Privacy Policy

This Privacy Policy explains how DittoLiving (“we”, “us”) collects and uses personal data when you browse or buy on our storefront. We process data in line with the Nigeria Data Protection Act 2023 (NDPA) and applicable guidance from the Nigeria Data Protection Commission (NDPC).

DittoLiving is the data controller for personal data collected through this website. Use the contact email or phone published in our store footer to reach us about privacy.

Depending on how you use the shop, we may process:

• Buyer email (for receipts and order updates)
• Recipient name, phone, and delivery address (for gifting / fulfilment)
• Order contents, gift messages, personalisation text, and delivery method
• Payment status and processor references (not full card numbers)
• Refund request details and optional evidence photos you upload
• Basic technical data such as browser type and pages viewed (as needed to run the site)

Guest checkout means we do not create a customer account login. Your order number is the primary key for looking up your purchase.

• Contract / order fulfilment — to take payment, prepare the gift, deliver or hand over for pickup, and send confirmations.
• Legitimate interests — to prevent fraud, improve reliability, and respond to support requests.
• Legal obligation — where tax, accounting, or regulatory rules require retention of transaction records.
• Consent — only where we ask for it separately (for example optional marketing). Checkout does not require marketing consent.

We share data only as needed to run the store, including:

• Payment processors (e.g. Paystack, Credo) to take and verify payment
• Hosting, email, and media providers that process data on our instructions
• Delivery partners or staff fulfilling your order

We do not sell your personal data.

When you buy for someone else, you provide their contact and address. You confirm you have a valid reason to share that information with us for delivery. We use it only to fulfil the order and related support — not for unrelated marketing to the recipient.

Order and payment records are kept as long as needed for fulfilment, dispute handling, and legal / accounting retention. Support and refund records are kept for a reasonable period after the request is closed. Technical logs are rotated on a shorter cycle.

We use essential cookies and similar storage so the cart and checkout work. A notice on the site lets you accept or continue with essential-only use. We do not run third-party advertising cookies at this time. See also the cookie notice on the homepage.

We use industry-standard protections (HTTPS, access controls, and processor-hosted payment pages). No method of transmission is perfectly secure; please protect your order number and only share it with people you trust.

Subject to the NDPA, you may request to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete data where we no longer need it and law allows
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Lodge a complaint with the NDPC

Contact us using the details on this site to exercise these rights.

Our store is aimed at adults purchasing gifts. We do not knowingly collect personal data from children for marketing purposes.

We may update this policy. The “Last updated” date will change when we do. Material changes will be reflected on this page before they apply to new orders.