Privacy Policy

When you interact with Gift's Crafts — whether browsing our website, placing an order, or reaching out via WhatsApp — we may collect the following categories of information:

We do not collect sensitive personal data such as government ID numbers, biometric data, or health information.

We use the information we collect solely to operate our business and serve you well. Specifically, we use it to:

• Process and fulfil your orders, including communicating updates via WhatsApp
• Calculate and arrange delivery to your location
• Respond to your enquiries and provide customer support
• Improve the usability and content of our website
• Send order receipts and confirmations
• Detect and prevent fraudulent or unauthorised activity
• Comply with applicable laws and regulations in Nigeria

We do not use your personal information to send unsolicited marketing messages without your consent, nor do we sell your data for any purpose.

Gift's Crafts does not sell, rent, or trade your personal information. We may share limited data only in the following circumstances:

• Delivery partners: Your name and delivery address may be shared with logistics or courier partners to complete your delivery.
• Payment processors: Paystack receives transaction data necessary to complete your payment securely.
• Firebase (Google): Our platform uses Firebase Firestore and Firebase Authentication — both operated by Google — to store order data and manage admin access. Data is stored in Google's infrastructure under Google's privacy commitments.
• Legal obligations: We may disclose your information if required to do so by Nigerian law or a valid legal order.

Any third parties we work with are expected to handle your data responsibly and use it only for the purpose it was shared.

We retain your order information for as long as necessary to fulfil your order, resolve any disputes, and meet our legal obligations. In practice, order records are kept for a minimum of 12 months from the date of purchase.

If you would like your data deleted sooner, you may contact us directly (see Section 11) and we will honour your request where we are not legally required to retain the information.

Our website uses browser localStorage to improve your shopping experience — for example, to remember items in your cart between page visits and to cache product listings so the site loads faster on slower connections.

We do not currently use advertising cookies or third-party tracking cookies. Google Fonts, loaded from Google's servers, may set its own cookies subject to Google's privacy policy.

You can clear your browser's localStorage at any time through your browser settings. Doing so will reset your cart and any locally cached data.

Our website integrates with the following third-party services, each governed by their own privacy policies:

• Firebase / Google — database, authentication, and hosting infrastructure. Firebase Privacy
• Paystack — payment processing for Nigerian transactions. Paystack Privacy
• WhatsApp (Meta) — used for order communication. Messages you send us are subject to Meta's privacy policy.
• Google Fonts — fonts loaded from Google's CDN. Google Privacy
• Unsplash — some images on this website are sourced from Unsplash.

We encourage you to review the privacy policies of these services independently.

We take reasonable precautions to protect your personal information. Our website is served over HTTPS, Firebase Firestore is secured with access rules that restrict data to authorised admin users, and payment processing is handled entirely by Paystack's PCI-DSS-compliant infrastructure.

However, no system is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify affected customers as quickly as reasonably possible.

You have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — ask us to delete your personal data, subject to any legal retention obligations
• Objection — object to the way we process your data in certain circumstances

To exercise any of these rights, contact us via WhatsApp or email (see Section 11). We will respond within a reasonable timeframe.

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their personal information, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to us: