Privacy Policy
Beauty’s Bonnique collects only the personal data needed to take your order, deliver it, support you, and, if you agree, send you marketing. We do not sell your data. This policy explains what we collect, why, who we share it with, and your rights under the Nigeria Data Protection Act 2023 (NDPA).
1. Who we are
Beauty’s Bonnique Enterprises, Nigeria operates Beauty’s Bonnique. We are the data controller for personal data collected through beautysbonnique.com.
Privacy contact: sales@beautysbonnique.com
2. Data we collect
| Category | Examples | When |
| Identity and contact | Name, email, phone number, delivery and billing address | Checkout, account creation, contact form |
| Order | Items bought, order value, delivery notes, returns history | Checkout and after-sales |
| Payment | Payment reference, payment status, card type and last four digits | Payment through Paystack |
| Account | Username, encrypted password, saved addresses | If you create an account |
| Marketing | Email and SMS preferences, campaign opens and clicks | Newsletter sign-up, marketing emails |
| Technical | IP address, browser and device type, pages viewed, cookies | When you browse the site |
| Communications | Messages, emails, WhatsApp chats, product reviews | When you contact us or leave a review |
We never see or store your full card number, CVV, or bank PIN. Payments are processed by Paystack on its own secure systems.
We do not knowingly collect sensitive personal data such as health, religious or biometric information.
3. How we use your data and our lawful basis
| Purpose | Lawful basis under the NDPA |
| Process, deliver and support your order; handle returns and refunds | Performance of a contract |
| Create and manage your account | Performance of a contract |
| Send order and delivery notifications | Performance of a contract |
| Send newsletters, offers and abandoned-cart reminders | Consent, which you can withdraw at any time |
| Prevent fraud and keep the site secure | Legitimate interest |
| Improve the site and our products through analytics | Legitimate interest, or consent where cookies require it |
| Keep tax and accounting records | Legal obligation |
4. Who we share your data with
We share data only with service providers who need it to do their job for us:
- Paystack: payment processing.
- Omnisend: email and SMS marketing, and abandoned-cart reminders, where you have consented.
- Couriers and logistics partners: your name, address, and phone number, to deliver your order.
- Hosting and website providers: [Hosting provider], WordPress and WooCommerce plugins that run the store.
- Analytics providers: [e.g. Google Analytics], to understand how the site is used.
- Professional advisers and authorities: accountants, lawyers, regulators or law enforcement, where the law requires it.
These providers may only use your data on our instructions and must protect it. We do not sell or rent personal data to anyone.
5. Transfers outside Nigeria
Some providers, including Omnisend and our hosting and analytics providers, store data on servers outside Nigeria. Where that happens, we rely on the transfer grounds permitted by the NDPA, such as contractual safeguards with the provider, an adequate level of protection in the destination country, or your consent.
6. Cookies
The site uses cookies, small files stored on your device.
- Essential cookies keep your cart, login, and checkout working. The site cannot function without them.
- Analytics cookies tell us which pages are visited and how the site performs.
- Marketing cookies link your browsing to marketing emails and measure campaigns.
Analytics and marketing cookies are set only with your consent through the cookie banner. You can change your choice at any time in the banner settings or clear cookies in your browser.
7. How long we keep your data
| Data | Retention |
| Order and payment records | 6 years after the order, for tax and accounting law |
| Account data | Until you delete your account or ask us to |
| Marketing data | Until you unsubscribe or withdraw consent |
| Customer service messages | 2 years after the matter is closed |
| Analytics data | 14 to 26 months |
When data is no longer needed, we delete or anonymise it.
8. Your rights
Under the NDPA, you have the right to:
- know what personal data we hold about you and get a copy;
- have inaccurate or incomplete data corrected;
- have your data erased where we have no lawful reason to keep it;
- restrict or object to our processing, including direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier processing;
- not be subject to decisions made solely by automated processing that significantly affect you.
To exercise a right, email [Support email]. We respond within 30 days. We may ask you to confirm your identity first.
To stop marketing, use the unsubscribe link in any email or reply STOP to any SMS.
If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
9. Security
The site uses SSL encryption. Access to customer data is limited to people who need it, and passwords are stored in hashed form. No website is completely secure, so please use a strong, unique password. If a breach occurs that is likely to put your rights at risk, we will notify the NDPC and affected customers as the NDPA requires.
10. Children
The site is not directed at children. We do not knowingly collect data from anyone under 18 without a parent’s or guardian’s consent. If you believe a child has given us data, contact us, and we will delete it.
11. Links to other sites
The site links to other websites and social media platforms. Their privacy practices are their own, and this policy does not cover them.
12. Changes to this policy
We may update this policy. The 01/10/2026 date shows the latest version. We will tell you by email or a site notice about significant changes.
13. Contact
Beauty’s Bonnique Enterprises, sales@beautysbonnique.com