Admin Login Vendor Login
Transparency & Control

Cookie Policy

Effective: 1 January 2025
Last Revised: March 2025
Compliance: NDPR 2019

This Cookie Policy explains how Ajaro Limited ("we", "us", "the Company") uses cookies and similar tracking technologies on our platform at www.ajaro.com.ng and its associated applications. It should be read alongside our Privacy Policy and Terms & Conditions. We are committed to being transparent about what data we collect through these technologies and giving you meaningful control over your preferences.

1

What Are Cookies?

Cookies are small text files that are placed on your device — computer, smartphone, or tablet — when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide information to the site operators. Cookies cannot harm your device and do not contain executable code or personal information on their own.

Beyond traditional cookies, we may also use related technologies that work in a similar way:

  • Web beacons (pixel tags): Tiny invisible images embedded in web pages or emails that signal when content has been loaded or viewed.
  • Local storage: A browser-based storage mechanism used to save user preferences (such as sidebar collapse state or dark mode) persistently on your device.
  • Session storage: Similar to local storage but cleared automatically when you close your browser tab.
  • Device fingerprinting: A technique that collects passive technical signals from your device (browser version, screen resolution, timezone) to help detect fraud and bot activity. We use this only for security purposes.

Throughout this Policy, references to "cookies" include all of the above technologies unless otherwise specified.

2

Why We Use Cookies

We use cookies for the following core reasons:

  • To keep you securely logged in to your Vendor Dashboard across pages and sessions
  • To remember your preferences such as sidebar layout, dark mode, and notification settings
  • To protect the Platform from fraudulent activity, bot traffic, and unauthorised access attempts
  • To understand how vendors and visitors use the Platform so we can improve it over time
  • To measure the effectiveness of our marketing and onboarding campaigns
  • To deliver relevant marketing communications to vendors who have opted in
Your Control
Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. All other cookie categories are optional and can be managed through our preference panel in Section 6 or through your browser settings as described in Section 7.
3

Types of Cookies We Use

Cookies can be classified by how long they last and who sets them:

3.1 By Duration
  • Session cookies — Temporary cookies that exist only while your browser is open. They are automatically deleted when you close the tab or browser. We use these to maintain your login state during a single visit.
  • Persistent cookies — Cookies that remain on your device for a set period or until you manually delete them. We use these to remember your preferences across visits and to support analytics and marketing features.
3.2 By Origin
  • First-party cookies — Cookies set directly by Ajaro on the ajaro.com.ng domain. These are used for authentication, preferences, and security.
  • Third-party cookies — Cookies set by external service providers (such as analytics or payment platforms) whose services are embedded in or linked from our Platform. See Section 5 for full details.
4

Cookie Categories in Detail

Below is a full breakdown of each cookie category we use, what specific cookies are set, and how long they persist.

5

Third-Party Cookies

Some cookies on our Platform are set by third-party service providers whose tools we have integrated. These providers have their own privacy and cookie policies which we encourage you to review. We have entered into data processing agreements with each provider listed below.

ProviderCategoryPurposeTheir Policy
Paystack Strictly Necessary Secure payment processing and fraud prevention during checkout paystack.com/privacy
Flutterwave Strictly Necessary Payout disbursement and payment gateway operations flutterwave.com/privacy
Google Analytics Analytics Anonymised page view tracking and Platform usage reporting policies.google.com/privacy
Hotjar Analytics Heatmaps and session recordings to understand UI interactions (anonymised) hotjar.com/privacy
Mailchimp / Brevo Marketing Email campaign tracking for opted-in marketing communications mailchimp.com/legal/privacy
Meta Pixel Marketing (opt-in only) Conversion tracking for Facebook/Instagram ad campaigns (only if marketing consent given) facebook.com/privacy
Third-Party Responsibility
We cannot control how third-party providers use the data collected through their own cookies. We recommend reviewing their privacy policies directly. Disabling marketing cookies on our Platform will prevent Meta Pixel and campaign tracking cookies from being set, but will not affect cookies set by Paystack or Flutterwave which are strictly necessary for payment processing.
6

Managing Your Preferences

You can update your cookie preferences at any time using the panel below. Changes take effect immediately. Disabling optional cookies does not affect your ability to use core Platform features — you will still be able to log in, manage your store, process orders, and receive payouts.

Cookie Preference Centre

Choose which optional cookies you accept. Your choices are saved to your browser and will apply on your next visit. You can change these settings at any time.

Strictly Necessary
Authentication, security, session management
Required
Functional
Sidebar state, dark mode, language preferences
Analytics
Anonymised usage data to improve the Platform
Marketing
Campaign tracking (only if opted in to marketing emails)
Preferences saved successfully.
7

Browser-Level Controls

In addition to our in-Platform preference centre, you can control cookies directly through your browser settings. Most browsers allow you to view, delete, and block cookies from specific websites. Below are links to the cookie management guides for the most commonly used browsers:

BrowserHow to Manage Cookies
Google Chromesupport.google.com/chrome/answer/95647
Mozilla Firefoxsupport.mozilla.org — cookies guide
Apple Safarisupport.apple.com — manage cookies
Microsoft Edgesupport.microsoft.com — Edge cookies
Operahelp.opera.com — web preferences
Samsung InternetSettings → Privacy → Smart Anti-Tracking → Manage cookies
Impact of Blocking All Cookies
Blocking all cookies through your browser settings — including strictly necessary ones — will prevent you from logging in to the Vendor Dashboard and using core Platform features. We recommend using our in-Platform preference centre to manage optional cookies rather than blocking all cookies at browser level.
7.1 Do Not Track (DNT)

Some browsers support a "Do Not Track" (DNT) signal that indicates a user's preference not to be tracked across websites. Currently there is no universally agreed standard for how websites must respond to DNT signals in Nigeria or globally. We do not currently alter our data collection practices in response to DNT signals, but you can use our preference centre or browser controls to opt out of optional cookies.

8

Cookie Consent & Withdrawal

When you first visit Ajaro — either the public Vendor Center or the Dashboard — you will be shown a cookie consent banner. This banner explains which categories of cookies we use and gives you the option to accept all, accept essential only, or manage your preferences in detail.

Your consent choices are recorded in a first-party cookie (dbm_cookie_prefs) that lasts for 12 months. After 12 months we will ask for your consent again. We also log the date, time, and version of the policy you consented to for our records.

8.1 Withdrawing Consent

You can withdraw or change your consent at any time by:

  • Visiting the Cookie Preference Centre in Section 6 of this page and updating your selections;
  • Clicking the "Cookie Preferences" link in the footer of any page on the Platform;
  • Using your browser settings to delete the dbm_cookie_prefs cookie — the consent banner will reappear on your next visit.

Withdrawal of consent does not affect the lawfulness of any processing based on consent before withdrawal, and does not affect the use of strictly necessary cookies which are not consent-based.

9

Data Retention & Security

Data collected through cookies is retained in accordance with our Privacy Policy — Section 8 (Data Retention). In summary:

  • Session cookies are deleted automatically when you close your browser
  • Authentication cookies expire after 30 days of inactivity (or sooner if you log out)
  • Analytics data is anonymised after 30 days and retained in aggregate for up to 24 months
  • Marketing attribution cookies expire within 90 days
  • Your cookie preference record is retained for 12 months then refreshed upon re-consent

All cookie data stored on our servers is protected using the same security measures as other personal data, including AES-256 encryption at rest and TLS 1.3 in transit. First-party cookies are set with the HttpOnly and Secure flags to prevent access by client-side scripts and transmission over unencrypted connections.

SameSite Protection
All Ajaro authentication and session cookies are set with the SameSite=Strict attribute, which prevents them from being sent in cross-site requests. This protects against cross-site request forgery (CSRF) attacks without requiring a separate CSRF token for most operations.
10

Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use, the technologies we integrate, or updates to applicable law. When we make material changes — such as adding a new category of cookie or a new third-party provider — we will:

  • Update the "Last Revised" date at the top of this Policy;
  • Display a notice on the cookie consent banner prompting you to review and reconfirm your preferences;
  • Send an email notification to your registered address where the changes are significant.

Minor changes — such as updating a third-party provider's policy link or correcting a typographical error — will be made without separate notice. We encourage you to review this Policy periodically. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

11

Contact Us

If you have any questions about this Cookie Policy, the cookies we use, or how to exercise your preferences, please contact our Data Protection Officer:

Data Protection OfficerAjaro Data Protection Office
Emailprivacy@ajaro.com.ng
Postal Address14 Broad Street, Victoria Island, Lagos State, Nigeria
Phone+234 901 234 5678 (Mon – Fri, 8am – 6pm WAT)

You also have the right to lodge a complaint about our cookie practices with the Nigeria Data Protection Bureau (NDPB) at ndpb.gov.ng.

This Cookie Policy was last reviewed and updated in March 2025. Document reference: DBM-CP-V1.3-2025. This policy should be read in conjunction with our Privacy Policy (DBM-PP-V2.1-2025) and Terms & Conditions (DBM-TC-V3.2-2025).

Questions about your data?

Our Data Protection Officer is available to help with any privacy or cookie-related questions. We aim to respond to all requests within 30 days.