Privacy Policy
Last updated: May 2025
1. Introduction
TRMLUXURY ONPOINT (“MaisonAmora”, “we”, “us”, or “our”) operates the MaisonAmora e-commerce platform at maisonamora.com. We are committed to protecting your personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA), its implementing regulations, and other applicable Nigerian laws.
This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights as a data subject.
2. Data Controller
The data controller responsible for your personal data is:
TRMLUXURY ONPOINTPort Harcourt, Rivers State, Nigeria
Email: privacy@maisonamora.ng
3. Data We Collect
We collect and process the following categories of personal data:
- Account data: First name, last name, email address, phone number, and password (stored as a cryptographic hash).
- Order data: Delivery address, order items, payment reference numbers, and order history.
- Business data (B2B customers): Business name, business registration number, and business address.
- Payment data: We do not store your card details. Payment processing is handled by Paystack, a PCI DSS-compliant payment provider. We only retain payment reference numbers and transaction status.
- Usage data: IP address, browser type, pages visited, and session duration, collected via cookies and server logs.
- Communication data: Messages you send via our live chat (Tawk.to) or email support.
4. Legal Basis for Processing
We process your personal data on the following legal bases under the NDPA:
- Contract performance: To process and fulfil your orders, manage your account, and provide customer support.
- Consent: For marketing communications and non-essential cookies. You may withdraw consent at any time.
- Legitimate interests: To improve our platform, detect fraud, and maintain security — balanced against your privacy rights.
- Legal obligation: To comply with Nigerian tax and commercial laws, including record-keeping requirements.
5. How We Use Your Data
- Process, fulfil, and track your orders
- Create and maintain your account
- Send transactional emails (order confirmations, shipping updates)
- Respond to customer service enquiries
- Prevent and detect fraudulent activity
- Improve our website, products, and services
- Send promotional communications (with your consent)
- Comply with legal and regulatory obligations
6. Data Sharing
We do not sell your personal data. We share data only with trusted service providers who process it on our behalf:
- Paystack: Payment processing (paystack.com)
- Cloudinary: Image hosting and optimisation
- Tawk.to: Live chat support
- Supplier partners: Your delivery address is shared with dropship suppliers to fulfil orders
All service providers are contractually bound to process your data only as instructed and to maintain appropriate security measures.
We may also disclose your data where required by Nigerian law, a court order, or a regulatory authority.
7. Data Retention
- Account data: Retained for the duration of your account plus 2 years after closure
- Order records: Retained for 7 years to comply with Nigerian tax laws
- Usage/analytics data: Retained for 12 months
- Marketing consent: Retained until you withdraw consent
8. Your Rights Under the NDPA
Under the Nigeria Data Protection Act 2023, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data where there is no legal basis to retain it
- Data portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Withdraw any consent you have given at any time
- Lodge a complaint: File a complaint with the Nigeria Data Protection Commission (NDPC)
To exercise any of these rights, email us at privacy@maisonamora.ng. We will respond within 30 days.
9. Cookies
We use cookies and similar technologies on our website. Please see our Cookie Policy for details.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include TLS encryption, hashed passwords, and access controls. However, no system is completely secure and we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or a prominent notice on the website. Continued use of our services after the effective date constitutes acceptance of the updated policy.
12. Contact
For any privacy-related queries or to exercise your rights, contact us at privacy@maisonamora.ng.