Privacy Policy

1. Who we are

JUMBUG is a Nigerian fashion house creating hand-dyed Adire pieces. You can reach us at info@jumbug.ng or +234 816 270 1586.

2. What we collect

• Order details — your name, email, phone number and delivery address, used to fulfil your order.
• Payment metadata — payment references and status from our payment provider, Paystack. We never see or store your card details.
• Contact messages — anything you send us through the contact form.
• Newsletter subscriptions — your email address, only if you choose to subscribe.

3. How we use it

• To process, confirm and deliver your orders.
• To respond to your enquiries.
• To send order updates and, if you subscribe, occasional newsletters. You can unsubscribe at any time.

We do not sell or rent your personal information to anyone.

4. Who we share it with

Only the service providers needed to run the store: Paystack (payments), our delivery partners (to ship your order) and our email provider (to send confirmations). Each is bound to handle your data only for that purpose.

5. How long we keep it

Order records are kept for our business and tax records. Contact messages are kept only as long as needed to resolve your enquiry. You can ask us to delete your personal information at any time (see below).

6. Your rights

Under the Nigeria Data Protection Act 2023, you may request access to, correction of, or deletion of your personal data, and you may withdraw consent to marketing at any time. Email info@jumbug.ng and we will respond promptly.

7. Security

Payments are processed over encrypted connections by Paystack. Order pages are accessible only with your order reference and email address. We limit access to personal data to those who need it to run the store.

8. Storefront analytics

We count visits by broad source and page category, and clicks from our website to Instagram. A random browser-session identifier is hashed with a daily scope to reduce duplicate visits. Attribution records do not contain IP addresses, email addresses, full page URLs or raw campaign values. These signals are not linked to orders and cannot confirm Instagram followers or purchases. We honour the browser Do Not Track setting. Events older than 90 days are removed during analytics maintenance and are excluded from reports.

9. Changes

If this policy changes, the updated version will be posted on this page with a revised date.