Privacy Policy

Last updated: June 2026

1. Who We Are

Creative Stores operates this e-commerce platform. Questions: [email protected].

2. Data We Collect

• Account data: name, email address, hashed password.
• Order data: delivery address, items purchased, payment reference (no card numbers are stored).
• Usage data: search queries (associated with your account for personalisation).
• Session cookies: a signed JWT stored in browser memory for authentication.

3. Legal Basis (GDPR)

We process your data on the basis of contract performance (Art. 6(1)(b) GDPR) and legitimate interests. Where consent is required (cookies), we ask for it explicitly.

4. How We Use Your Data

To fulfil orders, send order status emails, personalise product recommendations, and keep the platform secure.

5. Data Retention

Order records are retained for the period required by applicable tax law (typically 7 years) and then anonymised. Account data is deleted upon request (see below).

6. Your Rights

• Access & portability: download all your data via Settings → Download My Data (GDPR Art. 20).
• Erasure: delete your account via Settings → Delete Account (GDPR Art. 17). Order line items are anonymised rather than deleted to meet accounting obligations.
• Rectification: update your profile at any time in Settings.
• Complaints: you have the right to lodge a complaint with your national data protection authority.

7. Cookies

We use a single functional cookie (authentication JWT). We do not use third-party tracking or advertising cookies without your consent.

8. Payments

All payments are processed by Paystack. We never store raw card numbers, CVV codes, or full card details on our servers — we are PCI-DSS compliant by delegation.

9. Contact

Email [email protected] for any privacy request. We respond within 30 days.