Privacy Policy

1. Who we are

Ché Orika is a consumer fashion brand operating an online store and a boutique.

• Boutique: Danjuma Ejiaga Plaza, 3rd Avenue, Gwarimpa, Abuja, Nigeria
• Privacy contact: privacy@cheorika.com (or hello@cheorika.com)

For the purposes of the NDPR, Ché Orika is the data controller responsible for your personal data.

2. What we collect

Account information. When you create an account, we collect your name, email address, and password credentials. Accounts and sign-in run on our own systems; your password is stored only in securely hashed form. If you sign in with a third-party login (such as Google), we receive basic profile details from that provider.

Order and delivery information. When you order, we collect your name, delivery address, phone number, email address, the items you ordered, and whether you chose delivery or boutique pickup. We keep your order history and any store credit balance on your account.

Payment information. Payments are processed by Paystack in Nigerian Naira. We never see or store your full card number or card security details. We receive a payment confirmation, a payment reference, and the limited transaction detail needed to fulfil your order and process any refund due to you.

Communications. When you contact us, we keep a record of the correspondence so we can respond and improve our service.

Usage and device data. When you browse the site, we collect technical information such as device type, browser, pages viewed, actions taken, approximate location from your IP address, and referral source. We collect this through cookies and similar technologies using Google Analytics (via Google Tag Manager) and PostHog. See section 7.

Images and media. Product images and other media on the site are stored and delivered through Cloudinary. If you send us an image (for example with a defect claim), it may be processed and stored through Cloudinary.

3. How we use your data

• To create and manage your account, including any store credit held on it.
• To process, fulfil, and deliver your orders, including arranging delivery or boutique pickup.
• To process payments and refunds and to prevent fraud.
• To send transactional messages (order confirmations, shipping updates, refund confirmations) from orders@cheorika.com through our email provider, Resend.
• To respond to your enquiries and provide customer support.
• To understand how the site is used so we can improve it.
• To send you marketing email, only if you have opted in (see section 4).
• To comply with our legal and regulatory obligations in Nigeria.

Our lawful bases under the NDPR are: your consent (analytics cookies and marketing email), performance of a contract with you (fulfilling your orders), our legitimate interests (operating, securing, and improving the site), and compliance with legal obligations.

4. Marketing email

We only send marketing email if you have chosen to receive it. Opting in is never required to shop with us. You can opt out at any time using the unsubscribe link in any marketing email or from your account settings, and we'll stop straight away. Transactional emails about your orders are sent regardless, because they're part of fulfilling your purchase.

5. Who we share data with

We do not sell your personal data. We share it only with the providers who help us run the store, and only to the extent each needs:

We may also share personal data with regulators, law enforcement, or professional advisers where legally required or permitted.

Some providers process or store data outside Nigeria. Where that happens, we take reasonable steps to ensure your data is protected to a standard consistent with the NDPR.

6. How long we keep it

• Account data: for as long as your account is active. You may ask us to delete it.
• Order and transaction records: for as long as Nigerian tax and accounting law requires us to keep them.
• Analytics data: for a limited rolling period, after which it is deleted or aggregated.

When we no longer need your data, we delete or anonymise it.

7. Cookies

We use cookies to make the site work (sign-in, cart, checkout) and, with your consent, to understand how the site is used (Google Analytics and PostHog). Essential cookies can't be switched off; blocking them may stop parts of the site working. You can manage cookies in your browser settings.

8. Your rights

Under the Nigeria Data Protection Act and the NDPR you can:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Request deletion where there is no lawful reason for us to keep it.
• Object to or restrict certain processing.
• Withdraw consent at any time where processing is based on consent.
• Receive a copy of certain data in a usable format.
• Complain to the Nigeria Data Protection Commission (NDPC) if you believe we've mishandled your data.

Email privacy@cheorika.com to exercise any of these. We may need to verify your identity first, and we'll respond within the time the NDPR requires.

9. Security

We use reasonable technical and organisational measures to protect your data against loss, misuse, and unauthorised access. Payments run entirely on secure third-party payment infrastructure, and access to personal data is limited to people who need it for their work. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children

The site is not directed at children under 18 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we'll remove it.

11. Changes

We may update this Policy from time to time. The effective date at the top will change when we do, and we'll take reasonable steps to notify you of significant changes.

12. Contact

• Email: privacy@cheorika.com or hello@cheorika.com
• Boutique: Danjuma Ejiaga Plaza, 3rd Avenue, Gwarimpa, Abuja, Nigeria