Your privacy matters

• Order details: your name, email, phone number, delivery address and the items you buy.
• Account details: if you create an account, your email, name and a securely hashed password.
• Messages and applications: what you send us through our forms (sessions, partnerships, stockists, distributors).
• Email list: your email address if you sign up for deals and news.
• Device storage: your bag and sign-in are remembered in your browser's local storage. We don't use advertising cookies.

• To process, deliver and support your orders (performing our contract with you).
• To reply to your messages and applications.
• To send deals and news if you've signed up (your consent; you can opt out any time).
• To keep the website secure and prevent fraud (our legitimate interests).
• To meet our legal and tax obligations.

We never sell your data. We share only what's needed with:

• Paystack, to process payments. Your card details go to Paystack, not us.
• Supabase and Vercel, who securely host our database and website.
• Dispatch riders and couriers, to deliver your order.
• Authorities, when the law requires it.

Some of these providers may process data outside Nigeria. When they do, we rely on the safeguards required by the Nigeria Data Protection Act.

We keep order records for as long as needed for accounting and legal purposes, and other data only as long as we need it for the reason we collected it. You can ask us to delete your account at any time.

You have the right to:

• access the personal data we hold about you;
• correct it if it's wrong;
• ask us to delete it, or to limit how we use it;
• object to marketing and withdraw consent at any time;
• receive your data in a portable format;
• complain to the Nigeria Data Protection Commission if you're unhappy with how we handle your data.

Our site uses HTTPS encryption, payments are handled by Paystack, passwords are hashed and never stored in plain text, and only authorised staff can see order details.

Products such as the First Period Box are bought by parents and guardians. We don't knowingly collect personal data directly from children under 13.

To use your rights or ask a question about privacy, email sussflow@gmail.com or message us on WhatsApp. We'll respond within the timeframes set by law.