Privacy Policy
Effective 16 September 2026 · How Odogwu Aura handles your data
1. Who we are
Odogwu Aura operates this online retail storefront. This policy explains what we collect, why we collect it, and how we protect it when you browse, create an account, or place an order.
2. Information we collect
We collect what we need to run a secure storefront and fulfil orders:
- Account data — Full name, email, phone, and a hashed login password. Optional two-factor authentication secrets if you enable 2FA. An internal account identifier is generated for login sessions; it is not a public handle you choose.
- Order & delivery data — Doorstep address (street, landmark, city, state), delivery notes, WhatsApp number, line items, delivery PIN, payment references, and hub selection when you choose pickup.
- Saved preferences — Default doorstep address and wishlist items when you use those features.
- Store credit & vouchers — Balances and redemption history tied to your account when those features are enabled.
- Device & security telemetry — IP address, browser user-agent, and security-related request metadata (for fraud prevention and rate limiting).
- Support messages — Content you send through contact forms, support tickets, or WhatsApp when you contact us.
3. How we use your information
- Processing, packing, and delivering orders across Nigeria.
- Confirming payments, sending transactional email, and showing your delivery PIN on Track Order when the order is out for delivery or ready for pickup.
- Preventing fraud, account takeovers, and abuse of checkout or returns.
- Prefilling checkout from a saved address or last doorstep order when you are signed in.
- Responding to support requests and improving product availability (for example alerts you request).
4. Payments
Card and bank payment details are handled by our payment partner (Paystack). We store payment references, amounts, and status — not full card numbers. Desk bank transfers use published account details; we verify payment before releasing fulfilment.
5. Cookies and local storage
We use cookies and similar storage for session sign-in, cart contents, security (for example CSRF / bot checks when enabled), and basic preference such as theme. You can clear cookies in your browser; doing so may sign you out or empty a guest cart.
6. Security
- Passwords — Stored with one-way cryptographic hashing (PBKDF2). They cannot be decrypted back to the original value.
- In transit — Where HTTPS is enabled, traffic between your browser and our servers uses TLS.
- Access — Staff access to customer data is limited to operations that need it (orders, support, fraud review).
7. Sharing
We do not sell, rent, or trade your personal information. Data is shared only with payment, logistics, email, and messaging partners needed to complete your order, notify you, or protect the service — and when required by law.
8. Retention and your choices
We keep order and account records as long as needed for fulfilment, accounting, dispute handling, and legal obligations. You may update your profile, delivery address, password, and 2FA from your account. You may request account closure or a copy of your data by contacting us; we may retain limited records required by law or to prevent fraud.
Under Nigeria’s data-protection rules you may also ask us to correct inaccurate personal data we hold about you.
9. Contact
Privacy questions: [email protected]. See also our Terms and Conditions and Contact page.