Your information
Last updated 30 October 2026
This is a plain-language draft. It will be reviewed by a lawyer before the shop opens, and may change.
KemKares, based in Lagos, Nigeria, decides how your information is used and is responsible for it under the Nigeria Data Protection Act 2023.
Your name, email address and phone number. If you sign in with Google, the name, email address and profile picture Google shares with us. Your delivery addresses and any gift message, including the recipient’s name, phone number and address. What you order, including the packages, choices and items you pick. For a Surprise package, the few details you give about the person it is for. The payments you tell us about (amount, date and bank reference) and, only if you ask for a refund, the bank account to pay it into.
We also keep a record of what our staff do on your order, and our hosting provider keeps short-lived technical logs, such as IP address and browser type, to keep the website running and secure.
To run your account, take and deliver your order, confirm payments, issue receipts, handle cancellations and refunds, send you emails and notifications about your account and orders, and keep the shop secure. We use it because we need it to carry out your order, because the law requires us to keep accounts, and because we have a legitimate interest in preventing fraud. We do not sell your information and we do not use it for advertising by other companies.
Only our staff who need it for their job, limited by role. Our dispatch company receives the name, phone number and address needed to deliver. We also use a small number of service providers, who may only use your information to provide their service to us:
Your bank and ours handle your transfers under their own privacy policies. We never see your card details or bank login.
Our database is stored on servers in Frankfurt, Germany, and the website may be served from other countries. Where your information leaves Nigeria, we only use providers that protect it to a standard the Nigeria Data Protection Act accepts.
Essential cookies keep you signed in, remember your cart and remember your cookie choice. The shop cannot work without them, so they are always on. Optional cookies (to understand how the shop is used, or for advertising) are only ever used if you choose “Accept all” in our cookie notice. We do not use any optional cookies today. You can change your choice at any time with “Cookie settings” at the bottom of every page.
Every connection to the website is encrypted. Staff accounts need a password and a second sign-in step, each staff role only sees what it needs, and changes to orders and payments are recorded so they can be checked.
We keep order and payment records for as long as the law requires us to keep accounts. Other information is deleted when you ask us to close your account, unless we must keep it.
You can ask to see the information we hold about you, correct it, receive a copy, object to how we use it, or have it deleted where the law allows. You can also complain to the Nigeria Data Protection Commission. To make a request, message us on WhatsApp, or sign in to your account to review and update your details.
The shop is for adults. We do not knowingly collect information from anyone under 18.
We may update this policy. The date at the top shows the latest version, and we will tell you about any important change before it applies to you.