Introduction
Yadah Ahfreekah Atelier respects your privacy. This policy explains what personal data we collect when you use yadahahfreekah.com, book consultations, place orders, or commission bespoke work — and how we use, store, and protect that information.
We process personal data in accordance with the Nigeria Data Protection Regulation (NDPR) and applicable Nigerian law. By using our services, you acknowledge this policy.
Information We Collect
Depending on how you interact with us, we may collect:
- Identity and contact details — name, email address, phone number, and delivery address.
- Commission and fitting data — body measurements, design preferences, fitting notes, and order history.
- Account credentials — login email and encrypted password where you create an account.
- Payment information — transaction references and amounts processed via Paystack, Flutterwave, Stripe, or bank transfer. We do not store full card numbers.
- Communications — messages sent via contact forms, email, WhatsApp, or consultation notes.
- Technical data — IP address, browser type, device information, and site usage through cookies or analytics tools.
How We Use It
We use your personal data to:
- Fulfil ready-to-wear orders and bespoke commissions, including fittings and dispatch.
- Schedule and conduct paid consultations.
- Communicate about your orders, payments, appointments, and commission progress.
- Provide customer support and respond to inquiries.
- Maintain accounts, order history, and commission records.
- Improve the website and atelier experience through aggregated analytics.
- Comply with legal, tax, and regulatory obligations.
Payment Data
Card and mobile-money payments are processed by PCI-compliant third-party providers including Paystack, Flutterwave, and Stripe. These processors handle card details in accordance with their own privacy policies and security standards.
The Atelier receives confirmation of payment, transaction references, and billing metadata necessary to reconcile orders — not your full card number or CVV.
Data Sharing
We do not sell your personal data. We share information only where necessary to operate the atelier:
- Payment processors — to complete transactions.
- Courier and logistics partners — to deliver orders (name, address, contact).
- Professional advisers — lawyers, accountants, or auditors where legally required.
- Authorities — when required by law, court order, or to protect our legal rights.
Data Security
We implement reasonable technical and organisational safeguards to protect personal data against unauthorised access, loss, or misuse. Access is limited to authorised staff and systems required to operate commissions and orders.
No method of transmission over the internet is completely secure. While we take care to protect your data, we cannot guarantee absolute security.
Your Rights (NDPR)
Under the NDPR and applicable law, you may have the right to:
To exercise your rights, contact us at [email protected] with sufficient detail to identify your request. We will respond within the timeframe required by applicable law.
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of data where we have no lawful basis to retain it.
- Object to or restrict certain processing activities.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
Data Retention
We retain personal data for as long as necessary to fulfil the purposes described in this policy — including active commissions, order fulfilment, account management, and legal record-keeping.
Commission measurements and design records may be retained for several years to support alterations, remakes, or repeat clients. Financial records are retained as required by tax and accounting obligations.
When data is no longer needed, we delete or anonymise it using reasonable procedures.
Children
Our services are not directed at children under eighteen. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
Changes
We may update this policy from time to time. The “last updated” date at the top of this page will reflect the most recent revision. Material changes will be communicated via the website or direct notice where appropriate.
Continued use of the site after changes constitutes acceptance of the updated policy.
Contact / Data Protection
For privacy questions, data subject requests, or concerns about how we handle your information, contact [email protected].
We will designate a data protection contact for formal NDPR inquiries and will publish updated contact details here if a Data Protection Officer is appointed.