Privacy Policy | Tiki Concepts

Effective Date: October 2026

Tiki Concepts (“we”, “us”), Lagos, Nigeria, is responsible for the personal information described here. This policy explains what we collect, why, who we share it with, how long we keep it, and your rights under the Nigeria Data Protection Act 2023.

1. Information We Collect

When you order, with or without an account: your name, email address, phone number and delivery address, what you ordered, and the options you chose.
Files you upload for printing, and any design instructions you give us.
If you create an account: the details above and a password. We store only a scrambled (hashed) form of your password, never the password itself.
If you leave a review: the name, email address, rating and comment you submit.
Security records: your IP address when you sign in, sign up, try a promo code or leave a review, used only to block repeated abuse.
When you contact us on WhatsApp or by email: what you send us.

We do not collect or store your card details. Payments are handled entirely by Paystack.

2. How We Use It

To make, deliver and support your order, including sending your receipt and order updates.
To run your account, if you have one.
To protect the site and our customers from fraud and abuse.
To understand, in aggregate, how the site is used so we can improve it.

We rely on the need to perform our contract with you (your order), our legal obligations (such as keeping business records), and our legitimate interest in keeping the site secure. We do not sell your information or use it for third-party advertising.

3. Who We Share It With

Only the service providers we need to run the business, each receiving only what its job requires:

Paystack: processes your payment; receives your email address and the amount.
Our delivery riders or courier partner (GIG Logistics): your name, phone number and delivery address, to deliver your order.
Resend: sends our emails (receipts, account emails) to your email address.
Supabase and Vercel: host our database, your uploaded files and the website.
Google Analytics: measures how pages are used, through cookies on your device.

Some of these providers process data outside Nigeria. Where they do, we use providers that apply recognised data protection safeguards. We may also disclose information where the law requires it.

4. Cookies and Browser Storage

A sign-in cookie that keeps you logged in, for up to 7 days.
Your cart, saved in your own browser so it survives a refresh. It is not sent to us until you check out.
Google Analytics cookies, as described above.

5. How Long We Keep It

Orders and payment records: for as long as Nigerian company and tax law requires us to keep business records (generally six years).
Uploaded design files: kept with your order so we can handle reprints and questions. Once your order is complete, you can ask us to delete them at any time.
Accounts: until you ask us to close yours. Your order records are then kept only as long as the law requires, as above.
Security records (IP addresses): deleted automatically after 2 days.

6. How We Protect It

Customer and order information is readable only by our own systems and staff who need it. Connections to the site are encrypted, passwords are stored hashed, uploaded files are stored under unguessable names, and access to our admin tools is restricted and checked on every request.

7. Your Rights

Under the Nigeria Data Protection Act 2023 you can ask us to:

tell you what information we hold about you and give you a copy;
correct anything that is wrong;
delete your information, where we are not required by law to keep it;
stop or limit how we use it, or send it to you in a portable format.

To make a request, email hello@tikiconcepts.com or message us on WhatsApp at 09154648045 from the email address or phone number on your order, so we can confirm it is you. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission.

8. Children

Our services are not directed at children under 18, and we do not knowingly collect their information.

9. Changes

If we change this policy, we will update it here and change the effective date above.