Privacy Policy

BakeBox ("we", "us", or "our") operates the website https://bakebox.com.ng. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or place an order. Please read it carefully. By using BakeBox, you consent to the practices described herein.

1. Information We Collect

We collect information you voluntarily provide when you:

• Place an order: full name, phone number, email address, delivery address, and order details.
• Contact us: name, email, phone, subject, and message content.
• Subscribe to our newsletter: email address.

We also automatically collect certain technical data including IP address, browser type, device type, pages visited, and time spent — through server logs and cookies — to improve our service.

2. How We Use Your Information

• Process and fulfill your orders, including delivery coordination.
• Send order confirmations and delivery updates.
• Respond to your inquiries and customer service requests.
• Send promotional communications (only if you opted in; unsubscribe at any time).
• Improve our website, products, and services.
• Comply with legal obligations under Nigerian law.
• Detect and prevent fraud or abuse.

3. Payment Processing

All payment transactions are handled by Paystack, a PCI-DSS compliant payment processor. BakeBox never stores your full card number, CVV, or banking credentials. Paystack's privacy policy governs the processing of your payment data. We receive only a transaction reference and payment status from Paystack.

4. Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only with:

• Paystack for payment processing.
• Delivery partners (name, phone, address only) for order fulfillment.
• Law enforcement or regulatory authorities when required by applicable Nigerian law.

5. Cookies

We use session cookies to manage your shopping cart and login sessions. No third-party tracking cookies are set. You may disable cookies in your browser, but this may affect cart and checkout functionality. We may also use analytics cookies (e.g. Google Analytics) in aggregate, anonymous form to understand site usage.

6. Data Security

We implement industry-standard security measures including SSL/TLS encryption, prepared SQL statements to prevent injection, CSRF token protection, and regular server security audits. However, no method of internet transmission is 100% secure. We encourage you to protect your order number and personal details.

7. Data Retention

Order records are retained for a minimum of 5 years for accounting and legal compliance purposes as required by Nigerian law. Contact form messages are retained for 12 months and then purged. Newsletter subscribers are retained until they unsubscribe.

8. Your Rights

You have the right to request access to the personal data we hold about you, correct inaccurate data, and in some cases request deletion of your data. To exercise these rights, contact us at hello@bakebox.com.ng. We will respond within 30 days.

9. Children's Privacy

Our website is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated date at the top of this page. Your continued use of BakeBox after any changes constitutes your acceptance of the revised policy.

11. Contact Us

For privacy-related questions or to exercise your rights, please contact:

BakeBox Nigeria
123 Baker Street, Victoria Island, Lagos, Nigeria
Email: hello@bakebox.com.ng
Phone: +234 800 225 3269