: legal@shopimpala.com
Support email: hello@shopimpala.com
If applicable, you may also contact our data protection contact or data protection officer at legal@shopimpala.com
We collect personal data directly from you, automatically from your use of the Platform, and from third parties.
Personal data you provide
If you are a buyer, we may collect:
Full name;
email address;
phone number;
delivery address;
Country, state and city of residence;
Wallet and payment related information;
Order details and transaction history;
Customer support comunications;
Account preferences, saved items, profile details; and
Any other information you choose to provide.
If you are a vendor or prospective vendor, we collect:
Full name;
Business name and trading name;
Business registration details;
Tax identification details, where applicable;
Government-issued identification and verification documents;
Bank account and payout details;
Business address and contact information;
Product catalogue and listing information;
Pricing, stock, fulfilment, and transaction information;
Licences, permits, certifications, and regulatory information;
Communications with us; and
Performance, compliance, dispute, and enforcement records.
If you contact us, participate in a survey, enter a promotion, submit a complaint, or otherwise engage with us, we may collect the information included in those communications or submissions.
B. Personal data collected automatically
When you use the Platform, we may automatically collect:
IP address;
Device identifiers;
Browser type and version;
Device type, operating system, and mobile network information;
Date, time, and duration of access;
Pages viewed, links clicked, searches performed, and features used;
App usage data, crash logs, and diagnostics;
Cookie identifiers and similar tracking data; and
Approximate location derived from IP address or device settings, where enabled.
C. Personal data from third parties
We may receive personal data from:
Payment processors and financial service providers;
Identity verification and fraud prevention providers;
Vendors and buyers in connection with transactions, complaints, or disputes;
Marketing, analytics, and advertising partners;
Social media or single sign-on providers, if you use those services to access the Platform; and
Regulators, law enforcement agencies, courts, or other governmental authorities.
We use personal data to:
Create, maintain, and administer user accounts;
Verify identity, eligibility, and onboarding information;
Enable buyers to browse, order, pay for, and receive goods;
Enable vendors to list products, receive orders, fulfil transactions, and receive payouts;
Operate payment, refund, chargeback, and reconciliation processes;
Facilitate communications between buyers, vendors, logistics partners, and Impala;
Provide customer service and respond to complaints, claims, and disputes;
Monitor transactions, detect fraud, abuse, prohibited conduct, and security incidents;
Enforce our terms, policies, and platform rules;
Comply with legal, regulatory, tax, accounting, KYC, AML, sanctions, and law enforcement obligations;
Improve the Platform, user experience, products, services, and support operations;
Conduct analytics, service measurement, and business reporting;
Send service-related notices, updates, receipts, confirmations, and security alerts;
Send marketing communications where permitted by law;
Protect the rights, property, safety, and security of Impala, our users, and third parties; and
Carry out any other purpose disclosed at the point of collection or otherwise permitted by law.
Where required by applicable law, we process personal data on one or more of the following legal bases:
Performance of a contract with you, including providing marketplace, wallet, payment, onboarding, and support services;
Compliance with legal obligations, including KYC, AML, fraud prevention, tax, accounting, consumer protection, and lawful disclosure requirements;
Legitimate interests, including operating and improving the Platform, protecting against fraud and misuse, securing the Platform, enforcing our agreements, and managing business operations, provided those interests are not overridden by your rights;
Consent, where we specifically request and rely on your consent, including for certain marketing or cookie-based activities; and
Establishment, exercise, or defence of legal claims, where necessary.
We may share personal data as follows:
A. With Vendors
If you place an order, we may share relevant buyer information with the applicable vendor, including your name, delivery details, order information, and contact details where necessary for order acceptance, fulfilment, support, returns, or dispute resolution.
Vendors may process buyer personal data for fulfilment, customer support, compliance, and related purposes. In some cases, vendors act as independent data controllers for the personal data they receive.
B. With Buyers
Where necessary for a transaction, we may share limited vendor information with buyers, including vendor name, business details, product information, delivery status, and communications relevant to an order, dispute, or refund.
C. With Logistics Partners
We may share buyer and vendor information with logistics, shipping, warehousing, customs, and delivery partners to facilitate pick-up, transport, customs processing, and delivery.
D. With Payment and Financial Service Providers
We may share personal data with payment processors, card networks, banks, wallet providers, payout providers, fraud screening providers, and other financial service partners to process payments, refunds, payouts, chargebacks, and related compliance checks.
E. With Service Providers
We may share personal data with service providers who process information on our behalf, including providers of hosting, cloud storage, analytics, customer support, communications, marketing, verification, security, professional services, and other operational support, subject to appropriate contractual restrictions where applicable.
F. For Legal and Safety Reasons
We may disclose personal data to courts, regulators, law enforcement, tax authorities, government agencies, or other third parties where required or permitted by law, or where reasonably necessary to:
E. With Service Providers
We may share personal data with service providers who process information on our behalf, including providers of hosting, cloud storage, analytics, customer support, communications, marketing, verification, security, professional services, and other operational support, subject to appropriate contractual restrictions where applicable.
Comply with legal process or legal obligations;
Enforce our agreements or policies;
Investigate fraud, security issues, or unlawful activity; or
Protect the rights, safety, and property of Impala, users, or others.
G. Business Transfers
We may share or transfer personal data in connection with an actual or proposed merger, acquisition, financing, investment, restructuring, asset sale, insolvency proceeding, or similar corporate transaction, subject to applicable confidentiality and legal requirements.
We use cookies, SDKs, pixels, tags, local storage, and similar technologies to operate the Platform, remember user preferences, maintain security, analyse usage, measure campaign effectiveness, and improve our services.
These technologies may include:
Strictly necessary technologies required for login, navigation, payment flow, and security;
Analytics technologies used to understand usage and improve performance;
Functional technologies used to remember settings and preferences; and
Advertising or measurement technologies used to deliver or measure marketing, where applicable.
You can control cookies through your browser settings, device settings, or any cookie management tools we make available. Disabling certain technologies may affect Platform functionality.
We may send you transactional or service-related communications, including account notices, order updates, payment confirmations, security alerts, and support messages. These communications are necessary for operation of the Platform and are not promotional in nature.
Where permitted by law, we may also send promotional communications about products, services, offers, and updates. You may opt out of marketing emails by using the unsubscribe link in the message, adjusting your account settings where available, or contacting us using the details in this Privacy Policy. Opting out of marketing will not prevent us from sending essential service communications.
We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
Provide the Platform and related services;
Maintain account and transaction records;
Comply with legal, tax, accounting, KYC, AML, audit, and regulatory obligations;
Investigate complaints, disputes, chargebacks, and fraud;
Enforce our agreements; and
Establish, exercise, or defend legal claims.
Retention periods vary depending on the nature of the personal data and the reason it was collected. When personal data is no longer required, we will delete, anonymise, or securely store it in accordance with applicable law and our internal retention practices, except to the extent continued retention is permitted or required.
Your personal data may be processed in Nigeria and in other countries where our affiliates, service providers, vendors, payment providers, logistics partners, or technology partners operate.
Where we transfer personal data across borders, we will take reasonable steps to ensure that the transfer is made in accordance with applicable law and subject to appropriate safeguards, contractual protections, or other lawful transfer mechanisms.
We implement reasonable technical, administrative, organisational, and physical safeguards designed to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction. These measures may include access controls, encryption in transit where appropriate, system monitoring, authentication procedures, vendor assessments, and internal governance controls.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly of any unauthorised account activity.
Your Privacy Rights
Subject to applicable law, you may have the right to:
Request access to personal data we hold about you;
Request correction of inaccurate or incomplete personal data;
Request deletion of personal data in certain circumstances;
Object to or request restriction of certain processing;
Withdraw consent where processing is based on consent;
Request portability of personal data, where applicable; and
Lodge a complaint with a competent data protection regulator or authority.
To exercise your rights, please contact us at legal@shopimpala.com. We may request information to verify your identity before processing your request. We may deny or limit requests where permitted by law, including where retention is required for compliance, fraud prevention, dispute resolution, or legal claims.
You may request closure of your account by contacting us or using any account deletion feature we make available. Account closure may result in loss of access to order history, wallet features, saved preferences, and other Platform functionality.
Please note that we may retain certain information after account closure where necessary for legal compliance, financial recordkeeping, fraud prevention, debt recovery, dispute resolution, security, or other legitimate business purposes.
The Platform is intended only for individuals who are at least 18 years old and are legally capable of entering into binding contracts. We do not knowingly collect personal data directly from children. If we become aware that we have collected personal data from a child in violation of applicable law, we will take reasonable steps to delete that information, subject to any legal retention obligations.
Third-Party Services and Links
The Platform may contain links to third-party websites, applications, payment services, social media platforms, or other services that are not controlled by Impala. We are not responsible for the privacy, security, or data handling practices of those third parties. You should review their privacy notices before providing personal data to them.
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data practices. If we make material changes, we will post the updated version on the Platform and update the effective date. Where required by law, we will provide additional notice or obtain consent.
If you have any questions, requests, or complaints about this Privacy Policy or our data practices, please contact us at:
Impala limited
9, AMA PEPPLE ESTATE, POWERLINE BUS STOP, ISHERI-OLOFIN, LAGOS, LAGOS STATE, NIGERIA
Email: hello@shopimpala.com
Support: support@shopimpala.com