Privacy

We collect only what we need to send you what you ordered, answer when you write, and keep our books straight. The full version is below; the short version is: we don’t sell your data, we don’t track you across the web, and you can ask us to forget you at any time.

What we collect

• Account: name, email, optional phone, and a securely-hashed password (or a Google ID if you sign in with Google).
• Orders: shipping address, contact details, items, totals, and the payment-provider reference.
• Communications: any message you send us through the site, WhatsApp, or email.
• Browsing: standard server logs (IP, user agent, page) for security and debugging. No third-party analytics.

Why we collect it

• To process orders and arrange delivery.
• To answer your questions and provide design-service support.
• To send order confirmations and the occasional studio note (you can unsubscribe at any time).
• To meet our legal obligations under Nigerian tax and data-protection law.

Who we share it with

We share only the data each service needs to do its job, and only with providers we’ve vetted:

• Paystack — payment processing. They handle card data; we never see it.
• MongoDB Atlas — database hosting (EU region).
• Vercel — site hosting.
• Cloudinary — product image storage.
• Resend — transactional email delivery.
• Google — only if you sign in with Google.

We do not sell, rent, or share your data for marketing with anyone else.

Cookies

We use a small number of cookies, all essential to the site working: a session cookie to keep you signed in, a guest-cart cookie so the cart survives a refresh, and any cookies the payment processor sets during checkout. We don’t use third-party analytics cookies.

Your rights under the NDPA

Under the Nigeria Data Protection Act 2023 you have the right to ask us what data we hold about you, request correction, request deletion, and withdraw consent for any processing that’s based on consent (chiefly the newsletter). Email hello@btshomeandfragrance.ng and we’ll respond within 30 days.

Retention

Order records are kept for 7 years for tax and accounting purposes. Account records are kept until you ask us to delete them. Newsletter subscriptions are kept while you’re subscribed and for 30 days after you unsubscribe (in case it was an accident).

Children

The site is intended for adults. We don’t knowingly collect information from anyone under 18; if you think we have, write to us and we’ll remove it.

Changes

If we change this policy in any meaningful way we’ll email registered customers and update the date at the top of this page.