Your privacy, handled with care

This website is run by Neela Fashion Brand Limited (“Neela”, “we”, “us”), a fashion brand based in Ogbomoso, Oyo State, Nigeria. We are the data controller for the personal data described here and handle it in line with the Nigeria Data Protection Act 2023. For anything about your data, email support@neela.ng.

• Account details: your name, email address, phone number and password (stored only in scrambled, hashed form). If you sign in with Google, we receive your name, email and profile photo from Google. You can also add your birthday (day and month only).
• Orders: the pieces you buy, delivery and billing addresses, phone number, order notes and the amounts paid.
• Measurements: body measurements you give us for made-to-measure pieces or save to your account for future orders.
• Payments: card payments are handled by Paystack. We never see or store your full card details; we receive a payment reference and confirmation. For bank transfers, we keep the proof of payment you upload.
• Messages: what you send us through the contact form, email or WhatsApp.
• Preferences: your wishlist, and whether you want order updates on WhatsApp or our newsletter.
• Technical data: your IP address and device or browser type, used to keep your account signed in securely and to protect the site from abuse.

• To process and deliver your orders, including confirming payment, making pieces to your measurements, arranging delivery and sending order updates. We need this to fulfil our contract with you.
• To run your account and provide customer support.
• To keep the site and your account secure, prevent fraud and spam, and fix problems. This is in our legitimate interest and yours.
• To send marketing such as new collections and offers. News and offers by email are switched on when you create an account, and the box at checkout is ticked unless you untick it. You can turn this off at any time with the unsubscribe link in any email, in your account settings, or by contacting us. WhatsApp news is only sent if you switch it on.
• To meet legal obligations, such as keeping tax and accounting records.

We never sell your personal data. We share only what’s needed with trusted providers who help us run the store:

• Paystack, to process card and online payments.
• Delivery couriers, who receive your name, address and phone number.
• Email delivery services, to send your order and account emails.
• WhatsApp (Meta), to send order updates if you chose them, and to notify our team of new orders.
• Google, if you choose to sign in with Google.
• Secure hosting and storage providers, which run our website and safely store our records and images (including payment proofs).
• Security services, which protect our forms and sign-in from bots and abuse.

We may also share information when required by law, or to protect our rights, customers or business.

Some of these providers store or process data outside Nigeria, for example in the European Union or the United States. When this happens, we rely on providers that protect data to recognised standards and on the safeguards allowed by the Nigeria Data Protection Act.

We keep this to what the store needs to work. We don’t use advertising or tracking cookies.

• Sign-in cookie: keeps you signed in to your account, for up to 7 days.
• Stored in your browser: your cart, wishlist, recently viewed pieces and light or dark theme, so they’re there when you come back. This stays on your device.
• Analytics: we count page visits with a privacy-friendly analytics tool that doesn’t use cookies or identify you personally.
• Security checks: our bot protection may set a cookie to tell people and bots apart on our forms.
• Referral link cookie: if you open a friend’s referral link, a cookie remembers their code for up to 30 days so they can be credited if you sign up or order.

If you join a NEELA referral challenge, or sign up or order through someone’s referral link, we also use:

• Your participation: your referral code, points, the version of the challenge terms you accepted, and your separate choice about marketing emails.
• Who referred whom: which code a new customer came through, their account and order status, so points can be awarded and reversed fairly.
• Fraud checks: scrambled (one-way hashed) fingerprints of the connection and device used, compared only to spot self-referrals and duplicate accounts. We don’t store the underlying IP address or device details for this, and a shared connection alone is never treated as proof.
• Store credit: prizes and credit on your account, and how it was spent.

We never show the people you referred your details, or theirs to you: participants see only “Referral 1, 2, 3…”, and the public leaderboard shows a first name and last initial. This is based on our agreement with you (the challenge terms) and our legitimate interest in preventing fraud. Referral records are kept until the challenge’s prizes are settled and any complaints are resolved, then deleted or anonymised.

• Account details are kept until you delete your account.
• Order records are kept for as long as needed for delivery, returns and our legal and accounting obligations. Personal details on completed orders are removed once they’re no longer needed, while the non-personal details (such as pieces and amounts) are kept for our records.
• Contact form messages are delivered to our inbox and are not stored on the website.
• Sign-in session records are deleted automatically when they expire.

Under the Nigeria Data Protection Act, you have the right to:

• Access your data: download a copy any time from My Account → Settings → “Download my data”.
• Correct it: update your details in your account, or ask us to.
• Delete it: delete your account from your account settings. We’ll remove your personal details, keeping only what the law requires.
• Withdraw consent to marketing or WhatsApp updates at any time.
• Object to or restrict certain uses of your data, and ask us to move it to another provider.

To make a request, email support@neela.ng. We’ll respond within 30 days. If you’re not happy with our response, you can complain to the Nigeria Data Protection Commission (NDPC).

Our site uses encrypted connections (HTTPS). Passwords are hashed, staff access is limited by role and protected with two-step verification, and sign-in sessions can be revoked at any time. No system is perfectly secure, but if a breach affecting your data ever happens, we’ll notify you and the authorities as the law requires.

Our store is intended for adults. We don’t knowingly collect personal data from children under 13. If you believe a child has given us their data, contact us and we’ll delete it.

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated. If we make significant changes, we’ll let account holders know by email.