Privacy Policy

Effective Date: 1 January 2025   |   Last Updated: February 2025

 

At Straps & Strides, we are committed to protecting the privacy and personal data of our valued clients. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our boutique, use our website, or engage with our services. It applies to all personal data we hold about you and is governed by the Nigeria Data Protection Act 2023 (NDPA) and its implementing regulations.

Please read this policy carefully. By engaging with Straps & Strides, you acknowledge and agree to the practices described herein. If you have any concerns, please contact our Data Protection Officer using the details provided at the end of this document.

 

1. WHO WE ARE

Straps & Strides is a luxury goods retailer incorporated and operating in Lagos, Nigeria. We curate and retail a distinguished selection of premium fashion, accessories, jewellery, watches, and lifestyle products for discerning clients.

 

Straps & Strides

Dolphin Estate, 99A Ilupeju Street, Ikoyi Lagos, Nigeria

Email: hello@strapsandstrides.com

Phone: +234 (0) 708 893 0782

Hours: Monday – Saturday, 10:00 AM – 7:00 PM

 

2. INFORMATION WE COLLECT

We collect the following categories of personal data:

 

2.1 Information You Provide Directly

  • Full name, title, and date of birth
  • Contact details: email address, telephone number, and postal/delivery address
  • Billing information and payment card details (processed securely via certified payment processors)
  • Purchase history, preferences, and wish lists
  • Correspondence and communications with our team
  • Information provided when registering for loyalty programmes, events, or bespoke services
  • Identity documents where required for high-value transactions (e.g., for Know Your Customer (KYC) compliance)

 

2.2 Information Collected Automatically

  • IP address, browser type, device information, and operating system
  • Website usage data, pages visited, and time spent on our site
  • Cookies and similar tracking technologies (see Section 8)
  • CCTV footage collected at our physical boutique for security purposes

 

2.3 Information from Third Parties

  • Data from social media platforms when you interact with our pages or advertisements
  • Information from our trusted business partners and referral sources
  • Publicly available information for due diligence on high-value transactions

 

3. HOW WE USE YOUR INFORMATION

We process your personal data on the following legal bases and for the following purposes:

 

3.1 Performance of a Contract

  • Processing your orders, payments, and delivering purchased goods
  • Managing returns, exchanges, and after-sales services
  • Communicating order status and delivery updates

 

3.2 Legitimate Interests

  • Providing personalised luxury service and client relationship management
  • Fraud prevention, security monitoring, and protecting our assets
  • Improving our products, services, and client experience
  • Internal record keeping, analytics, and business intelligence

 

3.3 Compliance with Legal Obligations

  • Meeting our obligations under Nigerian law, including the NDPA 2023, FCCPA, and applicable tax laws
  • Cooperating with regulatory bodies, law enforcement, and anti-money laundering (AML) requirements
  • Conducting KYC and Enhanced Due Diligence for high-value purchases as required

 

3.4 Consent

  • Sending marketing communications, lookbooks, exclusive invitations, and promotional offers (where you have opted in)
  • Sharing your data with carefully selected luxury partners whose offerings may interest you (where you have explicitly consented)

 

You may withdraw consent at any time by contacting us or using the unsubscribe option in our communications.

 

4. SHARING YOUR INFORMATION

Straps & Strides does not sell your personal data. We share your data only in the following limited circumstances:

 

  • Service providers: Delivery companies, payment processors, IT support, and marketing agencies acting on our behalf under data processing agreements
  • Professional advisors: Lawyers, auditors, and insurers where necessary
  • Business transfers: In the event of a merger, acquisition, or sale of assets
  • Legal requirements: Regulatory bodies, law enforcement agencies, or courts where required or permitted by law
  • With your consent: To partner brands or affiliates where you have explicitly agreed

 

All third parties are required to respect your data and handle it in accordance with applicable data protection laws.

 

5. INTERNATIONAL DATA TRANSFERS

As a luxury retailer working with international brands and suppliers, some of your personal data may be transferred outside Nigeria. Where such transfers occur, we ensure adequate safeguards are in place in line with the NDPA 2023, including the use of standard contractual clauses or transfers only to countries with adequate data protection frameworks as recognised by the Nigeria Data Protection Commission (NDPC).

 

6. DATA RETENTION

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, or reporting requirements.

 

  • Transaction records: 7 years (in line with Nigerian tax and commercial law)
  • Client relationship data: Duration of our relationship plus 5 years
  • Marketing preferences: Until you withdraw consent or request deletion
  • CCTV footage: Up to 30 days unless required for an ongoing investigation
  • KYC documentation: As required by applicable AML regulations

 

7. YOUR RIGHTS

Under the Nigeria Data Protection Act 2023, you have the following rights regarding your personal data:

 

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data (subject to legal retention obligations)
  • Right to Restriction: Request that we limit how we process your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or direct marketing
  • Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing
  • Right to Lodge a Complaint: File a complaint with the Nigeria Data Protection Commission (NDPC)

 

To exercise any of these rights, please contact our Data Protection Officer at privacy@strapsandstrides.com.ng. We will respond within 30 days as required by law.

 

8. COOKIES & TRACKING TECHNOLOGIES

Our website uses cookies and similar technologies to enhance your browsing experience. We use:

 

  • Essential cookies: Required for the website to function properly
  • Analytics cookies: To understand how visitors use our site (e.g., Google Analytics)
  • Preference cookies: To remember your settings and preferences
  • Marketing cookies: To deliver relevant advertisements (only with your consent)

 

You may manage your cookie preferences through our Cookie Preference Centre on our website, or through your browser settings. Please note that disabling certain cookies may affect the functionality of our site.

 

9. SECURITY

Straps & Strides implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

 

  • SSL/TLS encryption for all data transmitted via our website
  • Secure, access-controlled storage for physical and electronic records
  • Staff training on data privacy and confidentiality
  • Regular security reviews and vulnerability assessments
  • Strict access controls on a need-to-know basis

 

While we take all reasonable precautions, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the NDPC as required by law.

 

10. CHILDREN’S PRIVACY

Our services and products are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18 without verifiable parental or guardian consent. If you believe a minor has provided us with their information, please contact us immediately and we will take steps to delete such data promptly.

 

11. THIRD-PARTY LINKS

Our website may contain links to third-party websites, social media platforms, or brand pages. This Privacy Policy applies only to Straps & Strides. We are not responsible for the privacy practices of third-party sites, and we encourage you to review their respective privacy policies before providing any personal data.

 

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or regulatory guidance. When we make material changes, we will notify you by email or by posting a prominent notice on our website. The revised policy will be effective from the date stated at the top of this document.

We encourage you to review this policy periodically to stay informed about how we are protecting your information.

 

13. CONTACT US & DATA PROTECTION OFFICER

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

 

Straps & Strides

Dolphin Estate, 99A Ilupeju Street, Ikoyi Lagos, Nigeria

Email: hello@strapsandstrides.com

Phone: +234 (0) 708 893 0782

Hours: Monday – Saturday, 10:00 AM – 7:00 PM

 

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC):

 

Nigeria Data Protection Commission (NDPC)

Website: www.ndpc.gov.ng

Email: info@ndpc.gov.ng