Who We Are & What This Policy Covers
Welcome to Wordtees ("we", "our", "us"). Wordtees is a faith-inspired print-on-demand marketplace operated from Lagos, Nigeria. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website (wordtees.ng) and related services.
By using Wordtees, you agree to the practices described in this policy. If you disagree, please discontinue use of our services.
This policy applies to all users — customers, creators, affiliates, and partners. Specific provisions for creators are highlighted where they differ.
What Personal Information We Collect
We collect information in three ways: directly from you, automatically through your use of the site, and from third parties.
Information you provide directly:
- Account registration — name, email address, password (hashed)
- Orders — delivery address, phone number, payment details (card numbers are never stored; processed securely via Paystack)
- Creator profile — display name, portfolio links, bank account details for payouts
- Contact forms — name, email, message content
- Reviews & UGC — product reviews, photos, and ratings you choose to submit
Information collected automatically:
| Data Type | What It Is | Why Collected |
|---|---|---|
| IP Address | Your device's internet address | Security, fraud detection, rough geolocation for shipping estimates |
| Browser / Device | Browser type, OS, screen size | Ensure pages display correctly on your device |
| Pages Visited | Which pages you view and for how long | Improve site design and product discovery |
| Referral Source | Which site or link brought you here | Measure marketing and affiliate performance |
| Cart & Wishlist | Items you add or save | Remember your selections across sessions |
| Click patterns | Which products you click | Personalise recommendations |
Information from third parties:
- Paystack — payment status and verification (we never receive raw card data)
- GIG Logistics — delivery status updates for your orders
- Social login providers — if you sign in with Google, we receive your name and email only
How We Use Your Information
We use your data only for the following purposes:
- Fulfil your orders — process payments, produce items, arrange delivery, and send tracking updates
- Run your account — let you log in, view order history, manage your wishlist and creator dashboard
- Creator payouts — calculate and transfer royalty earnings to your registered bank account
- Customer support — respond to your queries, resolve disputes, and process returns
- Platform improvement — analyse usage patterns to fix bugs, improve navigation, and personalise recommendations
- Marketing communications — send newsletters and promotional emails (only if you opt in; unsubscribe at any time)
- Legal compliance — meet our obligations under Nigerian law (NDPR), including fraud prevention and tax reporting
- Safety & security — detect and prevent fraudulent transactions, copyright infringement, and policy violations
Who We Share Your Data With
We do not sell, rent, or trade your personal information to any third party for their own marketing purposes. We share data only in the following circumstances:
Service providers — third parties that help us operate Wordtees, all bound by data-processing agreements:
- Paystack (payment processing) — receives billing information needed to complete transactions
- GIG Logistics / courier partners — receives your name, address, and phone number for delivery
- Email service provider — receives your email address to send transactional and (opted-in) marketing emails
- Cloud hosting provider — stores encrypted databases on servers located in Nigeria and the EU
- Analytics tools — receive anonymised / aggregated behavioural data only
Legal requirements — we may disclose information if required by Nigerian law, a court order, or to protect the rights and safety of Wordtees, our users, or the public.
Business transfers — in the event of a merger, acquisition, or asset sale, user data may be transferred. We will notify you via email and provide an opportunity to delete your account before any such transfer.
Cookies & Tracking Technologies
We use cookies and similar technologies to operate the site and improve your experience. Cookies are small text files stored on your device.
| Cookie Type | Purpose | Can Opt Out? |
|---|---|---|
| Essential | Login session, cart state, security tokens | No — site won't function without these |
| Functional | Remember preferences (language, currency, dismissed banners) | Yes |
| Analytics | Anonymous page views and navigation paths (no personal data) | Yes |
| Marketing | Affiliate link tracking, ad conversion measurement | Yes — via cookie banner |
You can manage cookie preferences via the cookie banner shown on your first visit, or through your browser settings. Blocking essential cookies will impair core functionality (e.g. you won't be able to stay logged in).
We do not use cookies to serve third-party advertising networks or sell your browsing behaviour to data brokers.
Your Data Rights Under the NDPR
As a data subject under Nigeria's Nigeria Data Protection Regulation (NDPR), you have the following rights regarding your personal information:
Right to Access
Request a copy of all personal data we hold about you.
Right to Rectification
Correct inaccurate or incomplete data in your account.
Right to Erasure
Request deletion of your personal data (subject to legal obligations).
Right to Object
Object to processing for marketing or profiling purposes.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Restriction
Restrict processing while a dispute is being resolved.
To exercise any of these rights, email privacy@wordtees.ng with your name, registered email, and the specific right you'd like to exercise. We will respond within 30 days.
If you believe we have mishandled your data, you may also lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
How Long We Keep Your Data
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law:
- Account data — for the lifetime of your account, plus 90 days after deletion
- Order history — 7 years (required for tax and audit compliance under Nigerian law)
- Payment records — 7 years (financial records obligation)
- Creator payout records — 7 years
- Marketing preferences — until you withdraw consent or delete your account
- Support correspondence — 3 years after case resolution
- Analytics data — aggregated and anonymised after 12 months; raw logs deleted after 90 days
When data is no longer needed, it is securely deleted or anonymised so it can no longer be linked to you.
How We Protect Your Data
We implement industry-standard technical and organisational measures to protect your personal information:
- Encryption in transit — all data transmitted between your browser and our servers is encrypted using TLS 1.2+
- Encryption at rest — sensitive data (passwords, bank details) is encrypted in our databases using AES-256
- Password hashing — passwords are hashed with bcrypt; we never store them in plain text
- Access controls — data is accessible only to Wordtees staff who require it for their role, governed by role-based permissions
- Payment security — card data is handled entirely by Paystack (PCI-DSS Level 1 certified); we never see your raw card number
- Regular audits — we conduct periodic security reviews and penetration tests
No method of internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. We encourage you to use a strong, unique password and enable two-factor authentication on your account.
Children Under 16
Wordtees is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16 years of age.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@wordtees.ng and we will delete that information promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Send an email notification to all registered users
- Display a prominent notice on the site for at least 14 days
Your continued use of Wordtees after a policy update constitutes acceptance of the revised terms. If you disagree with any changes, you can close your account at any time.
Previous versions of this policy are available upon request — email privacy@wordtees.ng.
Questions & Data Requests
If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a concern, please contact our Data Protection Officer:
- Email: privacy@wordtees.ng
- Post: Wordtees Ltd, Lekki Phase 1, Lagos, Nigeria
- Response time: Within 30 days of receipt
Have a Privacy Question?
Our Data Protection Officer responds within 30 days — usually much sooner.