Legal

Privacy Policy

Last updated 8 November 2026

1. Who we are

ORRANET ("we", "us") runs ORRANET Studio, where creators sell digital products, courses and services, and where customers buy, learn and book. We are responsible for the personal data described here and handle it in line with the Nigeria Data Protection Act 2023 and other data protection laws that apply to you. This policy applies to creators, customers and visitors. Contact details are in section 14.

2. What we collect

• Account details: your name, email address, phone number, country, time zone, and a securely scrambled (hashed) password.
• Creator profile and payout details: public name, handle, headline, bio, photo and portfolio items you choose to publish; and the bank name, account number and account name you give us so we can pay you.
• Checkout and booking details: the name, email and phone you type at checkout; what you bought; for bookings, your chosen time, your time zone, and your answers to the creator's questions and any note you add.
• Payment information: Paystack processes your payment. We receive the transaction reference, amount, status and payment channel. We do not see or store your full card number.
• Learning activity: which course lessons you have completed.
• Technical information: IP address and device information when you log in or download a file, and error records, to keep the Service secure and working.
• Messages: emails you send us, and the service emails we send you.

3. How we use it

• To create and run your account, and to log you in safely (to perform our contract with you).
• To take payment, deliver files and courses, confirm bookings, pay creators and handle refunds and disputes (contract).
• To send receipts, booking confirmations and reminders, payout notices and security alerts (contract and legitimate interests).
• To prevent fraud, abuse and misuse, and to keep the Service secure (legitimate interests).
• To keep records the law requires, such as financial and tax records (legal obligation).
• To improve the Service, using information that does not identify you wherever we can (legitimate interests).

4. Who we share it with

• The creator you buy from or book: your name, email, phone and booking answers, as explained in section 5.
• Paystack, our payment processor, to take and settle payments.
• Brevo, which sends our emails for us.
• Our hosting and technical providers, who store and run the Service for us.
• Video and font providers: when you watch an embedded video, YouTube, Vimeo or Bunny receive information such as your IP address and may set their own cookies, under their own policies. Our pages load fonts from Google Fonts.
• Authorities and advisers: where the law requires it, or to protect rights, prevent fraud, or get professional advice. If our business is ever sold or reorganised, your data may transfer to the new owner under this policy.

We do not sell your personal data. Links you choose to click, such as "Add to calendar" or "Share on WhatsApp", take you to those services, which have their own policies.

5. Creators and your details

Creators see the name, email address and phone number of people who bought from or booked them, together with what they bought and, for bookings, the answers given. Under our Terms, creators may use this only to deliver and support what you bought and to contact you about it. They must keep it safe, must not sell it, and must not use it for unrelated marketing without your agreement. Each creator is responsible for how they handle your details once they have them. If you think a creator has misused your information, tell us.

6. Cookies

We use a small number of essential cookies: one keeps you logged in and holds the security token that protects our forms. We do not use advertising or tracking cookies. Embedded videos and fonts from other providers may set their own cookies; you can block these in your browser settings, but some videos may not play.

7. Transfers abroad

Some of our providers, such as email, video and font services, process data outside Nigeria. Where we send personal data abroad, we take steps to make sure it is protected to an appropriate standard, as the law requires.

8. How long we keep it

We keep your account details while your account is open. We keep transaction and payout records for as long as the law requires for accounting, tax and dispute purposes. Security and download records are kept for a limited period, normally up to 12 months. Course and booking records are kept so that you and the creator can refer back to them. When we no longer need data, we delete it or make it anonymous.

9. Security

We protect your data with secure connections, hashed passwords, private storage for paid files, personal access links, and limited access for our team. No system is perfectly secure. If a breach affects your data and the law requires us to tell you or the regulator, we will.

10. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or move it to another service; you can object to certain uses and withdraw any consent you gave. We do not make decisions about you using fully automated processing. To use a right, email us (section 14). We will reply within a reasonable time, normally within 30 days, and may need to confirm who you are first. We may keep what the law requires us to, for example transaction records. If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng) or the regulator in your country.

11. Children

ORRANET Studio is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us their data, please contact us and we will delete it.

12. Emails

We send service emails: receipts, booking details and reminders, payout notices, password codes and security alerts. We do not send marketing emails without your agreement, and you can opt out of any marketing at any time.

13. Changes

We may update this policy. We will post the new version here with a new date, and tell you by email or in the Service if the change is important.

14. Contact

For anything about your data, email shopwithorranet@gmail.com with "Privacy" in the subject.