LP Designs is committed to protecting your personal data and privacy. As a Data Controller operating in Nigeria, we comply with the Nigeria Data Protection Act (NDPA) 2023 and other applicable Nigerian laws.

1. Personal Data Collected

We collect the following types of personal data:

• Identity Data: Name, title, date of birth.
• Contact Data: Billing address, delivery address, email address, and telephone numbers.
• Transaction Data: Details about payments to and from you, and other details of products and services you have purchased from us.
• Bespoke Data (Sensitive): For custom orders, we collect and process detailed body measurements and/or foot size and specifications. This data is considered sensitive and is handled with the highest level of security.
• Technical Data: Internet protocol (IP) address, browser type, time zone setting, and operating system when you visit our website.

2. Lawful Basis and Purpose of Processing

We will only process your personal data when we have a legal basis to do so, as mandated by the NDPA 2023. Our lawful bases and purposes include:

• Lawful Basis: Purpose of Processing
• Consent: To send you marketing communications (if you have opted in).
• Performance of a Contract: To process your order, manage your custom design/fitting process, deliver products, and collect payment. This includes using your measurements to create custom apparel and shoes.
• Legal Obligation: To comply with legal or regulatory obligations, such as accounting or tax requirements.
• Legitimate Interest: To improve our services, resolve disputes, and ensure the security of our website and business operations.

3. Data Subject Rights (Your Rights)

In line with the NDPA 2023, you have the right to:

• Right to Information: Be informed about the collection and use of your personal data (this policy).
• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): Request that your personal data is deleted, especially data related to custom measurements once the order is fulfilled and statutory retention periods expire.
• Right to Withdraw Consent: At any time, withdraw your consent for processing based on consent (e.g., marketing). Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

4. Data Security and Accountability

We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, in compliance with the accountability principle of the NDPA. Access to Bespoke Data (measurements) is restricted to the necessary design and production teams.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. This means retaining Custom Measurement Data as long as you might reasonably re-order the same item or require modifications, unless you request its erasure.

6. How to Exercise Your Rights or Lodge a Complaint

If you have questions about this policy or wish to exercise any of your rights, please contact us at [leeperfect5@gmail.com] or [07030419917]. If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).