CHF Heron Nigeria Ltd respects your privacy and is committed to protecting personal information collected through our website and services. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding it. We handle personal data in line with Nigerian data protection law, including the Nigeria Data Protection Act 2023 (“NDPA”) and guidance from the Nigeria Data Protection Commission (“NDPC”).
1. Information We Collect
When you use our website, create an account, place an order, or contact us, we may collect information including:
- Your name, email address, and telephone number.
- Billing and delivery address, and state, city, and delivery location.
- Account information and order history.
- Products purchased, and payment and transaction references.
- Communications with our customer service team.
- IP address, browser and device information, and website usage information.
- Cookie and analytics information.
We aim to collect only the information reasonably necessary for the relevant purpose.
2. Payment Information
Online payments are processed through Paystack and other payment services made available through checkout. Where payment information is entered directly into the payment provider’s system, CHF Heron does not receive or store your complete debit or credit card details. We may receive transaction information required to verify your payment, process your order, and maintain appropriate transaction records.
3. How We Use Your Information, and Our Legal Basis
We may use your personal information to:
- Process and fulfil orders, verify payments, and arrange deliveries and collections.
- Send order confirmations and updates and manage customer accounts.
- Respond to enquiries and complaints, process returns and refunds and provide customer support.
- Prevent fraud and misuse and maintain and secure our website.
- Improve our website and customer experience and maintain transaction and business records.
- Meet legal, accounting, tax, and regulatory obligations.
- Send promotional communications where permitted.
We only process personal information where we have a valid legal basis under Nigerian law to do so — typically because it’s necessary to fulfil an order or contract with you, to comply with a legal obligation, to protect our legitimate business interests or protect customers and our business against fraud, to respond to your request, or because you’ve given consent.
4. Delivery and Logistics
When you place an order requiring delivery, we may share the information reasonably required to complete it, typically your name, telephone number, delivery address and location, and relevant order information with the delivery or logistics company responsible.
5. Who We Share Information With
Where necessary, we may share relevant information with organisations that help us provide our services, including payment providers, banks where appropriate, delivery and logistics companies, website hosting and technology providers, email service providers, analytics and security providers, professional advisers, and government, regulatory or law-enforcement authorities where legally required. We do not sell customers’ personal information.
6. Marketing Communications
Where permitted, we may use your contact information to send promotions, offers, product information, or other marketing messages, requesting consent where required. You may unsubscribe at any time using the option provided or by contacting us; this does not stop essential messages relating to your orders, payments, or account.
7. Cookies
Our website may use cookies and similar technologies to keep the website functioning, remember preferences, maintain shopping carts and sessions, understand how visitors use the site, measure performance, and support analytics and marketing. Cookies needed to run the website, such as security and session management, do not require your consent. Other cookies, such as analytics and marketing cookies, are only set if you agree — a cookie notice lets you accept or decline these, and you can change your choice at any time in your cookie settings or by contacting us.
8. Protecting Your Information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or unauthorised disclosure. No online system provides absolute security, but we work to maintain safeguards appropriate to the information we process.
9. How Long We Keep Information
We retain personal information only for as long as reasonably necessary for the purposes it was collected for, and for applicable legal, accounting, tax and dispute-resolution requirements. Retention periods may differ depending on the type of information involved.
10. Your Privacy Rights
Subject to applicable Nigerian law, you may have rights relating to your personal information, including the right to request access, correction, or deletion; request restriction of or object to certain processing, withdraw consent where processing depends on it, request applicable data portability, and raise concerns about how your information is handled. The Nigeria Data Protection Commission (“NDPC”) provides ways to make these requests.
11. Exercising Your Rights
If you wish to make a privacy request, please contact CHF Heron Nigeria Ltd using our official contact information. We may need to verify your identity before processing certain requests to ensure personal information isn’t disclosed to an unauthorised person.
12. Children’s Information
Our online store is intended primarily for customers capable of completing commercial transactions. We do not knowingly seek to collect children’s personal information for purposes unrelated to providing our services.
13. Third-Party Websites and Services
Our website may contain links to third-party websites or services. Those organisations operate under their own privacy policies, and we encourage you to review them before providing personal information through their services.
14. Changes to This Privacy Policy
We may update this Privacy Policy when our business practices, website, technology or legal obligations change. The latest version will be published on this page with its updated date.
15. Contact Us
For questions about this Privacy Policy or how CHF Heron Nigeria Ltd handles your personal information, please contact us through the official contact information on our website. You also have the right to raise a data protection concern with the Nigeria Data Protection Commission (NDPC).