Legal
Privacy Policy
Last updated: [to be set on publication]
Rowan House Beauty (“we”, “us”, “our”) operates rowanhousebeauty.com and the associated online store. This policy explains what personal data we collect, why, and the rights you have over it. We are based in Port Harcourt, Rivers State, Nigeria, and this policy is written to comply with the Nigeria Data Protection Act 2023, and, for visitors located in the EU/EEA, the GDPR.
1. Who We Are
Data Controller: Rowan House Beauty, Port Harcourt, Rivers State, Nigeria.
Contact: rowanshouse9@gmail.com
2. What We Collect
Account: when you sign in with Google, we receive your name, email, and profile picture. We never see your Google password.
Orders: name, email, phone, shipping address, order contents, and payment method. We do not store full card numbers — card payments are handled directly by Flutterwave.
Newsletter: your email address and the date you opted in, if you subscribe. You can unsubscribe at any time.
Cookies: strictly necessary cookies only, to keep you signed in and your cart working. See our Cookie Notice.
3. Why We Use Your Data
- To create your account and process your orders (contract)
- To send newsletter emails, if you’ve opted in (consent)
- To keep the site secure and prevent abuse (legitimate interest)
- To retain transaction records as required by law (legal obligation)
4. Who We Share It With
We never sell your data. We use these service providers to run the site:
- Supabase — database and account sign-in, hosted in the EU (Frankfurt)
- Vercel — website hosting
- Google — sign-in
- Resend — order confirmation and shipping emails
- Flutterwave — card payment processing
5. How Long We Keep It
Order and transaction records are kept as long as required by Nigerian tax and business record law, even after account deletion. Account data is kept while your account is active, and deleted or anonymized on request. Newsletter data is kept until you unsubscribe.
6. Your Rights
You can ask us to:
- Show you the data we hold about you
- Correct inaccurate data
- Delete your data, subject to our legal retention obligations above
- Give you a portable copy of your data
- Stop processing based on consent (e.g. unsubscribe from marketing)
Contact rowanshouse9@gmail.com to exercise any of these. You can also complain to the Nigeria Data Protection Commission (NDPC), or your local Data Protection Authority if you’re in the EU/EEA.
7. Security
We use HTTPS encryption, database access controls, and two-factor authentication on our administrative accounts. No system is perfectly secure, but we take reasonable steps to protect your data.
8. Changes
We may update this policy from time to time. Material changes will be reflected by a new “Last updated” date above.
9. Contact
Rowan House Beauty, Port Harcourt, Rivers State, Nigeria — rowanshouse9@gmail.com