Privacy Policy

Decency's Crochet Design is a Nigerian fashion brand operating entirely online. We can be reached at dcdnigeria@gmail.com or via WhatsApp. We are the data controller responsible for your personal information.

When you place an order, make a bespoke request, or contact us, we may collect the following personal information:

• Your full name
• Email address
• Phone number or WhatsApp contact
• Delivery address
• Order details, measurements, and design preferences
• Any messages, notes, or reference images you send to us

We only collect information that is necessary for the purpose stated at the time of collection.

Under the NDPA 2023, we must have a lawful basis for processing your personal data. We rely on the following bases:

• Contract performance — processing your name, contact details, delivery address, and order information is necessary to fulfill your order, arrange delivery, and respond to post-order queries.
• Legal obligation — retaining transaction records is required under applicable Nigerian tax and accounting law.
• Legitimate interests — we may retain limited order records beyond fulfillment for the purpose of fraud prevention and resolving disputes, where this does not override your rights.
• Consent — if we ever send promotional communications, we will ask for your explicit consent beforehand. You can withdraw consent at any time.

We use your information only for the purposes stated:

• Processing and fulfilling your order
• Confirming delivery details and fees before dispatch
• Responding to enquiries and support requests
• Communicating about bespoke commissions
• Maintaining legally required transaction records
• Preventing fraud and resolving disputes

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

Payments on this website are processed by Paystack, a third-party payment platform operating under its own privacy policy and data security standards. When you pay, Paystack processes your card or banking details directly — Decency's Crochet Design does not store, access, or handle that financial information.

Paystack acts as a data processor on your behalf. Your use of Paystack is also subject to Paystack's Privacy Policy. We encourage you to review it if you have questions about how they handle your payment data.

We retain your personal information only for as long as necessary:

• Order and delivery information — retained for up to 6 years after fulfillment for legal, tax, and dispute resolution purposes.
• Bespoke commission details — retained for up to 6 years after the commission is completed.
• General enquiry communications — retained for up to 12 months after the enquiry is resolved, then deleted.
• Marketing consent records — retained until you withdraw consent or request erasure.

Once the relevant retention period expires, your information is securely deleted or anonymised.

We operate from Nigeria. If you are ordering from outside Nigeria, your personal information may be transferred to and processed in Nigeria for the purpose of fulfilling your order. By placing an order, you acknowledge this transfer.

We take reasonable steps to ensure your data is handled securely regardless of where it is processed.

We take reasonable and appropriate steps to protect your personal information from unauthorised access, loss, or misuse. Access to your data is limited to those who need it to process your order or respond to your enquiry.

In the event of a personal data breach that is likely to result in risk to your rights or freedoms, we will notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of the breach, and where required by law, notify you without undue delay.

As a data subject under the Nigeria Data Protection Act 2023, you have the following rights in relation to your personal information:

• Right of access — request a copy of the personal information we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete information.
• Right to erasure — request deletion of your data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restrict processing — ask us to limit how we use your data in certain circumstances.
• Right to data portability — request your data in a structured, machine-readable format where technically feasible.
• Right to object — object to processing based on legitimate interests.
• Right not to be subject to automated decisions — we do not use automated decision-making or profiling that significantly affects you.
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us via WhatsApp or email. We will respond within a reasonable timeframe and no later than 30 days. We will not charge a fee for reasonable requests.

If you believe your data protection rights have been violated and we have not resolved your concern to your satisfaction, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC), the national supervisory authority responsible for data protection in Nigeria.

The NDPC can be reached at ndpc.gov.ng. We encourage you to contact us first so we can try to resolve the matter directly.

If you have questions about this Privacy Policy or how we handle your data, reach us at dcdnigeria@gmail.com or via WhatsApp.

This policy may be updated periodically to reflect changes in our practices or applicable law. We will note the revision date above when changes are made.