Privacy Policy

Account information: When you create an account, we collect your name, email address, and password (stored securely as a hash). If you sign in with Google, we receive your name, email, and profile picture from Google.

Order information: When you place an order, we collect your shipping address, phone number, and payment transaction reference. We do not store your card details — payments are processed securely by Paystack.

Usage information: We collect information about how you use our website, including pages visited, products viewed, and actions taken (such as adding to cart or placing an order).

Communications: If you contact us or subscribe to our newsletter, we collect your email address and the content of your message.

We use your information to:

• Process and fulfil your orders, and send order confirmation and shipping notifications
• Manage your account and provide customer support
• Send transactional emails (order updates, password resets) via Resend
• Send promotional newsletters if you have opted in — you can unsubscribe at any time
• Improve our website and product offerings based on usage patterns
• Detect and prevent fraud or unauthorised access
• Comply with legal obligations

We do not sell your personal data. We share your information only with trusted service providers necessary to operate our business:

• Paystack — payment processing (your card data goes directly to Paystack, never to us)
• Resend — transactional email delivery
• Supabase — secure database hosting for your account and order data
• Cloudinary — image hosting for product photos
• Google — if you choose to sign in with Google
• Sentry — error monitoring to help us fix bugs

All service providers are contractually required to handle your data securely and only for the purposes we specify. We may also disclose your information where required by Nigerian law or a court order.

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls. Our database is hosted on Supabase, which provides enterprise-grade security infrastructure.

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at support@dachhomeandbody.com.

We use essential cookies to keep you signed in and maintain your session. We use browser local storage to remember your shopping cart between visits. We do not use third-party advertising or tracking cookies.

You can disable cookies in your browser settings, but this may prevent some features of the site from working correctly, including staying signed in.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data via your account profile page
• Request deletion of your account and associated data
• Opt out of marketing emails at any time using the unsubscribe link
• Request a copy of your data in a portable format

To exercise any of these rights, email us at support@dachhomeandbody.com. We will respond within 30 days.

We retain your account and order data for as long as your account is active or as needed to provide services. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes (e.g., transaction records).

Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. We encourage you to review this page periodically.

If you have questions about this Privacy Policy or how we handle your data, please contact us: