Privacy policy
Who we are. LuxeByDee is operated by registered business name, registered in Nigeria with the Corporate Affairs Commission under number RC/BN number, at address. We are the data controller for the personal data described here. Contact for privacy questions: privacy email.
What we collect.
- Details you give us: your name, email address, phone number, delivery addresses and landmarks, gift messages, messages you send to support, return requests and reviews you write.
- Order details: what you bought, prices, delivery method and payment status. We do not receive or store your full card details; our payment provider handles payments.
- Account details: the one-time codes we send to sign you in (stored only in a scrambled form and deleted after use or expiry), and session records with your browser type and IP address.
- Usage details: pages viewed, items added to your bag and the website or campaign that sent you to us, collected through cookies and similar technologies as described below.
Why we use it, and on what basis.
- To take, deliver and support your orders and returns, including sending order emails (performance of our contract with you).
- To keep your account secure and prevent fraud (our legitimate interests and legal obligations).
- To keep records for tax and accounting (legal obligation).
- To improve the site using aggregated usage data (legitimate interests).
Who we share it with. Only the service providers we need to run the store, under contracts that require them to protect your data: our payment provider name, couriers names, our email provider name, our hosting and image storage providers names. We share data with authorities only where the law requires it. We do not sell your personal data.
International transfers. Some providers may process data outside Nigeria. Where they do, we rely on the transfer safeguards allowed under the NDPA.
How long we keep it. Order and payment records: , typically 6 years for tax. Account data: until you close your account. Support messages: to be confirmed after the ticket is resolved. One-time sign-in codes: deleted within 24 hours.
Cookies. We use essential cookies to keep you signed in and remember your bag. The site needs them to work.
Your rights. Under the NDPA you may ask to see the personal data we hold about you, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent. Email privacy email. We reply within 30 days. If you are not satisfied, you can complain to the Nigeria Data Protection Commission.
Security. We use encrypted connections, store sign-in codes and session tokens in hashed form, and limit access to personal data to the people who need it to run the store.
Children. The store is not intended for anyone under 18, and we do not knowingly collect their data.
Changes. If we change this policy we will update the date above and, for significant changes, email account holders.