Privacy Policy

1 Information We Collect

When you use our website or place an order, we may collect:

• Identity data: name, email address, phone number
• Delivery data: shipping address, state, city
• Transaction data: order details, payment references (we do not store card details — Paystack handles this securely)
• Technical data: browser type, device type, IP address, pages visited (via cookies)
• Communications: enquiries sent via our contact form, email, or WhatsApp

2 How We Use Your Information

• To process and fulfil your orders
• To send order confirmation and delivery updates
• To respond to your enquiries or complaints
• To improve our website and product offerings
• To send promotional emails (only if you opt in — you can unsubscribe at any time)
• To comply with Nigerian legal and tax requirements

3 Payment Security

All payments are processed by Paystack, a PCI-DSS-compliant payment gateway. Mariesplush does not store, process, or have access to your card or banking details. Please review Paystack's privacy policy for details on how they protect your financial data.

4 Sharing of Information

We only share your personal data with trusted third parties as necessary to fulfil your order:

• Logistics providers (delivery companies) — to deliver your order
• Paystack — to process payments
• Email service providers — to send order confirmations

We never sell, rent, or trade your personal data with marketers or unrelated third parties.

5 Cookies

Our website uses cookies to:

• Keep items in your cart across sessions
• Remember your preferences
• Analyse website traffic (via analytics tools)

You can disable cookies in your browser settings, but some features of the site may not function correctly as a result.

6 Data Retention

We retain your order and personal data for up to 7 years as required by Nigerian financial and tax law. After this period, your data is securely deleted. You may request deletion of your account and associated data at any time (see Your Rights below).

7 Your Rights

Under applicable Nigerian data protection laws (NDPR), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and personal data (subject to legal retention obligations)
• Withdraw consent for marketing communications at any time
• Complain to the Nigeria Data Protection Bureau (NDPB)

To exercise any of these rights, contact us using the details below.

8 Children's Privacy

Our services are not directed at children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9 Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect changes. We encourage you to review this page periodically.