Privacy Policy

Ennyways ("Ennyways," "we," "us," or "our") operates ennyways.shop and the services connected to it (together, the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it. It applies to every visitor, customer, and account holder who uses the Service.

By using the Service, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Service.

1. Who we are

Ennyways is a hair extensions, braids, and wig rental business based at No 39a Ekeninwor Road, Orazi, Port Harcourt, Rivers State, Nigeria. For any question about this Policy or your personal data, contact us at hello@ennyways.shop.

2. Information we collect

We collect only what we need to run the Service and fulfil your orders.

2.1 Information you give us directly

• Account information: if you create an account, we collect your email address and password (stored securely, hashed, never in plain text) and, optionally, your full name and phone number.
• Order and checkout information: name, phone number, delivery address, and email address, whether or not you have an account.
• Rental verification information: if you rent a wig, we collect your full name, phone number, a valid identification number (such as an NIN), your social media handle, and a photograph for identity verification. This is described further in Section 5.
• Communications: anything you send us directly, such as WhatsApp messages, emails, or comments left through the Service.
• Newsletter subscription: your email address, if you choose to subscribe.

2.2 Information collected automatically

• Cart contents, saved for your convenience using your browser’s local storage, so your cart survives a page refresh.
• Basic technical information standard to any website visit, such as your browser type and general usage of the Service, to the extent our hosting and analytics providers collect it.

2.3 Information from third parties

• If you sign in with Google, we receive your name, email address, and profile photo from Google, as permitted by your Google account settings.
• Payment confirmation: our payment processor, Bachs, confirms to us that a payment was completed and for how much. We do not receive or store your card or bank details; Bachs handles that directly.

3. How we use your information

We use your information to:

• Create and manage your account.
• Process, fulfil, and deliver your orders.
• Verify your identity for wig rentals and manage the rental process, including extensions and returns.
• Communicate with you about your orders, including confirmations, status updates, and delivery information.
• Respond to questions and provide customer support.
• Send you marketing communications, such as our newsletter, if you have opted in. You may unsubscribe at any time.
• Improve and maintain the Service, and keep it secure.
• Comply with legal obligations, including tax and consumer protection law.

We do not sell your personal data. We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you.

4. Legal basis for processing

Where the Nigeria Data Protection Act 2023 and its subsidiary regulations apply, we process your personal data on the following bases: performance of a contract with you (to fulfil an order or rental), your consent (for example, marketing emails), our legitimate interests (such as fraud prevention and improving the Service), and compliance with legal obligations.

5. Rental identity verification

Wig rentals require identity verification. We collect your full name, phone number, identification number, social media handle, and a photograph before a rental is approved. This information is used solely to confirm your identity and reduce the risk of loss or fraud connected to rented items. It is stored securely and is only accessible to authorised Ennyways staff who need it to review or manage rental requests. We do not share this information with any third party except where required by law.

6. Who we share information with

We share personal data only as needed to operate the Service:

• Supabase, our database and authentication provider, which stores your account and order data securely.
• Bachs, our payment processor, which handles payment collection. We never see or store your full card or bank account details.
• Brevo, our email service provider, which sends transactional emails (such as order confirmations) and, where you have opted in, marketing emails.
• Delivery partners, to the extent necessary to deliver your order to you.
• Law enforcement or regulators, only where required by law, court order, or to protect the rights, property, or safety of Ennyways, our customers, or the public.

We do not sell, rent, or trade your personal data to advertisers or data brokers.

7. Data retention

We keep your personal data for as long as your account is active, or as long as needed to fulfil the purposes described in this Policy, including any legal, accounting, or reporting requirements. Rental verification data is retained for the duration of the rental relationship and a reasonable period afterward to resolve any disputes, after which it is deleted or anonymised. You may ask us to delete your account and associated data at any time, subject to Section 8.

8. Your rights

Depending on applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, subject to our legal obligation to retain certain records (for example, transaction records for tax purposes).
• Withdraw consent to marketing communications at any time.
• Object to or restrict certain processing of your data.

To exercise any of these rights, contact us at hello@ennyways.shop. We will respond within a reasonable time and in accordance with applicable law.

9. Data security

We take reasonable technical and organisational measures to protect your personal data, including encrypted storage, access controls limiting who can view sensitive information (such as rental verification photos, which are kept in a private, non-public storage area), and secure password handling. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children’s privacy

The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take steps to delete it.

11. International data transfers

Our service providers may process data outside Nigeria. Where this occurs, we rely on providers that maintain appropriate safeguards for your data consistent with applicable data protection law.

12. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

13. Contact us

If you have questions about this Privacy Policy or how we handle your personal data, contact us at:

Ennyways
No 39a Ekeninwor Road, Orazi, Port Harcourt, Rivers State, Nigeria
hello@ennyways.shop