Sign up to see our October offers now
Sign up to see our October offers now
How Girly Essentials handles customer information.
Effective 1 September 2026
Girly Essentials is an online accessories store serving customers in Nigeria. For privacy questions or requests, contact us at hello@shopgirlyessentials.com or +234 902 451 2282. This policy applies to information collected through shopgirlyessentials.com, our checkout, account area, contact forms, and customer communications.
Depending on how you use the site, we may collect your name, email address, phone number, password-related account data, delivery address, selected delivery zone, order and product details, payment reference, stock-alert preferences, WhatsApp number, and messages you send to us. We also receive technical information such as browser, device, approximate location, pages visited, and interactions used to keep the site secure and understand how it is used.
We use information to create and secure accounts, process and verify orders, arrange delivery, provide order and stock updates, answer enquiries, manage returns, prevent fraud or misuse, maintain the site, measure performance, and improve the collection and shopping experience. We use marketing contact details only where you have given the relevant consent or where applicable law permits the communication.
Depending on the activity, processing is based on taking steps to provide a service you request, performing a contract, complying with legal or accounting obligations, protecting the site and our customers, or your consent. You can withdraw consent for optional communications at any time by contacting us. Withdrawal does not affect processing that was already carried out lawfully or that we must retain for a legal purpose.
When payment is enabled, the payment provider processes the payment method you choose. Girly Essentials does not need to store your full card number or card security code. We keep the order amount, payment status, and provider reference needed to confirm and support the transaction. The payment provider may process information under its own privacy policy.
The site may use Supabase for authentication and application data, Sanity for products and content, Resend for transactional and enquiry email, Paystack for payment processing when enabled, Netcup (our VPS host) and nginx for hosting and delivery, Google reCAPTCHA for contact-form abuse prevention, and Google Analytics 4 and PostHog for analytics when configured. Cloudflare may be used for DNS or delivery if that setup is enabled. These providers receive information only as needed for their role and may process it under their own terms and privacy notices.
The site uses essential browser storage for functions such as your bag, guest preferences, and wishlist. Analytics tools may use cookies or similar technologies to measure visits and product interactions. You can control cookies through your browser and may clear local storage, although doing so can remove guest bag or wishlist data saved on that device.
We do not sell personal information. We may share the minimum information needed with delivery partners, payment and email providers, hosting and technology providers, professional advisers, or public authorities where required by law. We may also share information when necessary to protect the store, our customers, or another person from fraud, abuse, or a security incident.
We retain information only for as long as it is needed for the purpose collected, to provide support, complete or defend a transaction, comply with legal or accounting requirements, resolve disputes, and maintain security. Our operational database backups use a limited rotation of up to 7 daily, 4 weekly, and 3 monthly copies, so a deleted record may remain in a backup for up to approximately 3 months before rotation. Different providers may keep limited copies in their own logs, backups, or systems for periods set by their policies and legal obligations.
A signed-in customer can open Manage account and choose Delete account. After the required confirmation, Girly Essentials removes the application records associated with that account, including the profile, saved addresses, wishlist, order records and items, stock-alert subscriptions, and matching WhatsApp or newsletter subscription records, then removes the Supabase sign-in identity. Account deletion is permanent for records held by Girly Essentials and cannot be undone. Provider-held copies, payment records required by law, email delivery logs, security logs, and backups may be subject to the relevant provider's retention rules.
Some service providers may process information outside Nigeria, including in the countries where their infrastructure or support teams operate. We use providers and contractual arrangements intended to protect information and limit each provider to its stated role. Contact us if you would like more information about a particular transfer or service.
You may ask us to access, correct, update, restrict, or delete personal information where applicable, ask how it is used, or raise a concern about our handling of it. Send a request to hello@shopgirlyessentials.com from the email address connected with the request so we can verify and respond safely. You may also have rights under Nigerian data-protection law or another law that applies to you.
We may update this policy when the store, services, or legal requirements change. The effective date at the top of this page identifies the current version. If a change materially affects how we use information, we will take reasonable steps to highlight it on the site or through an appropriate customer communication.