1. Who We Are
Car Maxi Limited (CAC RC 1895138), trading as Carmaxi, decides how and why your personal information is used, as described in this policy. Under the Nigeria Data Protection Act 2023 we are the "data controller". You can reach us by phone on +234 902 800 0805 (Abuja) or +234 810 064 4474 (Lagos), or in person at our showrooms: Central Business District, Beside Reiz Continental Hotel, FCT-Abuja, Nigeria; and 22 Karimu Kotun Street, Victoria Island, Lagos.
2. What We Collect
- Your account: your name, email address, phone number, and delivery address; a company name if you are a dealer; and your password, which we keep only in scrambled (hashed) form so nobody can read it.
- Identity verification (KYC): the type and number of your identity document (National Identification Number, international passport, driver's licence or voter's card) and the image or scan of it that you upload.
- Vehicles you sell: the details, photos, asking price and documents you provide, and the details of inspection appointments.
- What you do with us: your bids, offers, orders, pre-order requests, invoices, shipment details and tracking updates, and the wallet balance held for your security deposit.
- Payments: what you paid, when, how much, the payment reference, and whether the payment succeeded, was declined, or was held for review. You enter card and bank details on Paystack's page, and we do not store them. For a bank transfer we record the amount and the bank's reference.
- What you send us: support tickets, chat conversations (with our chat assistant and our team), contact and enquiry forms, and anything else you write to us.
- Technical and security information: your IP address, which we use to keep the site secure and to limit repeated sign-in attempts, and the cookies described in Section 9.
3. Why We Use It
- To create and run your account and membership, and to carry out the sale, purchase, pre-order, auction or service you asked for. This is needed to perform our contract with you.
- To confirm who you are, prevent fraud, and meet our legal duties. This is a legal obligation and our legitimate interest in keeping buyers and sellers safe.
- To take payments, issue invoices and receipts, ship and deliver vehicles, and arrange inspections.
- To send you messages about your orders, shipments, payments and account, and to answer your questions.
- To keep the site working and secure, and to improve it. This is our legitimate interest.
- Where we ask for your consent, you can withdraw it at any time.
We do not sell your personal information.
4. Who We Share It With
- Service providers who help us run the site: Paystack (payments), Neon (our database), Vercel (website hosting), Resend (sending email), and Anthropic (the AI behind our chat assistant). They may only use your information to provide their service to us.
- Our chat assistant: when you use it, what you type, and the name, phone number, email address and location you give at the start, are sent to Anthropic so it can write replies. Chat conversations are also kept so our team can follow up. Please do not put passwords, card numbers or identity numbers in a chat.
- Our team: members of our team can see only what their role needs. Changes staff make to records are checked and approved by the business owner before they take effect, and important actions are recorded.
- Sellers: if you make an offer on a vehicle listed by a seller, they can see your name and contact details so the sale can be completed.
- Shipping and inspection partners: freight forwarders, customs agents, and inspectors, only as much as they need to carry out your order or inspection.
- Authorities: where the law requires us to, or to protect against fraud.
Some of our service providers store or process information outside Nigeria. Where that happens, we take steps to keep your information protected in line with Nigerian law.
6. How Long We Keep It
We keep your information for as long as we need it to provide our services and to meet legal, accounting and dispute requirements. Identity-verification and transaction records may have to be kept for a number of years after your account ends, as Nigerian law requires. When we no longer need information, we delete it or make it anonymous.
7. How We Protect It
Passwords are stored only in hashed form. Connections to the site are encrypted. Access for our team is limited by role, changes staff make are approved by the business owner before they take effect, and important actions are recorded. We can suspend an account at once if we suspect misuse. No system is perfectly secure, so please tell us straight away if you think your account has been accessed by someone else.
8. Your Rights
Under the Nigeria Data Protection Act 2023 you have the right to:
- ask what personal information we hold about you and get a copy of it;
- have inaccurate information corrected;
- ask us to delete your information, where we no longer need it or the law does not require us to keep it;
- object to, or ask us to limit, how we use it;
- receive the information you gave us in a form you can move elsewhere;
- withdraw your consent at any time, where we rely on consent; and
- complain to the Nigeria Data Protection Commission if you think we have not handled your information properly.
To use any of these rights, contact us using the details in Section 1. We may need to check who you are first, and we will answer within a reasonable time.
9. Cookies
We use only what we need, and we do not use advertising, analytics or tracking cookies.
- Essential (always on):
ds_account_session keeps you signed in to your account, for up to 30 days, and is removed when you sign out. ds_cookie_consent remembers the choice you make about cookies, for 12 months. Without these the site cannot work securely. - Functional (only if you allow it): your saved cars, saved searches and vehicle alerts are kept in your browser's storage (
drivesleek.watchlist, drivesleek.savedSearches and drivesleek.vehicleAlerts) so they are still there next time. If you choose essential only, they last only until you close the page, and nothing is left on your device. - Other sites: when you pay, Paystack's page may set its own cookies, which are covered by Paystack's policy. Links to Google Maps and to social media open those sites, which have their own cookies.
You can change your choice at any time with "Cookie settings" at the bottom of every page. You can also clear cookies in your browser settings, which will sign you out.
10. Children
Our services are for people aged 18 and over. We do not knowingly collect information about children.
11. Changes to This Policy
We may update this policy. The current version and the date it took effect are shown at the top of this page. When a change is important, we will ask you to accept the new version the next time you sign in.
For any question about your information, or to use your rights, contact us by phone on +234 902 800 0805 (Abuja) or +234 810 064 4474 (Lagos), or in person at Central Business District, Beside Reiz Continental Hotel, FCT-Abuja, Nigeria, or 22 Karimu Kotun Street, Victoria Island, Lagos. If you are not happy with how we have handled your information, you can complain to the Nigeria Data Protection Commission.