

Legal
Effective date: 1 May 2026
Your privacy matters to us. This policy explains exactly what data we collect, why we collect it, and how you can control it.
ARÍRA ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights in relation to it.
This policy applies to all personal data collected through our website and in connection with orders placed with us. By using our Site or placing an order, you agree to the practices described here.
We collect the following categories of personal data:
Account & Identity Data: your name, email address, and password when you create an account.
Order & Transaction Data: your delivery address, billing information, order history, and payment method details. We do not store full card numbers; payment processing is handled by our secure third-party payment providers.
Communication Data: messages you send us by email or through the Site, including support enquiries and feedback.
Usage Data: information about how you browse and interact with our Site, including pages visited, time spent, device type, browser, and IP address. This is collected automatically via cookies and similar technologies.
Marketing Preferences: whether you have opted in or out of receiving marketing communications from us.
We use your personal data only for the purposes described below:
To process and fulfil your orders: including confirming payment, arranging delivery, sending order updates, and handling returns.
To manage your account: allowing you to view order history, update preferences, and access account features.
To communicate with you: responding to enquiries, sending order confirmations and shipping notifications, and providing customer support.
To send marketing communications: where you have opted in, we may email you about new arrivals, promotions, and ARÍRA updates. You can unsubscribe at any time.
To improve our Site: analysing usage data helps us understand how customers interact with our Site and improve the experience.
To comply with legal obligations: we may process your data where required by law, including for fraud prevention and tax purposes.
We process your personal data on one or more of the following legal grounds:
Contract: processing is necessary to perform our contract with you (i.e. to fulfil your order).
Legitimate Interests: processing is necessary for our legitimate business interests, such as improving our services and preventing fraud, where those interests are not overridden by your rights.
Consent: where you have given us explicit consent, such as opting in to marketing emails. You may withdraw consent at any time.
Legal Obligation: where we are required to process data to comply with applicable law.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.
Order and transaction data is typically retained for 6 years in line with standard record-keeping obligations.
Account data is retained for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where retention is required by law.
Marketing preference data is retained until you withdraw consent or request deletion.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include encrypted connections (HTTPS), access controls, and secure payment processing.
While we take data security seriously, no method of transmission over the internet is completely secure. We cannot guarantee absolute security, but we will notify you and the relevant authorities promptly in the event of a data breach that affects your rights.
Depending on your location, you may have the following rights in relation to your personal data:
Right of Access: to request a copy of the personal data we hold about you.
Right to Rectification: to request correction of inaccurate or incomplete data.
Right to Erasure: to request deletion of your personal data in certain circumstances.
Right to Restrict Processing: to request that we limit how we use your data in certain circumstances.
Right to Data Portability: to receive your data in a structured, machine-readable format where processing is based on consent or contract.
Right to Object: to object to our processing of your data where we rely on legitimate interests.
Right to Withdraw Consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at info@ariralagos.com.ng. We will respond within 30 days. We may need to verify your identity before fulfilling your request.
We operate primarily in Nigeria and serve customers globally. Where your data is transferred to or processed in countries outside your own, we ensure that appropriate safeguards are in place in accordance with applicable data protection law.
Our payment processors, email providers, and analytics partners may process data outside Nigeria. We work only with providers who maintain appropriate data protection standards.
Our Site is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at info@ariralagos.com.ng and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with a revised effective date. We encourage you to review this policy periodically.
Where changes are material, we will notify you by email or by a prominent notice on the Site.
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
ARÍRA Email: info@ariralagos.com.ng
This policy was last updated on 1 May 2026. Also see our Terms & Conditions. For questions, contact us at info@ariralagos.com.ng.