Privacy Policy

At Ìtùnú Africa, we respect your privacy and are committed to protecting the personal information you provide to us.

This Privacy Policy explains how we collect, use, store, protect, and disclose personal information when you visit our website, create an account, place an order, contact us, subscribe to our communications, or otherwise use our services.

By using our website, you acknowledge that you have read and understood this Privacy Policy.

Ìtùnú Africa is an African skincare brand operating from Lagos, Nigeria.

For questions about this Privacy Policy or how we handle your personal information, please contact us at info@itunuafrica.com.

Depending on how you interact with Ìtùnú Africa, we may collect different categories of personal information.

Information you provide directly

• Name and contact details such as your email address and phone number.
• Account information you provide when creating or maintaining an account.
• Billing and delivery information needed to process and deliver your orders.
• Messages, enquiries, reviews, feedback, and other information you submit to us.
• Information you provide when subscribing to our newsletter or other marketing communications.

Information relating to purchases

When you place an order, we may collect information relating to the order, including the products purchased, order value, delivery information, order status, and transaction references.

Payment information

Payments made through our website may be processed by third-party payment providers. We may receive payment confirmation and transaction information necessary to confirm and manage your order, but payment-card credentials are handled by the relevant payment provider rather than being stored as full card details by Ìtùnú Africa.

Information collected automatically

When you use our website, certain technical or usage information may be collected automatically, such as browser type, device information, pages visited, session information, approximate location derived from technical data, and information about how you interact with the website.

We may use personal information for purposes including:

• creating and managing customer accounts;
• processing and fulfilling orders;
• processing payments and confirming transactions;
• arranging delivery and providing order updates;
• responding to customer enquiries and support requests;
• providing and improving our website and services;
• maintaining website and account security;
• detecting, preventing, and investigating fraud, abuse, or unauthorised activity;
• sending transactional communications relating to your account or orders;
• sending newsletters, promotional emails, and other marketing communications where permitted and appropriate;
• maintaining business and financial records;
• complying with applicable legal, regulatory, accounting, and security requirements; and
• understanding customer behaviour and improving our products, services, and customer experience.

We process personal information using a lawful basis appropriate to the circumstances. Depending on the activity, this may include:

• Contract: where processing is necessary to provide products or services you request, process your order, or manage your customer account.
• Consent: where you have voluntarily given permission for a specified use of your personal information, such as certain marketing communications.
• Legal obligation: where we are required to process information to comply with applicable laws or lawful requests.
• Legitimate interests: where processing is reasonably necessary for our legitimate business interests, such as improving services, maintaining security, preventing fraud, or administering the business, while respecting your rights.

Where consent is the basis for processing, you may withdraw your consent at any time, subject to any lawful processing that may continue on another basis.

If you subscribe to our newsletter or otherwise provide consent to receive marketing communications, we may use your email address to send information about products, promotions, launches, offers, educational content, and other Ìtùnú Africa updates.

We may organise subscribers into relevant marketing audiences, including customers and repeat customers, to make communications more relevant.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the message.

Unsubscribing from marketing communications does not necessarily delete information that we are required or permitted to retain for other purposes, such as fulfilling an order, resolving a dispute, maintaining records, or complying with the law.

We do not sell your personal information.

We may share relevant personal information with trusted service providers and partners where necessary to operate our business, provide our services, or comply with legal obligations.

These may include providers supporting:

• Payments and payment transaction processing.
• Authentication and account services used to manage customer accounts and sign-in.
• Website, content, and database infrastructureused to operate the Ìtùnú Africa platform.
• Email delivery and communications used for transactional emails, customer communications, and marketing campaigns.
• Delivery and logistics providers where necessary to deliver orders.
• Professional advisers or authorities where disclosure is required by law or reasonably necessary to protect our rights, customers, or business.

We expect service providers that process personal information on our behalf to handle that information appropriately and only for authorised purposes.

Our website uses third-party services to provide certain functions. These may include account authentication, payment processing, content management, email delivery, website hosting, analytics, and related infrastructure.

Those providers may process information in accordance with their own privacy policies and contractual obligations. Their processing may take place outside Nigeria depending on the service and technical infrastructure involved.

We encourage you to review the privacy notices of relevant third-party providers where appropriate.

Our website may use cookies and similar technologies to support essential website functions, remember preferences, maintain account sessions, improve performance, understand website usage, and support relevant features.

Some cookies may be necessary for the website to function properly, while others may be used for analytics, preferences, or other non-essential purposes.

We only use optional cookies with your consent, and you can change your choices at any time using Cookie Settings in the website footer. For full details of the cookies we use, see our Cookie Policy.

You can also manage or restrict cookies through your browser settings. Restricting certain cookies may affect the availability or functionality of some parts of the website.

Where you create an account, information associated with that account may be used to authenticate you, maintain your account, provide account-related services, and support order and customer management.

You are responsible for maintaining the security of your account credentials and should notify us if you believe your account has been accessed without authorisation.

We retain information relating to orders and transactions as needed to fulfil purchases, provide customer service, manage returns or refunds, maintain financial and business records, prevent fraud, resolve disputes, and comply with applicable legal obligations.

Transaction information may include order identifiers, purchased products, quantities, prices, delivery details, payment references, and order status.

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

Access to personal information is limited to people and service providers who reasonably need it for authorised business purposes.

However, no website, electronic transmission, or storage system can be guaranteed to be completely secure. You should use appropriate precautions when providing information online.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining business and financial records, resolving disputes, enforcing agreements, preventing fraud, and complying with legal or regulatory obligations.

The appropriate retention period depends on the nature of the information, the reason it was collected, whether an account or customer relationship remains active, and any applicable legal requirements.

When personal information is no longer required, we may securely delete, anonymise, or otherwise dispose of it in accordance with applicable requirements.

Some of the service providers that support our website may process personal information outside Nigeria.

Where personal information is transferred or made accessible across borders, we seek to do so in accordance with applicable data protection requirements and with appropriate safeguards.

Subject to applicable law and any lawful limitations, you may have rights in relation to your personal information, including the right to:

• be informed about how your personal information is processed;
• request access to personal information we hold about you;
• request correction of inaccurate, incomplete, or outdated information;
• request restriction of certain processing in appropriate circumstances;
• object to certain processing, where the law gives you that right;
• request deletion or erasure of personal information where applicable;
• request data portability where applicable;
• withdraw consent where processing is based on your consent; and
• lodge a complaint with the relevant data protection supervisory authority.

These rights are not absolute and may be subject to lawful exceptions, including circumstances where we are required to retain or process information for legal, security, contractual, or other legitimate purposes.

The Nigeria Data Protection Commission identifies rights including access, rectification, objection, restriction, portability, and erasure for data subjects under the Nigeria Data Protection Act framework.

To ask a question about your personal information or exercise a privacy right, contact us using the details below.

To protect your information, we may need to verify your identity before completing certain requests.

Our website and services are intended for general audiences and are not knowingly directed at children.

We do not knowingly collect personal information from children where doing so would be unlawful. If you believe that a child has submitted personal information to us, please contact us so that we can review the situation and take appropriate action.

We maintain reasonable safeguards intended to protect personal information. If we become aware of a personal data breach, we will assess the incident and take appropriate steps in accordance with applicable law and our legal and regulatory obligations.

Where notification is required, we may notify affected individuals, regulators, or other relevant parties as required by applicable law.

Our website may contain links to third-party websites, platforms, social media pages, or services.

We are not responsible for the privacy practices or content of websites and services operated by third parties. We encourage you to review their privacy policies before providing them with personal information.

We may update this Privacy Policy from time to time to reflect changes to our business, services, technology, legal requirements, or data-processing practices.

When we make changes, we will publish the updated policy on this page and update the effective date.

We encourage you to review this page periodically so that you remain informed about how we handle personal information.

If you have questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact us.