In short: We only collect the information we need to deliver your order and support you. Payments are handled securely by our payment provider – we never see or store your card details. We never sell your data, and you can ask to see, correct or delete your information at any time.

1. Introduction

This Privacy Policy explains how ZubyCoco ("we", "us", "our"), operated by Nzube Umeasiegbu, collects and uses your personal information when you visit https://zubycoco.com, buy a digital pattern or sewing kit, subscribe to our newsletter or contact us. We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA). If you have any questions, email us at info@zubycoco.com.

2. Information we collect

• Order details – your name, email address, phone number, billing and delivery address, and the items you purchase.
• Payment information – payments are processed by a secure third-party payment provider. Your card or bank details go directly to the payment provider over an encrypted connection; we never receive or store your full card number. We only receive confirmation that payment succeeded, together with a payment reference.
• Account details – if you create an account: your login email and order history.
• Newsletter – your email address, if you choose to subscribe.
• Messages – anything you send us through the contact form, email or social media.
• Technical data – cookies, IP address, browser type and pages visited, used for security and to understand how the Site is used.

3. How we use your information

• To process your orders, deliver kits to your address and deliver pattern download links to your email.
• To send service emails such as receipts, download links and delivery updates.
• To answer your questions and provide customer support.
• To send our newsletter and offers – only if you subscribed, and every email includes an unsubscribe link.
• To keep the Site secure, prevent fraud and improve our products and content.
• To meet legal obligations such as tax and accounting record-keeping.

Under the NDPA, we rely on the following lawful bases: performance of a contract (your order), your consent (newsletter, cookies), our legitimate interests (security, improving the Site) and legal obligation (accounting records).

4. Who we share information with

We never sell or rent your personal information. We share only what is necessary with trusted service providers who help us run the store:

• Our payment provider – to process your payment securely.
• Delivery couriers – your name, address and phone number, so kits can reach you.
• Email and newsletter providers – to send order emails and, if subscribed, our newsletter.
• Our website hosting provider – which stores the Site and its database securely.
• Authorities – only where the law requires it.

5. Cookies

The Site uses cookies – small files stored by your browser – to keep your cart working, remember your preferences and understand how visitors use the Site. You can block or delete cookies in your browser settings; the Site will still work, though the cart and checkout need cookies to function.

6. How long we keep your data

Order records are kept for as long as required for tax and accounting purposes (generally six years). Newsletter details are kept until you unsubscribe. Contact messages are kept only as long as needed to help you. You can ask us to delete your data at any time – see section 8.

7. How we protect your data

The Site runs over an encrypted HTTPS connection, payment details are handled by our PCI-DSS compliant payment provider, and access to customer information is limited to those who need it. No online service can be 100% secure, but we take reasonable technical and organisational measures to protect your information.

8. Your rights

Under the NDPA you have the right to:

• Ask for a copy of the personal information we hold about you.
• Have inaccurate information corrected.
• Ask us to delete your information (where we are not legally required to keep it).
• Object to or restrict how we use your information.
• Withdraw consent at any time – for example, unsubscribe from the newsletter.
• Complain to the Nigeria Data Protection Commission (NDPC) if you are unhappy with how we handle your data.

To exercise any of these rights, email info@zubycoco.com – we will respond within 30 days.

9. Children

The Site is not directed at children. We do not knowingly collect personal information from anyone under 18 without the consent of a parent or guardian; if you believe a child has given us their details, contact us and we will delete them.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows the current version, and significant changes will be highlighted on the Site.

11. Contact us

Questions about your privacy or this policy? Email info@zubycoco.com or use our contact page.