Privacy Policy

1. Who we are

BlessedKing BEAUTY CONCEPT ("BKBC", "we", "our", "us") operates blessedkrrb.com and sells premium hair extensions and related beauty products through retail and wholesale channels. We are the data controller of any personal information you provide to us through this website, via WhatsApp, or during order fulfillment.

2. What personal information we collect

We only collect information that is necessary to complete a sale, fulfill delivery, and maintain customer service. Specifically:

• Contact data: name, phone number, email address, delivery address — collected when you submit a checkout form or contact us via WhatsApp.
• Order data: products ordered, quantities, total amount — collected automatically when you complete a purchase.
• Technical data: browser type, device type, pages visited, session duration — collected via Google Analytics if you consent to cookies.

We do not collect biometric data, payment card numbers (payment processing is handled directly by our payment partner), or information about minors under 18.

3. Lawful basis for processing (NDPA 2023 Article 25)

We process your personal data on the following lawful bases:

• Contract performance: to fulfill your order and deliver products you have purchased.
• Consent: for optional cookies and marketing communications (you can withdraw consent at any time).
• Legitimate interest: to improve our service, prevent fraud, and maintain site security.
• Legal obligation: where required by Nigerian tax, consumer protection, or data protection law.

4. How we use your information

• To process and fulfill your order (including coordinating delivery via GIG Logistics, Peace Mass, or equivalent carriers)
• To respond to inquiries and provide customer support via WhatsApp and email
• To send order confirmations, shipping updates, and delivery notifications
• To maintain internal records as required by Nigerian tax and business regulations
• To improve the website experience and prevent fraudulent transactions

We do not sell, rent, or trade your personal information to third parties. We do not use your data for automated decision-making or profiling.

5. Who we share your information with

We share personal data only with:

• Payment processors: Paystack (when the payment integration is live) to complete transactions. Paystack's privacy policy governs their handling.
• Logistics partners: GIG Logistics, Peace Mass, and similar Nigerian couriers to deliver your order.
• Analytics providers: Google Analytics (only if you consent via the cookie banner).
• Legal authorities: when required by a valid court order or regulatory request under NDPA 2023.

6. Your rights under NDPA 2023

As a data subject under the Nigeria Data Protection Act 2023, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data where there is no ongoing legal or contractual need
• Restriction — limit how we process your data
• Data portability — receive your data in a structured, machine-readable format
• Object — to processing based on legitimate interest or for marketing
• Withdraw consent — at any time, for any processing based on consent
• Lodge a complaint — with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng

To exercise any of these rights, contact us at {{BKBC_CONTACT_EMAIL}} or via WhatsApp. We will respond within 30 days.

7. Data retention

We retain personal data only for as long as necessary:

• Order records: 7 years (required for Nigerian tax compliance)
• Contact inquiries: 24 months after last interaction
• Analytics data: 14 months (Google Analytics default)
• Cookie consent records: 12 months

After these periods, data is securely deleted or anonymized.

8. Cookies and tracking

We use two categories of cookies:

• Essential cookies: required for the shopping cart and checkout to work. These cannot be disabled.
• Analytics cookies: Google Analytics to understand site usage. Only loaded if you accept the cookie banner.

You can manage or delete cookies at any time in your browser settings.

9. Data security

We protect your data with:

• HTTPS encryption for all site traffic (TLS 1.3, HSTS preload)
• Strict Content Security Policy preventing script injection
• No storage of payment card data on our servers
• Access controls limiting internal data access to authorized personnel

If a data breach occurs that is likely to result in risk to your rights, we will notify you and the Nigeria Data Protection Commission (NDPC) within 72 hours as required by NDPA 2023 Article 40.

10. International data transfers

Some of our service providers (Google Analytics, Cloudflare hosting) process data outside Nigeria. We only use providers that offer adequate protection under NDPA 2023 Article 41, typically through Standard Contractual Clauses or certification schemes.

11. Children's privacy

Our services are intended for customers aged 18 and above. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, contact us immediately and we will delete it.

12. Changes to this policy

We may update this policy to reflect changes in our practices or Nigerian law. The "Last updated" date at the top will always reflect the most recent revision. We will notify you of material changes via email or a site banner.

13. Contact

Data inquiries, rights requests, or complaints:
Email: {{BKBC_CONTACT_EMAIL}}
WhatsApp: +234 {{BKBC_WHATSAPP_NUMBER}}
Postal: {{BKBC_BUSINESS_ADDRESS}}, Lagos, Nigeria