Returns & Exchanges
Irédire is committed to protecting your personal information, and to being clear about what we do with it. This policy explains what we collect when you shop with us or use iredire.com, why we collect it, who we share it with, and the rights you have over it.
Who we are
The data controller responsible for your information is:
33 Lake Chad Crescent, Maitama, Abuja, Nigeria
For anything to do with your personal data, contact us at info@iredire.com or on WhatsApp at +234 915 458 8037.
What we collect
When you place an order Your name, delivery address, billing address, email address, phone number, and the details of what you bought.
When you pay Payments are processed by Paystack. We receive confirmation that a payment succeeded and a reference for it. We never see or store your full card number.
When you create an account Your name, email address, password, and your order history.
When you contact us Whatever you send us through WhatsApp, email, the contact form, or our social media accounts, including the content of the conversation.
When you join our mailing list Your name and email address.
When you browse the site Your IP address, device and browser type, the pages you visit, how you arrived, and how long you stay. Collected through cookies and similar technologies.
What we do not collect We do not ask for or store your full card details, and we do not collect sensitive personal data such as health information or biometric data.
Why we use it, and our lawful basis
Under the NDPA we must have a lawful reason for everything we do with your data. Ours are:
| What we do | Why | Lawful basis |
|---|---|---|
| Take payment and fulfil your order | To deliver what you bought | Performance of a contract |
| Send order and delivery updates | To keep you informed | Performance of a contract |
| Answer questions and handle returns | Customer service | Performance of a contract |
| Send marketing emails | To tell you about new pieces | Consent, which you can withdraw |
| Show relevant ads on social platforms | Marketing | Consent |
| Keep accounting and tax records | Required by law | Legal obligation |
| Prevent fraud and secure the site | To protect you and us | Legitimate interests |
| Understand how the site is used | To improve it | Consent, through analytics cookies |
You can withdraw consent at any time. It does not affect anything we did before you withdrew it.
Who we share it with
We share only what is necessary, and only with organisations that are bound to protect it.
- Paystack, to process your payment
- Our delivery partners, to get your order to you. They receive your name, address and phone number only
- Email marketing platform, to send our newsletter
- Analytics provider, to understand how the site is used
- Hosting and web maintenance provider, who maintain the site and can access order data in the course of that work
- Meta, where you contact us on WhatsApp or Instagram, since those conversations happen on their platforms
- Our accountants and professional advisers, where needed
- Law enforcement or regulators, where the law requires it
We do not sell your personal information to anyone, and we never will.
Sending data outside Nigeria
Some of the services we rely on store data outside Nigeria, and we deliver orders to customers in the United Kingdom, United States, Canada and elsewhere.
Where your information leaves Nigeria, we take reasonable steps to ensure it stays protected to the standard the NDPA requires, including relying on providers who commit contractually to appropriate safeguards.
How long we keep it
| Data | Kept for |
|---|---|
| Order and transaction records | [7] years, as tax law requires |
| Account details | Until you close your account |
| Marketing subscription | Until you unsubscribe |
| Customer service messages | [2] years |
| Analytics data | [26] months |
Once a retention period ends, we delete the data or anonymise it so it can no longer identify you.
Your rights
Under the Nigeria Data Protection Act 2023, you have the right to:
- Be informed about how we use your data, which is what this policy is for
- Access the personal data we hold about you
- Correct anything inaccurate or incomplete
- Delete your data, where we are not legally required to keep it
- Restrict how we use it while a query is resolved
- Object to processing based on our legitimate interests
- Portability, meaning a copy of your data in a usable format
- Withdraw consent at any time, including unsubscribing from marketing
- Complain to the regulator
If you are in the United Kingdom or the European Union, you have equivalent rights under GDPR.
How to exercise them Email [email address] and tell us what you want. We will respond within 30 days. We do not charge for this.
If you are not satisfied You can complain to the Nigeria Data Protection Commission at ndpc.gov.ng. If you are outside Nigeria, you can also complain to your own data protection authority.
Cookies
Cookies are small files stored on your device. We use them in three ways.
Necessary cookies keep the site working, remember what is in your basket, and let you check out. These cannot be switched off.
Analytics cookies tell us which pages people visit and where they leave, so we can fix what is not working.
Marketing cookies let us show you relevant pieces on platforms like Instagram and Facebook.
Analytics and marketing cookies only run if you agree to them. You can accept, reject or change your choice at any time through [cookie settings link].
Turning off necessary cookies through your browser will stop parts of the site working, including the basket.
Marketing
We only send marketing emails to people who have asked for them.
Every email has an unsubscribe link at the bottom, and it works immediately. You can also just reply and tell us, or message us on WhatsApp.
Unsubscribing from marketing does not stop order confirmations and delivery updates, which we have to send you.
Security
We protect your information with SSL encryption across the site, restricted access so that only the people who need your data can see it, secure hosting, and regular updates to the systems we run.
No system is completely secure. If a breach happens that puts your rights at risk, we will tell you and report it to the Nigeria Data Protection Commission as the law requires.
Children
Our site is intended for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us their information, contact us and we will delete it.
Automated decisions
We do not make decisions about you by automated means alone, and we do not profile you in any way that has a legal or similarly significant effect.
Changes to this policy
We update this policy when our practices or the law change. The current version is always the one published here, with the date shown at the top. Where a change is significant, we will tell people on our mailing list.
Contact us
33 Lake Chad Crescent, Maitama, Abuja, Nigeria
Email info@iredire.com WhatsApp +234 915 458 8037