Privacy Policy

Shabaq Auto Sales is a clearing and forwarding company based in Lagos, Nigeria. We provide vehicle importation, customs clearing, and delivery services across Nigeria. We are the Data Controller for personal data collected through this website.

Contact: degreatmacaulay169@gmail.com

We collect the following categories of personal data:

We do not collect payment card details, government ID numbers, or sensitive personal data as defined by the NDPA.

• To respond to your vehicle enquiries and contact form submissions
• To understand which car listings generate interest and improve our inventory
• To detect and prevent fraudulent or abusive use of the website
• To send transactional notifications to our internal team (e.g. new enquiry alerts)
• To comply with legal and regulatory obligations in Nigeria

We do not sell, rent, or share your data for third-party marketing.

Under the NDPA 2023, we process your data on the following lawful bases:

• Consent — when you voluntarily submit a contact form
• Legitimate interests — for analytics, security logging, and CTA click tracking, where our business interest does not override your privacy rights
• Legal obligation — where required by Nigerian law or regulation

Your data is stored in a PostgreSQL database hosted on Neon (a cloud database service). Our website is hosted on Vercel. Both services maintain industry-standard security practices including encryption at rest and in transit.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Access to your data is restricted to authorised personnel only.

This website may use essential cookies required for authentication and security. We may also use lightweight analytics tools to understand traffic patterns. We do not use advertising or third-party tracking cookies.

You can control cookies through your browser settings. Disabling non-essential cookies will not affect your ability to use the website.

We may share your data with:

• Service providers — Neon (database), Vercel (hosting), Cloudinary (image storage), and Resend (email delivery) — only to the extent necessary to provide the service
• Legal authorities — when required by Nigerian law, court order, or regulatory request

All third-party processors are contractually bound to handle your data securely and only for the purposes we specify.

Under the Nigeria Data Protection Act 2023, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your data where there is no compelling reason to retain it
• Restriction — ask us to pause processing of your data in certain circumstances
• Objection — object to processing based on legitimate interests
• Portability — receive your data in a structured, machine-readable format

To exercise any of these rights, email us at degreatmacaulay169@gmail.com. We will respond within 30 days.

If you are dissatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

• Contact form submissions — retained for 12 months unless you request earlier deletion
• CTA click logs — retained for 6 months for analytics purposes
• Technical/server logs — retained for 90 days

After these periods, data is securely deleted or anonymised.

For any privacy-related questions or to exercise your rights, contact us:

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.