Privacy Policy

1. Information We Collect

To provide a seamless shopping experience, we collect:

• Identity & Contact Data: Name, email address, shipping/billing address, and phone number.
• Transaction Data: Order history, purchased items, and customization details.
• Financial Data: We do not collect or store your credit card details. All payments are securely processed and encrypted by our payment partner, Paystack.
• Technical & Security Data: IP address, device/browser information, authentication records, session cookies, rate-limit records, and payment-risk events.

2. How We Use Your Data

We process data where necessary to perform your order, protect the store and customers, meet legal obligations, and operate legitimate business functions. We use it to:

• Process, fulfill, and deliver your orders.
• Send order confirmations, shipping updates, and secure login links.
• Prevent fraudulent transactions.
• Comply with legal and regulatory obligations in Nigeria.

3. Third-Party Data Sharing

We do not sell your personal data. We only share necessary information with trusted third-party providers to operate our business:

• Paystack: For secure payment processing.
• Delivery partners: The contact and address details needed to deliver your order.
• Supabase: Database and customer authentication.
• Resend: Transactional order emails.
• Telegram: A minimal paid-order alert (reference, amount, item count and delivery area) to our authorised fulfilment team; full customer details remain in the secured admin portal.
• Vercel and Cloudinary: Website hosting, security delivery, and product media.

4. Retention, Transfers & Your Rights

We retain order and payment records only as long as needed for fulfilment, fraud prevention, accounting, disputes, and legal obligations. Some service providers may process data outside Nigeria using contractual and technical safeguards. Subject to applicable law, you may request access, correction, deletion, restriction, objection, or data portability, and may complain to the Nigeria Data Protection Commission.

• Account deletion: Signed-in customers can request account deletion from the account page. Certain transaction records may be retained where law, fraud prevention, or an active dispute requires it.

5. Contact Us

For privacy questions or rights requests, message EliteFits on WhatsApp. We may ask for reasonable information to verify that the request concerns your data.