No products in the cart.
1. Who We Are
Welcome to Acor famstead, the digital marketplace where farm-fresh dreams meet friction-free checkout. We operate from Nigeria and ship our certified-organic items with Abuja.
2. Scope of This Policy
This Policy explains how we collect, use, disclose, and secure your personal data
3. The Data We Harvest
| Category | Typical Examples | Why We Need It |
|---|---|---|
| Identity Data | Full name, user name, account ID | Account creation, order fulfillment |
| Contact Data | Billing & delivery address, email, phone | Shipping, service updates, legal notices |
| Transaction Data | Order history, payment status, refund records | Accounting, fraud prevention, customer service |
| Technical & Usage Data | IP address, browser type, referral URLs, time-on-page, cookies | Site performance, analytics, personalization |
| Marketing Preferences | Opt-in/opt-out selections | Delivering newsletters, promos, or ensuring silence if you said “no thanks” |
We do not knowingly collect data on children under 13 (or 16 in the EEA/UK). If you believe we have, contact us (Section 13), and we’ll compost it immediately.
4. How We Use Your Data—The Business Case
-
Contractual necessity – to process orders, arrange delivery, and provide customer support.
-
Legitimate interests – to maintain cyber-security, detect fraud, and enhance our UX/UI.
-
Legal obligations – for tax, regulatory, or NDPA/GDPR reporting duties.
-
Consent – for email marketing, SMS alerts, or fresh-brewed surveys you opt in to.
We never sell your data for cold, hard cash. Period.
5. Cookies & Similar Tech
Cookies are the digital breadcrumbs that help us remember what’s in your cart or which pages load at glacial speeds. You can manage them via your browser or our Cookie Preference Center.
6. Sharing & Third-Party Recipients
We share data only as needed with:
-
Payment processors (e.g., Paystack, Stripe)
-
Logistics partners (e.g., DHL, FedEx, local couriers)
-
Cloud & analytics providers (e.g., AWS, Google Analytics in IP-anonymized mode)
-
Professional advisers (lawyers, auditors)
-
Regulators or law-enforcement where the law compels disclosure
All partners sign data-processing agreements that mirror NDPA/GDPR standards.
7. International Data Transfers
When data leaves Nigeria or the EEA, we rely on:
-
Adequacy decisions (where available)
-
Standard Contractual Clauses (SCCs) or NDPA-compliant safeguards
-
Additional technical measures such as encryption in transit and at rest
8. Security—Our Digital Moat
We deploy TLS 1.3 encryption, tokenized payments, role-based access controls, and quarterly penetration testing. Still, no system is infallible—if a breach slips through, we’ll notify affected users and regulators within the NDPA/GDPR timelines.
9. Data Retention
We keep:
-
Order & invoicing records: 6 years after fiscal year-end (tax law)
-
Marketing consents: until you withdraw consent or 2 years after last interaction
-
Inactive accounts: anonymized after 24 months of dormancy
When retention ends, data is securely purged or anonymized.
10. Your Rights (Know Them, Use Them)
| Jurisdiction | Key Rights |
|---|---|
| NDPA (Nigeria) | Confirmation of processing, access, portability, correction, deletion, objection, redress |
| GDPR (EEA/UK) | Access, rectification, erasure, restriction, portability, objection, automated-decision opt-out |
| CCPA/CPRA (California) | Know, delete, correct, opt-out of “sale”/“sharing,” non-discrimination |
To exercise any right, email privacy@[store].com with evidence of identity. We respond within 30 days (extendable by 30 more under GDPR for complex cases).
11. Marketing Opt-Outs
Click “unsubscribe” in any email footer or adjust “Marketing Preferences” in your dashboard. SMS? Reply “STOP”. We respect do-not-track signals from browsers where technically feasible.
12. Automated Decision-Making
Our fraud-detection AI occasionally blocks orders flagged as suspicious (e.g., 10 failed card attempts in 5 minutes). Human review is available on request: privacy@[store].com.
13. Contact Us
mail: contact@acorfarmstead.com.ng
14. Complaints
If we can’t resolve your concern, you may lodge a complaint with:
-
Nigeria Data Protection Commission (NDPC)
-
Your local supervisory authority in the EEA/UK
-
The California Privacy Protection Agency (CPPA)
15. Changes to This Policy
When we tweak this Policy, we’ll post the revision date above and, for material changes, send a heads-up via email or in-site banner 14 days before it takes effect.