Privacy Policy

1. Who We Are

Fabryard (“we”, “us”, “our”) operates the Fabryard e-commerce platform. We are the data controller for the personal data you provide to us. If you have any questions about this policy, you can reach us at support@fabryard.com or through our contact page.

2. Information We Collect

Information you provide directly: Name, email address, phone number, shipping address, order details, and account credentials. If you contact our support team, we collect the contents of your message and any attachments.

Information collected automatically: When you visit our site, we automatically collect your IP address, browser type and version, device type, operating system, referring URLs, pages viewed, and the dates/times of your visits. This information is collected via cookies and similar technologies.

Payment data: Payment card details are collected and processed by Flutterwave, our payment processor. We do not store full card numbers on our servers.

3. How We Use Your Information

We use your personal data for the following purposes:

• To process and fulfil your orders, including payment processing and shipping
• To communicate with you about your orders, account, and service updates
• To send marketing communications where you have given consent (you may opt out at any time)
• To improve and personalise your experience on our Platform
• To detect, prevent, and investigate fraud, security incidents, and abuse
• To comply with legal obligations and enforce our Terms of Service

4. Legal Basis for Processing (NDPR)

Under the Nigeria Data Protection Regulation (NDPR), we process your personal data on the following lawful bases:

• Contract performance: To fulfil orders and provide our services
• Consent: For marketing communications and optional data collection
• Legal obligation: To comply with applicable laws and regulations
• Legitimate interest: To improve our services, prevent fraud, and ensure platform security

5. Sharing Your Information

We share your personal data with the following categories of third parties:

• Payment processors: Flutterwave — to process payments securely
• Shipping carriers: To deliver your orders
• Analytics providers: Google Analytics — to understand how you use our site
• Cloud infrastructure: Vercel — to host and serve our Platform
• Email service: Nodemailer (via SMTP) — to send transactional and marketing emails

We do not sell your personal data to third parties. All third parties are contractually obligated to protect your data and use it only for the purposes we specify.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to improve your browsing experience, analyse site traffic, and serve personalised content. Specifically, we use Google Analytics cookies to collect aggregated data about how visitors interact with our site.

You can control cookies through your browser settings. Disabling cookies may affect certain features of our Platform.

7. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Account data is retained for the duration of your account plus a period of 3 years after account closure. Order data is retained for 6 years to comply with tax and audit obligations. Analytics data is retained for 26 months.

8. Your Rights Under NDPR

Under the Nigeria Data Protection Regulation, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data, subject to legal obligations
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Request a copy of your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or direct marketing

To exercise any of these rights, contact us. We will respond within 30 days. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include encryption at rest and in transit, access controls, regular security audits, and staff training on data protection.

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside Nigeria where our service providers operate (including the United States and the European Union). We ensure appropriate safeguards are in place through standard contractual clauses and data processing agreements that meet NDPR adequacy requirements.

11. Children's Privacy

Our Platform is not intended for children under 13. We do not knowingly collect personal data from children. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete it. If you believe a child has provided us with their data, contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Where material changes are made, we will notify you by email or through a prominent notice on our Platform.

13. Contact

For privacy-related inquiries or to exercise your data protection rights, contact us or email support@fabryard.com.