Privacy Policy

1. Data We Collect

When you use our website, we may collect the following personal information:

• Identity Data: Full name, email address, phone number
• Order Data: Shipping address, order history, product preferences, sizes
• Payment Data: Transaction references processed securely through Paystack (we do not store card details)
• Account Data: Login credentials (passwords are encrypted and never stored in plain text)
• Communication Data: Messages sent via our contact form or WhatsApp
• Technical Data: IP address, browser type, device information (collected automatically)

2. How We Use Your Data

We process your personal data for the following purposes:

• Order Fulfilment: To process, ship, and deliver your purchases
• Communication: To send order confirmations, shipping updates, and respond to inquiries
• Account Management: To maintain your customer account and order history
• Newsletter: To send promotional emails (only with your explicit consent; you can unsubscribe at any time)
• Legal Compliance: To comply with Nigerian laws and regulations

3. Legal Basis for Processing

Under the NDPA 2023, we process your data based on:

• Contractual Necessity: Processing required to fulfil your orders and deliver products
• Consent: For marketing communications and newsletter subscriptions
• Legitimate Interest: For improving our services and preventing fraud
• Legal Obligation: Where required by Nigerian law

4. Third-Party Services

We share your data with the following trusted third parties, solely for the purposes described:

• Paystack: Payment processing (PCI DSS compliant). Your card details are handled exclusively by Paystack and are never stored on our servers.
• Delivery Partners: Shipping name, address, and phone number for order delivery

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

5. Data Retention

We retain your personal data only for as long as necessary:

• Account Data: For as long as your account is active, plus 12 months after deletion request
• Order Data: 6 years (in compliance with Nigerian tax and commercial law)
• Marketing Data: Until you unsubscribe or withdraw consent
• Contact Inquiries: 12 months

6. Your Rights

Under the NDPA 2023, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing of your data for marketing purposes
• Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption for all data transmission
• Encrypted password storage using industry-standard hashing
• Secure payment processing via PCI DSS-compliant Paystack
• Regular security monitoring and access controls

8. Cookies

Our website uses essential cookies required for the website to function (authentication, shopping cart). We do not use third-party tracking or advertising cookies.

9. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.

11. Contact & Complaints

For any questions, concerns, or complaints regarding your personal data, please contact:

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng.