1. Data Controller Identification
In compliance with Section 24 and Section 27 of the Nigeria Data Protection Act 2023 (NDPA), your personal data is collected and processed by:
2. Principles of Data Processing
taiLOR is committed to processing your personal data lawfully, fairly, and transparently. We adhere strictly to the foundational data protection principles outlined in NDPA Section 24:
- Lawfulness & Fairness: Data is collected only with valid legal bases, primarily your informed consent.
- Purpose Limitation: Personal information is gathered exclusively for specified, explicit, and legitimate marketplace purposes.
- Data Minimization: We request only the data adequate and necessary to provide early access and tailoring order coordination.
- Storage Limitation: Data is retained only for as long as necessary to fulfill the initial purposes of collection.
- Integrity & Confidentiality: Technical safeguards are implemented to prevent unauthorized access, loss, or misuse.
3. Categories of Personal Data We Collect
Depending on your interaction with the platform, we may process:
4. Fitting & Measurement Privacy Safeguards
We treat customer body dimensions with the highest confidentiality:
- Zero Cloud Photo Storage: We do not store raw fitting photos or silhouette images on cloud servers.
- Structured Dimensions Only: Measurement tools output structured numerical dimensions (e.g., chest, waist, shoulder width in centimeters or inches) stored in your profile.
- Client-Authorized Handoff: Tailors can view your dimensions only for orders you actively commission.
5. Lawful Bases for Processing (NDPA Section 25)
We process your personal information under the following legal bases:
- Consent (NDPA Section 25(1)(a)): When you opt-in to early access, apply as a founding tailor, or submit contact inquiries.
- Contractual Necessity (NDPA Section 25(1)(b)): To manage order milestones, coordinate hand-offs, and facilitate delivery.
- Legal Obligation & Legitimate Interests: To maintain security logs, prevent fraudulent submissions, and defend legal claims.
6. Your Rights Under the NDPA 2023
Under Section 34 of the NDPA, you hold fundamental rights regarding your personal data:
To exercise any of these rights, email our team at [email protected]. We respond to verified data subject requests within 30 days.
7. Third-Party Disclosures & Payment Partners
We do not sell, rent, or trade your personal data. Disclosures occur strictly to:
- Cloud Infrastructure Providers: Secure edge hosting (Cloudflare) adhering to global data protection standards.
- Licensed Payment Providers: When payments launch, transactions will be processed directly in partnership with a licensed payment processing partner.
- Law Enforcement: Only where required by valid Nigerian statutory orders or legal process.
8. Data Retention & Deletion
Early access waitlist records are retained until the general release of the application. Applicants may request immediate removal from the waitlist at any time by contacting [email protected].
9. Supervisory Authority & Complaints
If you believe your data has been handled inconsistently with Nigerian data protection law, you have the right to lodge a formal complaint with the:
Nigeria Data Protection Commission (NDPC)
No. 5, Donau Crescent, Off Amazon Street, Maitama, Abuja, Nigeria
Website: https://ndpc.gov.ng