Privacy policy

Babeau Handerz Sig operates babeau.store and the Babeau spa at 51 Alhaji Mudashiru Eletu Street, Lekki, Lagos. We are the data controller for the information described here, and we handle it under the Nigeria Data Protection Act 2023.

For anything in this policy, write to hello@babeau.store.

We only collect what an order, a booking or a message needs.

• Order details: name, delivery address, email, phone number, what you bought and what you paid.
• Booking details: name, phone number, email, treatment, date and time.
• Health notes you choose to share when booking — allergies, pregnancy, sensitivities, preferred pressure.
• Messages you send us by form, email, WhatsApp or Instagram.
• Basic site analytics: pages viewed, approximate location by city, device and browser type.

The notes you give us before a treatment are sensitive personal data and we treat them that way. They are used to keep the treatment safe for you and nothing else. Only the aesthetician performing your treatment sees them, we never use them for marketing, and we do not share them with anyone outside the spa.

You can ask us to delete your treatment notes at any time. If you do, we will ask again at your next appointment, because performing a treatment without them is not safe.

We never see or store your card details. Card and transfer payments are handled by Paystack, which is PCI DSS compliant. We receive only the outcome of the payment, the amount, and the last four digits of the card where the provider supplies it.

For manual bank transfers we see the payer name and reference that your bank sends with the transfer.

Every use has a lawful basis. In plain terms:

• To fulfil your order or booking — performance of a contract.
• To reach you about a delay, a substitution or an appointment change — performance of a contract.
• To keep tax and accounting records — legal obligation.
• To send routine notes and restock alerts — your consent, which you can withdraw in one click from any email.
• To understand which pages and products people use — our legitimate interest in running the shop properly.

We do not sell your data, and we do not trade it for advertising. We share the minimum necessary with the services that make the shop work: our courier, who needs your name, address and phone number; Paystack, which processes payment; and our email provider, if you have subscribed.

We will disclose information where the law requires it — a court order, a tax audit, or a regulatory request we are obliged to answer.

Order and payment records are kept for six years, because tax law requires it. Treatment notes are kept while you remain a client and for two years after your last visit. Marketing subscriptions are kept until you unsubscribe. Analytics are aggregated after twelve months so they no longer identify anyone.

Under the Nigeria Data Protection Act 2023 you can ask us to show you the data we hold on you, correct it if it is wrong, delete it, or stop using it for a particular purpose. You can also withdraw consent for marketing at any time, and ask for your data in a portable format.

Email hello@babeau.store and we will respond within thirty days. If you are not satisfied with our response you can complain to the Nigeria Data Protection Commission.

We use cookies that keep your cart and session working, and analytics cookies that tell us which pages get used. We do not run advertising or cross-site tracking cookies. You can clear or block cookies in your browser, though the cart will stop remembering what you added.

The site runs over HTTPS, access to order and client records is limited to the people who need it, and payment data never reaches our systems. No system is perfect; if a breach ever affects your data we will tell you and the Commission without undue delay.

When this policy changes we update the date at the top of the page. Material changes are announced by email to subscribers.