Privacy Policy
Privacy Policy
Last updated: [Publication date]
Balm of Gilead Herbal (“we”, “us” or “our”), operated by [Legal business name], respects your privacy. This policy explains how we collect, use and protect personal information when you visit balmofgilead.store, place an order or contact us.
Information we collect
Depending on how you interact with us, we may collect:
Your name, email address and phone number.
Your delivery address and delivery instructions.
Your selected products, order history and payment status.
Messages and information you provide when contacting us.
Technical information, such as your IP address, browser and website activity, where collected by our website services.
Payments are processed through Paystack. We receive transaction information needed to confirm your payment; we do not receive your full card details or PIN.
How we use your information
We use your information to process orders, confirm payments, arrange deliveries, answer enquiries and resolve order issues.
We may also use it to maintain business records, prevent fraud and meet legal obligations. Where you have agreed to receive marketing, we may send product news and offers. You can unsubscribe at any time.
We rely on the legal grounds appropriate to each activity, including fulfilling your order, complying with legal obligations, your consent and our legitimate business interests where these do not override your rights.
Who we share information with
We do not sell your personal information. We share relevant information with service providers where necessary, including:
Paystack for payment processing.
Delivery partners for shipping your order.
Website, hosting and communication providers.
Authorities where disclosure is legally required.
Cookies and website tracking
Our website may use technologies needed for its operation. If we enable optional analytics or advertising tools, we will explain their use and request consent where required.
[Before publishing, identify the analytics, advertising pixels and cookie tools actually enabled.]
International processing
Some service providers may process information outside Nigeria. Where this happens, we will use appropriate safeguards required by applicable data protection law.
Retention and security
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including applicable accounting, legal and dispute-resolution requirements.
We use reasonable technical and organisational safeguards to protect information. No online service can guarantee absolute security.
Your privacy rights
Subject to applicable law, you may request access to your information, correction of inaccurate details, deletion, restriction of processing or a portable copy. You may also object to certain processing or withdraw consent where processing relies on consent.
Contact us to make a request. We may need to verify your identity. You can also raise a complaint with the Nigeria Data Protection Commission at ndpc.gov.ng.
Contact us
Legal business name: [Business name]
Email: [Business email]
Phone: [Business phone]
Address: [Business address]
We may update this policy when our practices change. The latest version will appear on this page.