Privacy & Data Protection Policy

Ethnikraft Africa is committed to honoring your privacy. We comply with the Nigeria Data Protection Act 2023 (NDPA), Nigeria Data Protection Regulation (NDPR), the General Data Protection Regulation (GDPR – EU/UK), and applicable regional data protection laws across our international shipping corridors.

• Personal Information: Full name, email address, physical delivery address, phone number, and billing information.
• Custom Sizing Data: Measurements, sizing preferences, and fabric specifications provided in the Studio tool.
• Technical & Device Data: IP address, browser type, cookies, transaction logs, and device hardware identifiers.
• Payment Data: Encrypted payment tokens handled directly by PCI-DSS compliant payment gateways. Ethnikraft does NOT store full raw credit card numbers.

We process personal data strictly under valid legal grounds:

• Contract Performance: Fulfilling orders, processing payments, arranging international courier delivery, and custom artisan tailoring.
• Legitimate Interests: Platform security, fraud prevention, service optimization, and customer feedback analysis.
• Legal Compliance: Tax compliance, customs documentation, and anti-money laundering (AML) obligations.

As an international e-commerce brand shipping worldwide, your delivery details are shared securely with verified logistics partners (e.g., DHL Express, FedEx, UPS) and verified artisan vendors responsible for fulfilling custom requests. Any cross-border data transfer outside Nigeria or the EEA is safeguarded through Standard Contractual Clauses (SCCs) and strict data protection agreements.

Under the NDPA 2023 and GDPR, you possess the following rights:

• Right of Access & Rectification: Request a copy of your data or correct inaccurate information.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data when no legal retention obligation exists.
• Right to Object & Restrict: Opt-out of marketing communications or restrict specific processing activities.

Exercising Your Rights

To exercise these rights, submit your request to privacy@ethnikraft.africa.