Last updated: October 2026
Aurelius Business respects your privacy and is committed to protecting the personal and business information entrusted to us.
This Privacy Policy explains how Aurelius Business collects, uses, stores, shares, and protects information when you access our web platform or mobile application, create a business account, use guest checkout, purchase products, or interact with our services.
Aurelius Business provides businesses and commercial customers with access to foodstuffs, agricultural commodities, cooking ingredients, kitchen utensils, appliances, cookware, and commercial kitchen equipment.
In this Policy, “Aurelius,” “we,” “us,” and “our” refer to the operator of Aurelius Business. “You” and “your” refer to customers, business owners, authorised representatives, guest customers, and other individuals interacting with the platform.
This Policy should be read alongside the Aurelius Business Terms of Use.
Depending on how you use Aurelius Business, we may collect the following categories of information.
This may include your full name, telephone number, email address, contact details, and other information needed to communicate with you or fulfil an order.
For business accounts, we may collect the business name, registration details, Corporate Affairs Commission (CAC) information where applicable, business address, business category, and details of authorised representatives.
Where necessary, we may request government-issued identification, identity verification details, facial verification information, or other documents required to verify an account, prevent fraud, or meet legal obligations.
Some verification processes may be performed by authorised third-party verification providers.
You may place eligible orders without creating an account. For guest checkout, we collect only the information reasonably necessary to process payment, confirm the order, communicate with you, and arrange delivery or provide customer support.
Guest checkout does not automatically create a registered business account.
We may collect order details, products purchased, transaction references, payment status, refund records, wallet transactions, installment schedules, outstanding balances, and referral credits.
Payments may be processed by third-party payment providers. We do not intentionally collect or store complete payment card details where these are handled directly by the relevant payment provider.
We may collect delivery addresses, recipient names, telephone numbers, delivery instructions, tracking details, proof of delivery, and information concerning delivery disputes.
When you use the platform, we may collect technical information such as IP address, device type, operating system, browser information, access times, log records, and interactions with platform features.
Where cookies or similar technologies are used, they may help maintain sessions, improve security, remember preferences, and understand platform performance.
We use information for legitimate business and operational purposes, including to:
We will not use your information for purposes incompatible with those explained in this Policy unless permitted by law or otherwise appropriately authorised.
Where required by applicable data protection law, we process personal information on one or more lawful bases, including:
Contractual necessity: To register accounts, fulfil orders, arrange deliveries, provide requested services, and administer agreed payment arrangements.
Legal obligations: To comply with applicable laws, lawful requests, financial recordkeeping requirements, and regulatory obligations.
Legitimate interests: To protect our platform, prevent fraud, maintain business records, improve our services, and manage disputes, provided those interests do not override your applicable rights.
Consent: Where consent is required, including for certain optional communications or processing activities, we will request it appropriately. You may withdraw consent where applicable, although this will not affect processing lawfully carried out before withdrawal.
Vital interests or other lawful grounds: Where recognised by applicable law and relevant to the circumstances.
The applicable legal basis depends on the information and purpose involved.
Aurelius Business may work with third-party providers to verify identities, validate business information, process payments, detect fraud, and facilitate deliveries.
These providers may receive the information necessary to perform their assigned services.
Where a provider independently determines how information is processed for its own purposes, its own privacy policy and legal responsibilities may also apply.
We take reasonable steps to work with service providers that are appropriate for their roles and to protect information shared with them.
We do not sell your personal information to third parties.
We may disclose relevant information to:
We aim to share only the information reasonably necessary for the relevant purpose.
Where you use these features, we process additional information to administer them.
Wallet services: We maintain records of wallet funding, eligible transactions, credits, withdrawals, and adjustments.
Installment purchases: We process information about order values, required upfront payments, repayment schedules, payment history, outstanding balances, and related account activity to administer installment arrangements and address payment defaults.
Referral programme: We process referral identifiers, qualifying purchases, and promotional credit records to determine eligibility and prevent referral abuse.
Information may be reviewed where necessary to investigate suspicious activity, resolve disputes, or enforce the applicable Terms of Use.
Guest customers can place eligible orders without registering an account. We use their information to process the specific transaction, communicate about the order, arrange delivery, handle complaints, and meet applicable legal obligations.
Registered customers may access account-related services subject to applicable verification and activation requirements.
We may retain certain guest transaction records after an order is completed where necessary for accounting, fraud prevention, legal compliance, dispute resolution, or other lawful purposes. Guest checkout does not mean that all transaction information is immediately deleted after delivery.
Our web platform may use cookies and similar technologies to support essential functionality, maintain secure sessions, remember preferences, and understand how the platform is used.
Where non-essential cookies or tracking technologies require consent, we will provide appropriate choices in accordance with applicable law.
You may also manage cookies through your browser settings. Disabling certain cookies may affect platform functionality.
We use reasonable technical, organisational, and administrative measures designed to protect information against unauthorised access, loss, misuse, alteration, or disclosure.
These measures may include access controls, authentication procedures, restricted data access, security monitoring, and safeguards provided by authorised service providers.
No digital system or transmission method can be guaranteed completely secure. You should protect your login credentials, use authorised payment channels, and promptly notify us if you suspect unauthorised access to your account.
Where a personal data breach occurs, we will take appropriate steps in accordance with applicable legal requirements.
We retain information for as long as reasonably necessary for the purposes described in this Policy, including account management, order fulfilment, transaction records, installment administration, fraud prevention, dispute resolution, and legal compliance.
Retention periods vary depending on the type of information, the nature of the transaction, and applicable legal requirements.
When information is no longer required, we will take reasonable steps to delete it, securely destroy it, or anonymise it, subject to lawful retention obligations.
Closing an account or completing a guest order does not necessarily require the immediate deletion of all related records.
Some of our technology, verification, payment, or other service providers may process information outside Nigeria.
Where personal information is transferred internationally, we will take steps required by applicable law to ensure that the transfer is lawful and that appropriate safeguards are in place.
Subject to applicable law, you may have the right to:
These rights are subject to applicable legal conditions and exceptions. For example, we may need to retain certain transaction records to meet legal obligations or resolve disputes.
We may request information to verify your identity before responding to a privacy request.
Aurelius Business is designed for business and commercial transactions, not for use by children.
Individuals who create accounts or enter into transactions on behalf of a business must have the legal authority to do so. We do not knowingly seek to collect children's personal information where doing so would be unlawful.
If you believe a child has provided personal information to us improperly, please contact us so we can assess the matter and take appropriate action.
The platform may contain links to third-party websites or services, including payment providers and delivery tracking systems.
We are not responsible for the privacy practices of independent third-party websites or services. You should review their applicable privacy notices before providing information directly to them.
We may update this Privacy Policy to reflect changes in our services, information-processing practices, technology, or legal obligations.
The revised version will be published on the Aurelius Business platform with an updated date. Where required by law, we will provide additional notice or obtain consent before implementing changes that require it.
For questions about this Privacy Policy, requests concerning your personal information, or privacy complaints, contact Aurelius Business through its official support channels.
Email: support@aureliushq.co
Please use the subject line “Privacy Request – Aurelius Business” and describe your request. Do not send passwords or unnecessary identity documents by email.
We will review and respond to requests in accordance with applicable law.
By using Aurelius Business, you acknowledge that you have been provided with this Privacy Policy. Where consent is the required legal basis for a particular processing activity, we will request that consent separately and appropriately.
Also see: