Privacy Policy

Who we are

Opulent Kiddies ("we", "us", "our") is a children's fashion atelier registered in Lagos, Nigeria. We operate the website at opulentkiddies.online and are the data controller for the personal information you share with us.

The data we collect

We only collect what we need to serve you. Specifically:

You give us, directly:

• Account details: name, email, phone number, password (stored hashed — we can never see it)
• Child profiles: name, gender, date of birth, body measurements — used only for bespoke pieces and saved fits
• Addresses: delivery and billing addresses
• Order details: what you bought, design choices, notes you write to our tailors
• Payment details: we do NOT store full card numbers. Card payments are processed by Paystack, our payment processor. We store only the last 4 digits and the transaction reference.
• Support conversations: messages and attachments you send our support team

We collect automatically when you use the site:

• Browser type, operating system, screen size (for responsive layout)
• IP address (kept for 30 days for fraud-prevention and abuse-detection only)
• Pages visited, time on page, clicks (analytics — see below)
• Session cookies (to keep you logged in)

We receive from third parties:

• Your name, email, and profile picture if you sign in with Google or Facebook
• Payment confirmation from Paystack when a transaction completes

Why we collect it

• To fulfil your order — measurements, addresses, payment confirmation
• To create and secure your account — email and password, two-factor codes
• To communicate with you — order updates, support replies, the monthly House Letter (only if you subscribe)
• To improve the site — aggregated analytics, A/B testing
• To prevent fraud and abuse — IP, device fingerprint for unusual login activity
• To meet legal obligations — keeping order and tax records for the period required by Nigerian law

Who we share it with

We share the minimum necessary, only with:

• Paystack — to process card and transfer payments
• Couriers (GIG Logistics, Kwik, Red Star, DHL) — name, phone, delivery address only
• Email service (transactional email provider) — to send order confirmations and password resets
• Termii — to send SMS notifications (Nigerian numbers only)
• Government authorities — only when required by law (tax filings, court order, valid law-enforcement request)

We do not sell your data to advertisers, brokers, or any other party. We do not share your data outside Nigeria except where a service provider (e.g. DHL for international shipping) requires it to fulfil your order.

Cookies

We use cookies for three things:

• Essential — keeping you logged in, remembering your cart, CSRF protection. These can't be turned off.
• Analytics — first-party tracking of which pages you visit so we can improve them. Anonymous; no third-party trackers.
• Preferences — remembering your shipping address, last-used child profile.

We don't use cookies for cross-site advertising or to build a profile of you across other websites.

Your rights under NDPA

You have the right to:

• Access — get a copy of all the personal data we hold on you
• Correct — fix anything that's inaccurate (you can do this yourself from /profile or ask us)
• Delete — request that we delete your account and personal data (we keep what we're legally required to — see below)
• Portability — receive your data in a machine-readable format you can take elsewhere
• Object — opt out of marketing emails (the unsubscribe link in every email works, or change preferences in /profile)
• Withdraw consent — for any processing based on your consent
• Complain — to the Nigeria Data Protection Commission if you believe we've mishandled your data

To exercise any of these rights, email privacy@opulentkiddies.com. We respond within 14 days.

How long we keep your data

• Account profile + measurements: until you delete your account
• Order records: 6 years (required by Nigerian tax law)
• Support conversations: 2 years
• Analytics: 24 months
• IP address logs: 30 days

Security

We use industry-standard protections — HTTPS everywhere, passwords hashed with bcrypt, two-factor authentication available on all accounts, encrypted database backups, and least-privilege access for our team. No system is perfectly secure, but we take this seriously and will notify affected users within 72 hours of any data breach as required by NDPA.

Children

Our service is for adults purchasing for children. We do not knowingly collect personal data from anyone under 18. The data we hold about your child (name, measurements, date of birth) is provided by you, the parent or guardian, and we treat it with the same care as your own data. You can delete a child profile at any time from /dashboard.

Changes to this policy

We may update this policy as the business evolves or the law changes. When we do, we'll update the "Last updated" date at the top of this page. Material changes will also be announced by email to account holders at least 14 days before they take effect.

Contact

Questions about your data, this policy, or how we handle either — email privacy@opulentkiddies.com or write to: Opulent Kiddies, Lekki, Lagos, Nigeria.