PRIVACY POLICY

WHO WE ARE

Sephora Systems Limited ("Sephora Systems", "we", "us", "our") is the data controller responsible for your personal information. We are based in Abuja, Nigeria. If you have any questions about this policy or how we handle your data, contact us at hello@sephorasystems.com.

INFORMATION WE COLLECT

We collect information you give us directly and information gathered automatically when you use our website:

• Contact and enquiry details — your name, email address, phone number, and the content of messages you send through our contact form, configurator, WhatsApp, or by email.
• Order and payment details — delivery address, order history, and the information needed to process payments. Card and bank details are handled by our payment providers; we do not store full card numbers.
• Programme information — details you provide when you apply to Sephora Reserve, Sephora Circle, Sephora Marketers, or Enterprise Solutions.
• Technical and usage data — IP address, browser and device type, pages visited, and referring links, collected through cookies and similar technologies.

HOW WE USE YOUR INFORMATION

We use your personal information to:

• Respond to your enquiries and prepare quotes and configurations.
• Process, build, deliver, and support your orders.
• Provide warranty service and customer support.
• Operate our programmes (Reserve, Circle, Marketers, Enterprise) where you have signed up.
• Improve our website, products, and services.
• Send you service updates and, where you have consented, marketing communications about our products.
• Comply with our legal, tax, and regulatory obligations, and prevent fraud.

LEGAL BASIS FOR PROCESSING

Under the Nigeria Data Protection Act, 2023, we process your personal data on the basis of your consent, the performance of a contract with you (such as fulfilling an order), our legitimate business interests (such as improving our services and preventing fraud), and compliance with legal obligations. Where we rely on consent — for example for marketing — you may withdraw it at any time.

INFORMATION SHARING

We do not sell, trade, or rent your personal information. We share it only where necessary:

• With trusted service providers who help us operate — such as delivery partners, payment processors, hosting and analytics providers — who are bound to keep it confidential and use it only for the services they provide to us.
• With component suppliers or manufacturers where needed to process a warranty claim.
• Where required by law, regulation, or a valid request from a competent authority.
• In connection with a business transfer, such as a merger or acquisition, subject to this policy.

COOKIES AND TRACKING

We use cookies and similar technologies to run our website, remember your preferences, and understand how the site is used. You can control cookies through your browser settings. For full details, see our Cookie Policy.

DATA RETENTION

We keep your personal information only for as long as necessary to fulfil the purposes described in this policy — including to provide warranty and support, and to meet legal, accounting, or reporting requirements. When it is no longer needed, we securely delete or anonymise it.

DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. While no method of transmission or storage is completely secure, we work to safeguard your data and to limit access to those who need it.

YOUR RIGHTS

Under the Nigeria Data Protection Act, 2023, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data where there is no lawful reason for us to keep it.
• Object to or restrict certain processing, including direct marketing.
• Withdraw consent at any time where processing is based on consent.
• Request a copy of your data in a portable format.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

CHILDREN'S PRIVACY

Our website and services are intended for adults. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. Any changes will be posted on this page with a revised “Last updated” date.

CONTACT US

To exercise any of your rights or ask a question about this policy, email us at hello@sephorasystems.com or reach us through our contact page.