Privacy policy

Twinkle Locs is a loc bead business based in Lagos, Nigeria, and is responsible for the personal information described here. Questions or requests: hello@twinklelocs.com or WhatsApp.

When you order: your name, email, phone number, delivery address, state and (in Lagos) your area, plus what you bought and how much you paid. We use these to process, deliver and support your order, to send your receipt and delivery updates, and for our accounts.

When you pay: payments are handled by Paystack. We never see or store your full card number. Paystack sends us a record of the payment, which can include the card type, the issuing bank, the last four digits and the IP address used, and we keep it to confirm the payment, prevent fraud and handle refunds.

If you start checkout but don't pay: once you reach the review step, we save the details you entered and what was in your bag. We use this only to help you finish that order, for example by messaging you if your payment didn't go through, and delete it after 90 days.

Newsletter: if you join, your first name, email and the page you signed up on. We use these to send you guides, restock news and offers.

Reviews: the name, rating and words you choose to share. Reviews are published on the product page.

Messages: anything you send us on WhatsApp, Instagram or email, so we can reply and help.

Emails we send: our email provider can tell us whether an email was delivered, bounced or opened, so we know your receipt and updates reached you.

• To fulfil your order (a contract with you): order, payment and delivery details.
• Legal obligations: keeping sales records for tax and accounting.
• Legitimate interests: preventing fraud, following up an unfinished checkout, and improving the shop.
• Your consent: the newsletter and published reviews. You can withdraw consent at any time.

We share only what each service needs to do its job for us:

• Paystack to take your payment.
• Delivery riders and couriers: your name, phone number and address, to deliver your order.
• Resend to send our emails.
• Vercel (website hosting) and Neon (our database), which store the website and its data.
• UploadThing, which hosts our product photos.
• WhatsApp (Meta), when you choose to message us there.
• Google: blog posts include a Google button for adding us as a preferred source, which loads a script from Google when you view the post.

Some of these providers store data outside Nigeria, for example in the United States or Europe. We use established providers that protect data to recognised standards. We may also share information if the law requires it.

• Orders and payment records: as long as tax and accounting rules require us to keep sales records.
• Unfinished checkouts: deleted automatically after 90 days, or sooner if you ask us.
• Newsletter: until you unsubscribe. Unsubscribing deletes your details from the list.
• Reviews: while they're published, or until you ask us to remove yours.

Under the Nigeria Data Protection Act 2023 you can ask us to:

• tell you what information we hold about you and give you a copy
• correct anything that's wrong
• delete your information, unless we have to keep it by law (such as sales records)
• stop or limit how we use it, or object to a use
• stop sending you the newsletter, at any time

Email hello@twinklelocs.com or message us on WhatsApp. We'll reply within 30 days. To leave the newsletter, use the Unsubscribe link at the bottom of any newsletter email (or message us). If you're unhappy with how we've handled your information, you can complain to the Nigeria Data Protection Commission.

We don't use advertising or tracking cookies. Your bag is saved in your own browser so it's still there when you come back; clearing your browser data removes it. Our staff admin area uses a login cookie, which shoppers never get.

The site runs over an encrypted (HTTPS) connection, card payments are handled entirely by Paystack, and only our own staff can sign in to see orders. Order pages only show what you need to see your order, never your full contact or payment details.

If we change how we use your information, we'll update this page and the date at the top. See also our returns policy and delivery information.