Privacy Policy

 3P
Effective Date: 09/11/2025

1. Introduction

3P (“we”, “us”, “our”) values your privacy and is committed to protecting the personal information you provide to us via our website, services, and interactions. This Privacy Policy describes how we collect, use, disclose, store, and secure your personal data in Nigeria, in accordance with applicable Nigerian data protection laws (including the NDPA 2023 and NDPR 2019) and other relevant regulations.

2. Who we are

3P is a Nigerian-based bread brand and manufacturer operating in Nigeria. Our registered address is: 14B Tinubu Road, Ilupeju, Lagos Nigeria. If you have any questions about this policy or our data practices, you may contact us at: 3pindltd@gmail.com, or the Data Protection Officer at: 14B Tinubu Road, Ilupeju, Lagos Nigeria.

3. Scope

This Privacy Policy applies to all personal data we collect about you when you:

• Visit our website (full website address) or other online platforms;
  
• Purchase our products.
  
• Contact us or sign up for our newsletter, promotions or marketing communications;
  
• Interact with us through social media, events, or offline channels.
  It covers all forms of personal data (paper, electronic or other) that we control as the “data controller”.
  

4. The personal data we collect

We may collect the following categories of personal data from you:

• Identity data: name, date of birth, gender, photograph (if provided)
  
• Contact data: postal address, email address, mobile phone number
  
• Transaction data: details of the products you have purchased, payment information (not including full card details if processed by a third-party payment provider)
  
• Marketing & communication data: your preferences, consent status for receiving communications
  
• Technical/usage data: IP address, browser type, device identifiers, pages visited on our website, cookies, and similar technologies
  
• Other information you provide to us (for example, when you fill out a form, enter a competition, give feedback, or contact us).
  

We collect only the minimum data necessary for the purposes described below.

5. How and why we use your personal data (Purposes & lawful bases)

We will process your personal data for one or more of the following purposes:

• To fulfil your orders and deliver the products you have requested (lawful basis: contract)
  
• To communicate with you about your order, account status, or queries (contract / legitimate interest)
  
• To send you marketing communications (lawful basis: your consent)
  
• To improve our website, products, and services, and analyse usage (legitimate interest)
  
• To comply with legal, regulatory, or tax obligations (legal obligation)
  
• To protect our rights, property, or safety, or that of others (legitimate interest)
  

6. Consent and withdrawal of consent
   Where we rely on your consent to process your personal data (for example, marketing communications), you have the right to withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of the processing we conducted based upon your consent before withdrawal.
7. Cookies and similar technologies
   We use cookies and similar tracking technologies on our website to collect technical/usage data, improve user experience, remember your preferences, and for website analytics. You can set your browser to refuse cookies or notify you when a cookie is being set. Please note that if you disable cookies, some features of the website may not function properly.
8. Disclosure of your personal data
   We may share your personal data with:

• Third-party service providers who act as our processors (e.g., delivery companies, payment processors, IT-hosting providers, analytics providers). We ensure that such third parties are bound by written contracts that require appropriate data protection safeguards.
  
• Our affiliates and related companies for the purposes described in this policy.
  
• Legal or regulatory authorities, if required by law or to protect our rights or the rights of others.
  
• In the event of a sale, merger, reorganisation, or acquisition of 3P, your data may be transferred to a new controller under equivalent protections.
  We will not sell your personal data to third parties for their own marketing purposes without your explicit consent.
  

9. International transfers
   If we transfer your personal data outside Nigeria, we will ensure that such transfer is made only to jurisdictions that provide adequate levels of protection or by ensuring appropriate safeguards (e.g., standard contractual clauses) in accordance with applicable law.
10. Data retention
    We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to comply with legal, regulatory, tax, or accounting requirements. After that period, your data will either be deleted or anonymised.
    Typical retention periods may vary depending on the nature of the data and the reason for processing. If you require specific retention periods, please contact us.
11. Data security
    We have put in place appropriate organisational, technical, and physical security measures to protect your personal data from unauthorised access, loss, destruction, or damage. Access to your personal data is restricted to authorised personnel who are subject to confidentiality obligations.
12. Your rights as a data subject
    Under Nigerian data protection laws (e.g., S.34-S.38 NDPA), you have the following rights:

• Right to be informed about what personal data we hold about you;
  
• Right of access to your personal data;
  
• Right to rectification of inaccurate data;
  
• Right to erase or “be forgotten” (in certain circumstances);
  
• Right to restrict or object to processing;
  
• Right to withdraw consent;
  
• Right to data portability (in certain cases);
  
• Right not to be subject to purely automated decision-making (including profiling) where this produces legal or similarly significant effects.
  To exercise your rights, please contact our Data Protection Officer or use the contact details above. We will respond within a reasonable timeframe and as required by law.
  

13. Complaints
    If you believe that we have not complied with this Privacy Policy or applicable data protection laws, you may notify us. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or other relevant supervisory authority in Nigeria.
14. Children’s data
    Our website and services are not intended for children under the age of 16 (or other locally relevant age). We do not knowingly collect or solicit personal information from children. If you are a parent or guardian and you become aware that your child has provided us with personal data without your consent, please contact us. We will take steps to delete such information.
15. Changes to this policy
    We reserve the right to update this Privacy Policy from time to time to reflect changes in our data practices or relevant regulations. We will post any changes on our website with the effective date. We encourage you to check this page periodically.
16. Governing law
    This Privacy Policy is governed by Nigerian law and, to the extent applicable, the provisions of the NDPA 2023 and other relevant Nigerian legislation. If any part of this policy is found to be inconsistent with applicable law, that part shall be amended or interpreted to comply.
17. Contact
    If you have questions about this policy or how we handle your personal data, please contact:
    Data Protection Officer
    3P
    14B Tinubu Road, Ilupeju, Lagos Nigeria, Email: 3pindltd@gmail.com, Phone:+234 813 789 1827