DOOKSHOP PRIVACY POLICY
Last Updated: 29 June 2026

Dookshop (“Dookshop,” “we,” “us,” or “our”) respects your privacy and is committed to being transparent about how we collect, use, and protect your personal data when you visit or make a purchase on dookshop.com (the “Site”).

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your own data. It applies to readers who browse, register an account, or purchase eBooks or audiobooks on the Site. It does not cover information we collect from authors or publishers who distribute Works through Dookshop, which is addressed separately in our Self-Publishing Terms of Service.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at notice@dookshop.com. For general customer support, please contact hello@dookshop.com.

Summary

• We comply with the Nigeria Data Protection Act, 2023 (“NDPA”) and, where applicable to readers in the UK or EU, the General Data Protection Regulation (“GDPR”).

• We collect information you give us directly (creating an account, making a purchase, contacting us, or signing up to our mailing list), and information collected automatically when you use the Site (via cookies and Google Analytics).

• We use Brevo as our email marketing platform. If you opt in to receive marketing emails, your information is shared with Brevo in accordance with its own privacy policy.

• Payments on the Site are processed by Flutterwave. Dookshop does not store your full card or bank details — only what is needed to identify the payment method used and process refunds.

• We will not sell your personal data, and will not share it with third parties beyond those described in this Policy without your consent, except where required by law.

• You have rights over your personal data, including the right to access, correct, delete, or restrict our use of it, and to withdraw consent at any time. Contact us to exercise any of these rights.

• We use cookies to operate the Site and, with your consent, to analyse how it is used. You can manage your cookie preferences at any time.

In Full

1. Information You Give Us

We collect information that you provide directly to us, including:

• Account registration: When you create a Dookshop account, we collect your name, email address, and password. Your account stores a library of the eBooks and audiobooks you have purchased, so you can access them again without re-downloading or re-purchasing.

• Purchases: When you buy a Work, we collect billing information (such as your name and email address) needed to process the transaction and issue a receipt. Payment card and bank details are collected and processed directly by Flutterwave — see Section 3 below.

• Mailing list: If you opt in to receive marketing emails, we collect your email address and, optionally, your name so we can send you newsletters, new-release notifications, and promotional offers via Brevo. You can unsubscribe at any time using the link in any marketing email.

• Customer support: If you contact us by email or through the Site, we collect the information you provide in order to respond to your query.

2. Information We Collect Automatically

When you visit the Site, we automatically collect certain technical information, including your IP address, browser type and version, device type, operating system, and general location (such as city or country) inferred from your IP address. We also collect information about how you use the Site, including pages visited, links clicked, time spent on pages, and the site you came from.

We use Google Analytics to collect and analyse this information so we can understand how the Site is used and improve it. Google Analytics uses cookies and similar technologies to do this. You can find out more about how Google handles this data in Google's own privacy policy.

3. Cookies

Cookies are small text files placed on your device when you visit the Site. We use the following categories of cookies:

• Necessary cookies, which allow core functions of the Site to work, such as keeping you logged in and remembering items in your cart. These do not require your consent.

• Analytics cookies (Google Analytics), which help us understand how visitors use the Site.

• Marketing cookies, which may be used in connection with our email marketing and promotional activities.

In line with NDPA requirements, we will ask for your opt-in consent before setting any cookie other than a necessary cookie. You can manage or withdraw your cookie preferences at any time using the cookie settings link in the Site footer or through your browser settings. Disabling cookies may affect how parts of the Site function.

4. Payment Information

All payments on the Site are processed by Flutterwave, a licensed payment service provider. When you make a purchase, your card or bank details are sent directly to Flutterwave and are not stored on Dookshop's own servers. Dookshop retains only the information needed to confirm that payment was received, issue refunds where applicable, and identify the payment method used (such as the card type and last four digits). Please refer to Flutterwave's own privacy policy for details on how it handles your payment data.

5. How We Use Your Information

We use your personal data for the following purposes, each of which is grounded in a lawful basis recognised under the NDPA and GDPR:

• To create and manage your account, and to provide access to your purchased Works (performance of a contract).

• To process payments and issue receipts or refunds (performance of a contract).

• To respond to customer support queries (performance of a contract / legitimate interest).

• To send you marketing emails, where you have opted in (consent — you may withdraw this at any time).

• To analyse and improve the Site (legitimate interest, supported by cookie consent for analytics cookies).

• To detect and prevent fraud, and to comply with our legal obligations, including those under Nigerian law (legal obligation).

6. Who We Share Your Information With

We do not sell your personal data. We share personal data only with the following categories of third parties, and only as necessary for the purposes described in this Policy:

• Flutterwave, to process payments;

• Brevo, to send marketing emails to readers who have opted in;

• Google, through our use of Google Analytics, to analyse Site usage;

• Service providers who help us operate the Site (such as hosting providers), under contractual obligations to protect your data; and

• Law enforcement, regulators, or other third parties where required by law or to protect Dookshop's legal rights.

Some of these providers may process or store data outside Nigeria. Where this occurs, we take steps to ensure your data continues to receive an adequate level of protection, consistent with the cross-border data transfer requirements of the NDPA, including by relying on providers that maintain appropriate safeguards.

7. Data Retention

We retain your account information and purchase history for as long as your account remains active, so that you can continue to access your library of purchased Works. If you close your account, we will retain transaction records for as long as required by Nigerian tax and accounting law, and will delete other personal data within a reasonable period, except where we are required or permitted by law to retain it for longer.

8. Your Rights

Subject to applicable law, you have the following rights over your personal data:

• Access: the right to obtain a copy of the personal data we hold about you.

• Rectification: the right to have inaccurate or incomplete data corrected.

• Erasure: the right to have your data deleted where we no longer have a lawful basis to keep it.

• Restriction: the right to limit how we use your data in certain circumstances.

• Objection: the right to object to our use of your data, including for direct marketing.

• Withdrawal of consent: where we rely on your consent (such as for marketing emails or non-essential cookies), the right to withdraw that consent at any time.

• Data portability: the right to receive your data in a structured, commonly used, machine-readable format.

To exercise any of these rights, contact us at [PRIVACY EMAIL ADDRESS]. We will respond without undue delay. If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC), or, if you are located in the UK or EU, with your local data protection authority.

9. Children's Privacy

The Site is not directed at children, and we do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us at notice@dookshop.com so we can delete it.

10. Data Security

We use reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach that is likely to affect your rights or freedoms, we will notify the NDPC within 72 hours of becoming aware of it and will notify you directly if the breach is likely to pose a high risk to you, as required under the NDPA.

11. Other Websites

The Site may contain links to third-party websites, including those of authors, partners, or social media platforms. This Policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any website you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page with a new “Last Updated” date. We encourage you to review this Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise any of your data protection rights, please contact us at notice@dookshop.com. For general customer support unrelated to privacy, please contact hello@dookshop.com