Privacy Policy

We collect information you provide when you create or use an account, including your name, email address, account type, and authentication information. Supplier accounts may also provide a store name, business details, contact information, location, verification information, product listings, inventory, vehicle fitment data, and product images.

We may also collect security and technical information such as session data, browser and device information, IP address, and basic usage events needed to operate, protect, and improve the service. Passwords are handled by our authentication provider and are not stored in readable form by Twenty-Two Parts.

We use personal information to create and secure accounts, authenticate users, provide marketplace search and supplier tools, review supplier and listing information, prevent abuse, respond to support requests, maintain records, comply with legal obligations, and improve the reliability and usability of Twenty-Two Parts.

Depending on the activity, we process information to perform our agreement with you, comply with legal obligations, protect our legitimate interests in operating a safe marketplace, or act with your consent where consent is required. You may withdraw consent for future processing where consent is the applicable basis.

We share information only as needed with service providers that support authentication, database hosting, file storage, transactional email, analytics, security, and application hosting, or when disclosure is required by law. These providers process information for the services they supply to us.

Approved marketplace listings are public. They may display supplier store information, general business location, verification status, product information, vehicle fitment, price, inventory availability, and marketplace-facing product images. We do not publish account passwords or private authentication credentials.

We use reasonable administrative and technical safeguards designed to protect personal information. We keep information for as long as needed to provide the service, maintain security and business records, resolve disputes, and satisfy legal requirements. No online system is completely risk-free, so please use a unique password and protect your sign-in details.

Some service providers may process information outside Nigeria. Where this occurs, we take steps intended to ensure an appropriate level of protection and use lawful transfer safeguards required by applicable data-protection law.

Subject to applicable law, you may ask to access, correct, delete, restrict, or receive a copy of your personal information, object to certain processing, withdraw consent, and raise a complaint with the Nigeria Data Protection Commission. Some requests may be limited where we must retain information for security or legal reasons.

To make a request, use a verified Twenty-Two Parts support channel and state that your request concerns privacy. We may ask for information needed to confirm your identity before acting on the request. You can also learn more from the Nigeria Data Protection Commission.

We may update this policy when the service, our providers, or legal requirements change. We will publish the revised date here and provide additional notice when a change materially affects how we use personal information.