Privacy policy
Last updated 1 October 2026This policy explains how BodyCare Concierge Ltd (the data controller) handles your personal data under the Nigeria Data Protection Act 2023. We collect only what we need to deliver your orders, bookings and consultations, and we never sell your personal data.
1. Data we collect
Your name, email, phone number, delivery addresses, order and booking history, messages with partners and our team, and payment references (not card numbers). With your explicit consent, skin quiz answers, consultation notes and photos — this is sensitive health data.
2. Why we use it (lawful basis)
To perform our contract with you (orders, bookings, consultations, support); to meet legal obligations (tax and accounting records); for our legitimate interests (fraud prevention and keeping the platform secure); and with your consent (health data, marketing emails, WhatsApp updates and The Edit newsletter). You can withdraw consent at any time.
3. Who we share it with
Only what each needs: the partners you buy from, book with or consult; our payment provider (Bachs); delivery partners; hosting, email, SMS and WhatsApp providers that send your receipts and reminders; and authorities when the law requires it. Consultation notes are shared only with the medical aesthetician you consult.
4. International transfers
Some of our service providers store data outside Nigeria (for example in the European Union or United States). We use providers with adequate protection and contractual safeguards, as the Act requires.
5. Security
Data is encrypted in transit and at rest, access is limited to the people who need it, and staff accounts use two-factor authentication. If a breach is likely to put you at risk, we will tell you and the Nigeria Data Protection Commission within 72 hours.
6. How long we keep it
Order and payment records for six years for tax purposes; consultation notes while your account is open unless you ask us to delete them sooner; marketing preferences until you change them. When you delete your account we erase or anonymise the rest within 30 days.
7. Your rights
You can ask to access, correct, export or delete your data, restrict or object to processing, and withdraw consent — from Account › Settings or by contacting us. We reply within 30 days.
8. Cookies
We use essential cookies to keep you signed in and remember your bag. We do not use advertising cookies.
9. Contact and complaints
Contact our Data Protection Officer at privacy@bodycareconcierge.com. If you are not satisfied, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).