Aeesha Store is committed to protecting personal data and respecting the privacy rights of individuals who interact with our business.
This Nigeria Data Protection Policy sets out our approach to collecting, using, storing, securing and managing personal data in connection with our website, online store, customer service and business operations.
It should be read together with our Privacy Policy.
Applicable Framework
Aeesha Store intends to process personal data in accordance with applicable Nigerian data-protection requirements, including the Nigeria Data Protection Act 2023 and applicable regulations, guidance and directives issued by the Nigeria Data Protection Commission.
Data Protection Principles
Where applicable, we aim to ensure that personal data is:
Processed fairly, lawfully and transparently
Collected for specified and legitimate purposes
Adequate, relevant and limited to what is necessary
Accurate and kept up to date where necessary
Retained only for as long as necessary or legally required
Protected using appropriate security measures
Processed in accordance with accountability and duty-of-care principles
These principles reflect the data-protection framework described by the NDPC.
Personal Data We May Process
Depending on the service involved, this may include:
Name
Phone number
Email address
Delivery address
Billing information
Order history
Customer service communications
Account information
Device and website information
Marketing preferences
Other information reasonably necessary for our services
We seek to avoid collecting personal data that is unnecessary for the relevant purpose.
Lawful Processing
We determine an appropriate lawful basis before processing personal data.
Depending on the circumstances, this may include:
Consent
Contractual necessity
Legal obligation
Legitimate interest
Vital interests
Public interest
Other lawful grounds permitted by applicable law
Data Subject Rights
Subject to applicable legal conditions and limitations, individuals may have rights including:
Right to information
Right of access
Right to rectification
Right to object
Right to restriction
Right to data portability
Right to deletion/erasure
Right to withdraw consent
Rights relating to automated decision-making
Right to lodge a complaint
Data Security
We maintain reasonable safeguards appropriate to the nature and sensitivity of the information processed.
These may include access controls, authentication measures, secure systems, staff confidentiality requirements and appropriate technical security controls.
Third-Party Processors
We may use service providers to help operate our business.
Where third parties process personal data on our behalf, we seek to ensure that appropriate contractual, organizational and technical safeguards are applied.
International Data Transfers
Where personal data is transferred outside Nigeria, we will apply the requirements and safeguards required under applicable Nigerian data-protection law.
Data Retention
Personal data will be retained only for as long as reasonably necessary for its intended purpose or as required by law.
Data Breach Management
Aeesha Store will maintain procedures for identifying, assessing, responding to and, where required, reporting personal-data breaches.
Where notification is legally required, we will make the appropriate notifications within applicable regulatory timeframes.
Privacy Requests
To exercise an applicable privacy right, contact:
Privacy Email: [Privacy Email] Data Controller: [Aeesha Store Legal Name] Address: [Business Address]
We may need to verify the identity of a person making a request before disclosing or changing personal information.
Data Protection Contact
Where Aeesha Store is required to appoint a Data Protection Officer or engage an appropriate data-protection professional under applicable law, the relevant contact information will be provided here:
Data Protection Contact: [Name/Role] Email: [Privacy Email]
Complaints
We encourage individuals to contact us first so that we can investigate and resolve concerns.
Individuals may also have the right to lodge a complaint with the Nigeria Data Protection Commission.
Policy Updates
We may update this policy periodically to reflect changes in our business, technology, legal requirements or data-protection practices.
The latest version will be published on our website with its effective date.
Aeesha Store protecting your information is part of protecting your trust.
