Privacy Policy

1. Introduction

Trichomes Cosmeceuticals and Skincare ("Trichomes," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website trichomesshop.com and make purchases from us. By using our website, you agree to the collection and use of information in accordance with this policy.

This policy is designed to comply with the Nigeria Data Protection Act (NDPA) 2023, enforced by the Nigeria Data Protection Commission (NDPC), and other applicable Nigerian data protection laws.

2. Information We Collect

We collect the following categories of personal information:

a) Information You Provide Directly

• Full name, email address, phone number, and delivery address
• Account login credentials (email and password)
• Payment information (processed securely via Paystack; we do not store card details)
• Order details, product reviews, and consultation requests
• Communications you send us via email, WhatsApp, or our contact form

b) Information Collected Automatically

• Browser type, IP address, device information, and operating system
• Pages visited, time spent on pages, and referring URLs
• Shopping cart contents and purchase history
• Cookie data (see Section 8)

3. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, and send order confirmations and shipping updates
• Create and manage your customer account
• Process payments securely through Paystack
• Respond to your inquiries and provide customer support
• Send transactional emails (order updates, password resets)
• Send promotional communications if you have opted in (you may unsubscribe at any time)
• Improve our website, products, and services
• Prevent fraud and ensure the security of our platform
• Comply with legal obligations

4. Legal Basis for Processing

We process your personal data on the following grounds:

• Contract performance: to process your orders and provide our services
• Legitimate interests: to improve our website and prevent fraud
• Consent: for marketing communications (which you may withdraw at any time)
• Legal obligation: where required by Nigerian law

5. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Paystack: our payment processor, to complete transactions securely
• Delivery partners: to fulfill and deliver your orders
• Email service provider (Brevo): to send order and account emails
• Cloudinary: for secure image storage
• Analytics providers: to understand website usage (anonymised data)
• Law enforcement or regulators: where required by law or court order

All third-party service providers are required to handle your data securely and in accordance with applicable data protection laws.

6. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Account data: retained while your account is active, then 2 years after closure
• Order records: 7 years for tax and accounting purposes
• Marketing consent records: until you withdraw consent
• Security logs: 12 months

7. Your Rights

Under the NDPA, you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data (subject to legal obligations)
• Restriction: request that we restrict processing of your data
• Portability: receive your data in a portable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: for any consent-based processing

To exercise any of these rights, please email us at [email protected]. We will respond within 30 days.

8. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

• Essential cookies: required for the website to function (e.g., session management, shopping cart)
• Analytics cookies: to understand how visitors use our website (anonymised)
• Preference cookies: to remember your settings

You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Payment transactions are processed via Paystack using industry-standard SSL encryption. However, no method of transmission over the internet is 100% secure.

10. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or by posting a prominent notice on our website. The "Last updated" date at the top of this page will always reflect the most recent version.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

• Email: [email protected]
• WhatsApp: +234 808 709 8720
• Website: trichomesshop.com