Privacy notice

This notice explains what Chardonnay Beauty does with your personal information when you shop with us. It is written to meet the Nigeria Data Protection Act 2023.

Who is responsible for your data

Chardonnay Beauty, Lagos, Nigeria is the data controller. For anything in this notice, write to orders@chardonnaybeauty.com.

What we collect, and why

When you place an order. Your name, email address, phone number and delivery address, including any landmark or delivery note you add. We need all of it: the address and landmark to find you, the phone number because the person delivering your order will call it, and the email address to send your receipt and tell you when the order is on its way.

If you create an account. Your name, your email address and any delivery addresses you choose to save. We also record the time, IP address and browser of each sign-in, so that you can see where your account is signed in and so we can detect someone else using it.

If you ask to be told when a shade is back. Your email address, with a record of the wording you agreed to and when. We keep that record so we can show you consented; the request itself expires on its own if the shade does not return.

When you pay. Card details never reach this website. Card payments are handled on Paystack’s own pages, and we receive only the result: whether the payment succeeded, the amount, and a reference. If you pay by bank transfer, we see what your bank shows on the transfer.

What we do not do

We do not run advertising cookies, analytics or any third-party tracker on this site. Our emails contain no tracking pixel, so we cannot tell whether you opened one. We do not sell, rent or trade your information, and we do not build a profile of you for advertising anywhere else.

Cookies

Only the ones the site needs to work. One remembers what is in your bag. One lets you reopen your own order confirmation without signing in. The rest keep you signed in if you have an account. None of them is used for advertising, and there is no cookie banner because there is nothing optional to consent to.

Our lawful basis

We process your order details to perform our contract with you. We keep records of completed orders because tax law requires it. We use your consent for stock alerts, and you can withdraw it at any time using the unsubscribe link in the email. We rely on our legitimate interest in keeping the shop secure to protect against fraud and abuse of the checkout.

Who else sees your information

Only the companies that run parts of the shop for us, and only what each needs:

• Cloudflare — hosting, image delivery, and the checks that block automated abuse of our forms.
• Neon — the database your order is stored in.
• Paystack — card payments, under their own privacy policy.
• Our email provider — to deliver receipts and order updates.
• The person delivering your order — your name, phone number and address, and nothing else. Orders outside Nigeria are passed to a shipping agent for the same purpose.

We will also disclose information where the law requires it. Nobody else gets it.

Where your information is kept

Our hosting and database providers store data on servers outside Nigeria. The Data Protection Act permits this where the receiving country or the provider offers adequate protection, and both providers are bound by contract to protect your data to that standard. If you would like the detail of a particular provider, ask us.

How long we keep it

Completed orders are kept for 6 years, because business and tax records have to be. Account details are kept until you ask us to close the account. Stock alert requests expire on their own. Sign-in sessions expire and are cleared. If you ask us to delete your data, we will delete everything except the order records the law requires us to hold, and we will tell you what was kept.

Your rights

Under the Data Protection Act you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or send it to someone else. You can object to processing, and you can withdraw consent you have given. Email orders@chardonnaybeauty.com and we will respond within 30 days. If you are not satisfied with our answer, you can complain to the Nigeria Data Protection Commission.

Children

This shop is not intended for children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us their details, tell us and we will remove them.

Changes to this notice

If we change how we handle your information, we will update this page and the date at the top of it. Anything that materially affects orders you have already placed, we will email you about.

See also our terms of sale and returns policy.