Privacy Policy

1. Who we are

MISS ABAYA is a curated luxury abaya discovery and private-client platform operated from Nigeria. For the purposes of this policy, MISS ABAYA is the data controller for personal data processed through the platform. Registered company details will be added once confirmed.

We aim to process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and related guidance from the Nigeria Data Protection Commission, and, where they apply to you, other privacy laws such as the EU and UK General Data Protection Regulation.

2. Data we collect

Account data: name, email, country, optional phone number, account type, fashion interests and marketing preference.

Merchant data: business name, description, location, business type, catalogue content, application answers and verification documents you choose to provide.

Enquiry data: messages, requests for quotation, quotations, bespoke briefs and contact-form submissions.

Technical data: data needed to keep you signed in and secure the service. Product analytics are anonymous counts that do not store names, email addresses, IP addresses or search text.

3. How and why we use data

To provide accounts and the platform (performance of a contract); to review Merchant applications and keep the marketplace safe (legitimate interests and legal obligations); to respond to enquiries; to send marketing only where you have consented, which you can withdraw at any time; and to comply with law.

4. Sharing

We share data with Merchants or clients you choose to contact; with service providers who host, secure and operate the platform under contract; and where required by law or to protect rights and safety. We do not sell personal data.

5. International transfers

Our service providers may process data outside Nigeria. Where this happens we rely on safeguards recognised under the NDPA and, where relevant, other applicable law, such as adequacy decisions or contractual protections.

6. Retention

We keep personal data only as long as needed for the purposes above, including legal, accounting and dispute-resolution requirements, and then delete or anonymise it.

7. Security and discretion

We use access controls, encryption in transit and role-based permissions so that private enquiries are visible only to the participating parties and authorised staff. No system is completely secure; please tell us promptly if you suspect misuse of your account.

8. Your rights

Subject to applicable law, you may request access to, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent. You may also lodge a complaint with the Nigeria Data Protection Commission or your local supervisory authority.

To make a request, use the Contact page. We may need to verify your identity before acting.

9. Children

MISS ABAYA is not intended for people under 18, and we do not knowingly collect their personal data.

10. Changes and contact

We will post updates here and notify you of material changes.

Questions about this document can be sent through our Contact page. Dedicated legal contact details and company registration details will be added once confirmed.