Privacy Policy

Effective Date: August 12, 2025

1. Introduction

Botherless Store (“we”, “us”, “our”) values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website (https://botherless.co) and related services.

2. Controller & Contact Information

Data Controller: Botherless Store
Contact: support@botherless.co
Address: Lagos, Nigeria (replace with your registered business address)

3. Scope & Purpose

This policy applies to personal data collected through our website, during purchases, account creation, marketing, customer support, and other interactions with us. We process personal data to provide and improve services, fulfill orders, comply with legal obligations, and, where permitted, market to you.

4. Categories of Personal Data We Collect

We collect the following categories of personal data depending on your interaction with us:

Identity & account data: Name, username, date of birth (if provided); account credentials.
Contact data: Email address, billing and shipping addresses, phone number.
Transaction data: Order details, products purchased, price, discounts.
Payment data: Payment method details (card tokens) — note: we do not store full card details; payment is processed by secure third-party gateways.
Technical data: IP address, browser and device information, log files.
Profile & preferences: Size preferences, wishlists, saved addresses.
Communications: Correspondence with customer service, reviews you write.
Marketing & analytics: Cookie and tracking identifiers, purchase/visit history.

5. How We Collect Personal Data

Directly from you (account registration, checkout, contact forms).
Automatically via cookies and similar technologies.
From third parties (payment processors, shipping partners, analytics providers).

6. Legal Bases For Processing

Where required, we rely on:

Contractual necessity — processing to fulfill orders & contracts.
Consent — for marketing communications and some cookies.
Legitimate interests — fraud prevention, analytics, improving services (balanced against your rights).
Legal obligation — retention of records as required by law.

7. Purposes of Processing & Use Cases

Order fulfillment & delivery (payments, shipping, returns).
Customer support and post-sale communications.
Fraud prevention, security & verification.
Marketing & promotions (only if you opt-in or where allowed).
Personalization of the shopping experience.
Analytics & site performance.

8. Cookies & Tracking

We use cookies, local storage and pixels (session, persistent, marketing and analytics cookies).
You may manage preferences via your browser or our cookie banner. Disabling some cookies may reduce functionality.

9. Third-party Sharing & Processors

We share data with trusted third parties to perform services for us, including:

Payment processors (e.g., Paystack, Flutterwave, banks — replace with your providers).
Delivery & logistics partners.
Analytics providers (Google Analytics, etc.).
Marketing platforms (email providers, ads partners) — only with consent where required.
Legal & regulatory authorities when required by law.

All processors are contractually bound to protect data and only process it as instructed.

10. International Transfers

If personal data is transferred outside Nigeria, we use appropriate safeguards (standard contractual clauses, approved processors). Contact us for details.

11. Data Retention

We retain personal data for as long as necessary to: fulfill the purpose for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Typical retention: account data while your account exists; transactional records for minimum statutory periods (e.g., tax & accounting).

12. Your Rights (Data Subject Rights)

You have the right to:

Access and obtain a copy of your personal data.
Rectify inaccurate or incomplete data.
Request erasure (subject to legal/contractual obligations).
Restrict or object to certain processing (e.g., marketing).
Request data portability (where applicable).
Withdraw consent at any time (for processes based on consent).
Lodge a complaint with the Nigeria Data Protection Commission (NDPC) or other supervisory authority.

To exercise rights or for data queries, email support@botherless.co

13. Security

We implement technical, administrative and physical safeguards (encryption in transit, access controls). While we strive to protect data, absolute security cannot be guaranteed.

14. Children

Our services are not intended for children under 13. We do not knowingly collect personal data from children. If we learn we have collected data from a child, we will take steps to delete it.