FEHINTI
PRIVACY & COOKIE POLICY

1. About This Policy

At Fehinti, we respect the privacy of our customers and everyone who interacts with our website, stores and customer-service channels.

This Privacy & Cookie Policy explains what personal information we may collect, why we collect it, how we use and protect it, when it may be shared, how cookies and similar technologies are used, and the choices and rights available to you.

This policy applies to personal information collected through the Fehinti website and online store, as well as information provided to Fehinti in connection with orders, deliveries, enquiries, customer service and related interactions.

Fehinti processes personal information in accordance with applicable Nigerian data-protection requirements, including the Nigeria Data Protection Act 2023.

2. Who Is Responsible for Your Information

For the purposes of applicable data-protection law, Fehinti determines why and how personal information collected directly by Fehinti is processed and is therefore responsible for that processing as the applicable data controller.

Some companies that provide services used in operating our business may also process information on our behalf or, depending on the service, as independent data controllers.

3. Information We May Collect

Depending on how you interact with Fehinti, we may collect information such as your name; telephone number; email address; delivery or billing address; order and purchase information; products purchased, returned or exchanged; customer-service communications; information you provide when requesting sizing or product assistance; payment and transaction information available to us from our payment providers; account information where customer accounts are available; marketing preferences; device, browser and website-usage information; IP address and similar technical information; cookie and analytics information; and other information you voluntarily provide when communicating with Fehinti.

We aim to collect only information that is reasonably necessary for the relevant purpose.

4. Payment Information

Payments may be processed through payment providers made available by Fehinti.

Payment providers may collect and process information necessary to authorise and complete a transaction.

Fehinti does not need customers to provide card PINs, online-banking passwords or one-time authentication codes to Fehinti staff. Customers should never send this information to a member of our team.

Where Fehinti receives transaction references or other payment information necessary to identify or reconcile a payment, that information may be retained as part of the relevant transaction record.

5. How We Collect Information

We may collect personal information directly from you when you place an order; when you create or use a customer account; when you communicate with Customer Care; through WhatsApp or another authorised Fehinti communication channel; when you visit or interact with our website; when you subscribe to marketing communications; when you participate in a promotion or other Fehinti activity; through payment, delivery and technology providers involved in a transaction; and through cookies and similar website technologies.

6. Why We Use Your Information

We may use personal information where reasonably necessary to process and fulfil orders; confirm and reconcile payments; arrange delivery; provide order and delivery updates; process exchanges, returns and refunds; provide customer service; respond to questions or complaints; provide product or sizing assistance; maintain transaction and business records; detect or prevent fraud, misuse or security incidents; operate and improve our website; understand how customers use our website and services; improve our products and customer experience; send marketing communications where permitted; administer promotions; protect our legal rights and those of our customers; comply with applicable legal or regulatory obligations; and establish, exercise or defend legal claims where necessary.

We will not intentionally use personal information for an incompatible purpose without an appropriate lawful basis.

7. Our Lawful Bases for Processing

Depending on the circumstances, Fehinti may process personal information on one or more lawful bases recognised under applicable data-protection law.

These may include contract, where processing is necessary to take steps requested by you or to fulfil a purchase or other agreement with you; consent, where you have freely agreed to particular processing and consent is the appropriate lawful basis; legal obligation, where information must be processed or retained to comply with an applicable legal requirement; and legitimate interests, where processing is reasonably necessary for a legitimate business purpose and those interests are appropriately balanced against your rights and interests.

Other lawful bases recognised by applicable law may be used where relevant. Where processing is based on consent, you may withdraw that consent, subject to applicable law.

8. Orders & Customer Accounts

When you place an order, we use the information you provide to process the purchase, confirm payment, prepare the order, arrange delivery, communicate with you and provide after-sales support.

If Fehinti offers customer accounts, information associated with your account may be used to make future interactions easier, maintain order history and provide account functionality.

You are responsible for keeping any account credentials confidential.

9. Delivery Information

To deliver an order, relevant information may need to be provided to Fehinti's logistics or delivery providers. This may include your name, telephone number, delivery address and information reasonably required to complete the delivery.

Fehinti currently uses delivery arrangements that include Topship for Nigerian deliveries.

Delivery information should be used for legitimate fulfilment and related purposes and not for unrelated use by Fehinti staff.

Where a customer independently appoints a courier or representative, Fehinti may provide the information reasonably necessary to release or coordinate collection of the order.

10. Customer Service & WhatsApp

If you communicate with Fehinti through WhatsApp, telephone, email, social media or another customer-service channel, we may process the information contained in that communication in order to respond to you and maintain an appropriate record of the interaction.

Customer-service records may be linked to an order where necessary to resolve a query, exchange, delivery issue, complaint or other matter.

Please avoid sending unnecessary sensitive personal information through customer-service channels.

11. Marketing Communications

Where permitted by applicable law, Fehinti may use contact information to communicate with customers about products, collections, promotions, events or other relevant Fehinti news.

Where consent is required for a particular marketing activity, we will seek that consent.

Customers should have a reasonable way to unsubscribe or opt out of direct marketing communications.

Opting out of marketing does not prevent Fehinti from sending transactional or service communications necessary in connection with an order, payment, delivery, account, security matter or customer-service request.

12. No Sale of Customer Personal Information

Fehinti does not sell customer personal information as a business product.

Information may, however, be shared with legitimate service providers where reasonably necessary to operate the business, fulfil an order or provide services requested by the customer.

13. Service Providers

Fehinti relies on third parties to provide certain services. Depending on the services being used, these may include e-commerce and website providers; payment processors; logistics and delivery providers; customer communication providers; hosting and technology providers; analytics providers; marketing service providers; professional advisers; and other providers necessary to operate the business.

These providers should receive only the information reasonably necessary for the relevant purpose, subject to the nature of their service and applicable legal requirements.

Some providers may process information under their own privacy terms as independent data controllers.

14. Shopify

Fehinti's online store may be operated using Shopify.

As an e-commerce technology provider, Shopify may process information associated with website visits, customer accounts, checkout, orders and other store functionality in order to provide its services.

The information processed by Shopify and the way Shopify processes that information may also be governed by Shopify's applicable privacy documentation and contractual arrangements with Fehinti.

15. Payment Providers

Payment transactions may involve third-party payment processors, including payment methods made available through the Fehinti checkout.

These providers may process personal and financial information necessary to authorise, secure and complete payments.

Fehinti does not control every aspect of processing undertaken independently by banks, card networks or payment providers.

Customers should also review any applicable privacy information provided by the payment service they choose to use.

16. Logistics Providers

Fehinti may provide relevant order and contact information to logistics providers, including Topship and other providers used for particular deliveries.

The information shared should be limited to what is reasonably required to arrange, track, complete or resolve a delivery.

Where a logistics provider operates independently as a data controller for part of its service, its own privacy obligations may also apply.

17. Cookies

Cookies are small pieces of information stored or accessed on a device when a person visits a website.

Fehinti's website may use cookies and similar technologies to make the website function, remember preferences, understand website performance, improve the shopping experience, maintain security and, where applicable and permitted, support analytics or marketing.

Not all cookies serve the same purpose.

18. Necessary Cookies

Some cookies are necessary for the website and online store to function properly. For example, necessary technologies may support shopping-cart functionality, checkout, security, fraud prevention, customer authentication, session management and essential website preferences.

Because these technologies are required to provide functionality requested by the user or to operate the service securely, they may operate without the same consent mechanism used for optional cookies where permitted by applicable law.

19. Analytics Cookies

Analytics technologies may help us understand matters such as how visitors reach the website, which pages are visited, how the website performs and how customers interact with the online store.

Where consent or another choice mechanism is required for these technologies, Fehinti should respect the choice made through the website's cookie controls.

20. Advertising & Marketing Cookies

Where Fehinti uses advertising or marketing technologies, these may help measure advertising performance or make marketing more relevant.

Non-essential advertising or marketing cookies should not be treated as necessary simply because they are commercially useful.

Where consent is required, these technologies should operate in accordance with the customer's cookie choices.

21. Managing Cookie Choices

Where cookie controls are made available on the Fehinti website, customers may use them to manage applicable optional cookies.

Necessary cookies may remain active where required for the website or service to function. Customers may also be able to control cookies through their browser or device settings.

Restricting certain cookies may affect some website functionality.

Fehinti should not interpret refusal of optional cookies as refusal to use the ordinary shopping functions of the website.

22. Website Analytics & Technical Information

When you visit the Fehinti website, certain technical information may be generated automatically. This can include device type, browser information, IP address, pages viewed, referring pages, interaction information and approximate technical or geographic information derived from the connection.

We may use this information for website security, troubleshooting, analytics, performance and improvement, subject to applicable requirements.

23. Social Media

If you interact with Fehinti through a social-media platform, the platform may process information about that interaction under its own privacy terms.

Information you choose to send directly to Fehinti through social media may also be processed by Fehinti to respond to you or provide requested assistance.

Customers should avoid posting private order or payment information publicly on social-media pages.

24. Keeping Information Secure

Fehinti takes reasonable organisational and technical measures intended to protect personal information against unauthorised access, disclosure, loss, alteration, destruction or misuse.

Access to customer information should be limited to staff, service providers and other authorised persons who reasonably require it for legitimate purposes.

No online or electronic system can be guaranteed to be completely secure. If Fehinti becomes aware of a personal-data breach, we will assess and respond to it in accordance with applicable legal requirements.

25. How Long We Keep Information

Fehinti does not intend to retain personal information indefinitely merely because it has been collected.

Information may be retained for as long as reasonably necessary for the purpose for which it was collected and for legitimate related purposes, including order fulfilment, customer service, accounting, fraud prevention, dispute resolution, legal compliance and the establishment or defence of legal claims.

Different categories of information may therefore have different retention periods.

When information is no longer reasonably required, it should be securely deleted, anonymised or otherwise handled in accordance with applicable requirements.

26. International Data Transfers

Some technology and service providers used by Fehinti may process or store information outside Nigeria.

Where personal information is transferred internationally, Fehinti will take reasonable steps to ensure that the transfer is made in accordance with applicable Nigerian data-protection requirements.

The location of processing may depend on the infrastructure and service providers used by Fehinti.

27. Your Privacy Rights

Subject to applicable law and the circumstances of the processing, you may have rights concerning your personal information, including rights to be informed about how your information is processed; request access; request correction; request deletion in applicable circumstances; request restriction of processing in applicable circumstances; object to certain processing; withdraw consent where processing relies on consent; request data portability where applicable; raise concerns about certain automated decision-making; and lodge a complaint with the Nigeria Data Protection Commission.

Some rights are subject to legal conditions or exceptions and may not apply in every circumstance.

28. Exercising Your Rights

If you wish to exercise a privacy right or raise a concern about how Fehinti has handled your information, please contact Fehinti through the privacy or customer-service contact provided on our website.

We may need to verify your identity before releasing, correcting or deleting personal information in order to protect customers against unauthorised requests.

We will respond to valid requests in accordance with applicable legal requirements.

29. Deleting Information

A request for deletion does not necessarily require Fehinti to immediately delete every record relating to a customer.

Certain information may need to be retained where there is a lawful reason to do so, including legal, accounting, fraud-prevention, transaction-record or dispute-resolution requirements.

Where information must legitimately be retained, its use should remain limited to the applicable purpose.

30. Children

The Fehinti online store is not intended to knowingly collect children's personal information without the appropriate legal basis or authorisation where required.

Where we become aware that personal information relating to a child has been collected in circumstances requiring parental or guardian authorisation, we will take appropriate steps in accordance with applicable law.

31. Automated Decision-Making

Fehinti does not intend to make decisions producing significant legal or similarly significant effects on customers solely through automated processing unless this is appropriately permitted and applicable safeguards are provided.

Automated tools may nevertheless be used for ordinary functions such as fraud screening, website security, analytics or product recommendations.

Where applicable law gives a customer rights concerning significant automated decision-making, those rights will be respected.

32. Fraud, Security & Legal Requests

Personal information may be processed where reasonably necessary to investigate suspected fraud, protect customers, secure Fehinti's systems, enforce legitimate rights or respond to lawful requests from courts, regulators, law-enforcement agencies or other authorities.

Information will not be disclosed merely because someone asks for it. Any disclosure should have an appropriate lawful basis.

33. Changes to This Policy

Fehinti may update this Privacy & Cookie Policy from time to time to reflect changes in our services, technology, service providers or applicable legal requirements.

The current version should be made available on the Fehinti website.

Where a change materially affects the way we use personal information, additional notice or consent will be provided where required.

34. Complaints

If you believe Fehinti has not handled your personal information appropriately, please contact us so that we have an opportunity to investigate and address your concern.

You also have the right, where applicable, to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Using Fehinti's internal complaint process does not remove a right to approach the appropriate regulator.

35. Contact

For questions about this Privacy & Cookie Policy, requests concerning your personal information, or privacy complaints, please contact Fehinti Customer Care through the contact details provided on our website.

Where Fehinti designates a specific privacy contact or Data Protection Officer, the applicable contact information may also be published on the website.