Privacy policy

Thee Plugg is an online beauty store based in Nigeria and is responsible for the personal information described in this notice. You can contact us at hello@theeplugg.com or send a privacy request to support@theeplugg.com.

We handle personal information in accordance with the Nigeria Data Protection Act 2023 and other data protection laws that apply to our services. Where the EU or UK GDPR applies to your relationship with us, the relevant protections also apply.

• Account information: your name, email, phone number if provided, verification information, sign-in history, and a protected password hash.
• Shopping and delivery details: saved addresses, recipient contact details, cart, wishlist, orders, product choices, delivery instructions, and courier tracking details.
• Payment records: order amounts, payment references, payment status, and payment channel. Paystack processes payment details; this store does not collect or store your full card number or card security code.
• Messages: enquiries, product requests, complaints, and information you choose to include in communications.
• Visit information: when you allow analytics, the pages you visit and a browser-session identifier, associated with your account when signed in. Hosting and security services may also process connection details to deliver and protect the website.

We use account, order, payment, and address information to provide the services you request, fulfil purchases, send order and delivery updates, and respond to enquiries. This is necessary to perform our contract with you or take steps at your request before a purchase.

We use relevant records to meet legal obligations and resolve disputes. Protecting accounts, preventing misuse, and maintaining a reliable store serve our legitimate interests, balanced against your rights. Optional visit analytics rely on your choice to allow them. Creating an account does not automatically subscribe you to promotional emails.

We do not use solely automated decisions that produce legal or similarly significant effects on you.

We share information necessary for the service with payment processors (Paystack), email delivery services (Resend), database and hosting providers, and couriers handling your delivery. Product images are served through our image hosting provider, Cloudinary. Authorised team members may access records needed to fulfil orders or help you.

We may disclose information where legally required or necessary to establish or defend legal claims. We do not sell your personal information.

Our service providers may process or store information outside Nigeria or your country of residence. Where a transfer is subject to data protection requirements, we use the applicable safeguards, such as contractual protections or a recognised adequate level of protection. You can contact us for information about safeguards relevant to your data.

We retain account details while they are needed to provide your account. Purchase, payment, and support records may need to be retained longer for accounting, legal obligations, disputes, or fraud prevention. Retention depends on the record and those purposes; contact us to request deletion or ask about a particular record. Deleting an account may not require us to erase records we must lawfully keep.

Essential cookies support sign-in and security. Browser storage remembers shopping preferences, your cart and wishlist, and featured product selections. Signed-in shopping lists can also be saved to your account.

Optional analytics run only after you choose “Allow analytics.” You can choose “Essential only” or change your decision using “Privacy choices” in the footer. Withdrawing consent stops future optional visit tracking; it does not make earlier consent-based processing unlawful. Blocking all cookies or clearing browser storage may sign you out or remove locally saved preferences.

Depending on applicable law, you may request access to your information, corrections, deletion, restriction of processing, a portable copy, or object to certain processing. You may withdraw consent where we rely on it. These rights can be subject to legal conditions and exceptions.

Email support@theeplugg.com with your request. We may ask for proportionate information to verify your identity and will respond within the period required by applicable law. Please never send us your password or full payment-card details.

You may raise a complaint with the Nigeria Data Protection Commission or the relevant data protection authority where you live. Information about EU rights is available from the European Commission.

We use access controls, protected passwords, and verification processes to help safeguard your account. No internet service can guarantee absolute security. Please use a unique password and contact us promptly if you suspect unauthorised access.

Our store is intended for adults. We do not knowingly collect children's personal information without appropriate authorisation. A parent or guardian who believes a child has provided information can contact us to request a review and, where appropriate, deletion.

We may update this policy as our services or legal requirements change. The date above identifies the latest version. Where required, we will notify you of material changes or obtain a new choice before using information for a new purpose.