We collect information that you provide directly to us when using our services. The types of information we collect depend on how you interact with us.
Account Information
When you create an account, we collect:
Email address
Encrypted password (managed by Supabase Auth)
Student Registration Data
When you apply for our fashion school programmes, we collect:
Full name (surname, first name, middle name)
Gender
Date of birth and age
Nationality
Marital status
State of origin
Residential address
Telephone number
Email address
Chosen programme (3-month or 6-month)
Passport photograph
Product and Order Data
When you browse or inquire about our ready-to-wear collections, we may collect:
Product preferences and interactions
Contact information when making bespoke inquiries
Bespoke Requests
When you send a bespoke outfit request through our website, we collect:
Your name (optional)
Your phone number, so we can contact you by call or WhatsApp
Your description of the outfit you want
Up to four reference photos that you choose to attach, such as fabric or styling inspiration
Automatically Collected Data
We may automatically collect certain technical information:
Rate limiting identifiers to prevent abuse (email-based for sign-in, and a scrambled one-way version of your IP address, not the address itself, for bespoke requests)
Your cookie choices, so that we remember your preference (see section 8)
Basic usage data to improve our services
2. How We Use Your Information
We use the information we collect for the following purposes:
Account management: To create and manage your account, authenticate your identity, and provide access to our services.
Student registration: To process your course application, assess eligibility, manage admissions, and maintain academic records.
Bespoke requests: To review your outfit request, contact you about it, and prepare a quote.
Communication: To respond to your inquiries, send updates about your application or orders, and provide customer support.
Service improvement: To understand how our services are used and improve the user experience.
Security: To protect against fraud, abuse, and unauthorized access through rate limiting and input validation.
Legal compliance: To comply with applicable laws and regulations in Nigeria, including the Nigeria Data Protection Act 2023.
3. Where Your Data Is Stored
Your data is stored using the following infrastructure:
Supabase (PostgreSQL Database): All structured data including account information, student registrations, and product data are stored in a Supabase-hosted PostgreSQL database with Row Level Security (RLS) policies to protect your data.
Supabase Storage: Uploaded passport photographs, product images, and bespoke reference photos are stored in Supabase Storage buckets with controlled access. Bespoke reference photos are kept in a private bucket that only our administrators can open.
Supabase Auth: Authentication credentials (email and encrypted passwords) are managed through Supabase's authentication service.
Resend (email delivery): When you send a bespoke request, we receive it by email through Resend, an email delivery service. The email contains the details of your request, and your photos as attachments.
Vercel/Next.js: Our website is hosted on Vercel using the Next.js framework. No sensitive data is stored in the hosting environment.
All data storage providers comply with applicable data protection standards. Data is stored in secure data centers with encryption in transit and at rest.
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
Service providers: We use Supabase for database, authentication, and storage services, and Resend to deliver bespoke request emails to us. These providers have access to your data only to perform services on our behalf.
Legal requirements: We may disclose your information if required by law, regulation, or legal process, or to protect our rights, property, or safety.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
Consent: We may share your information with your explicit consent.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
All data transmission is encrypted using HTTPS/TLS
Passwords are hashed and managed by Supabase Auth (never stored in plaintext)
Database access is controlled through Row Level Security (RLS) policies
Input sanitization is applied to prevent injection attacks
Rate limiting protects against brute-force and abuse attempts
File uploads are validated for type and size
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Your Data Rights
You have the following rights regarding your personal data:
Access: You can request a copy of the personal data we hold about you.
Correction: You can request that we correct any inaccurate or incomplete data.
Deletion: You can request deletion of your account and personal data. You can deactivate your account through your profile menu.
Data portability: You can request a copy of your data in a portable format.
Objection: You can object to certain processing of your personal data.
Withdraw consent: Where we rely on your consent, such as for optional cookies, you can withdraw it at any time. See section 8 for how to change your cookie choices.
To exercise any of these rights, please contact us using the details provided at the bottom of this policy. If you are not satisfied with our response, you also have the right to complain to the Nigeria Data Protection Commission.
7. Data Retention
We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in this policy:
Account data: Retained while your account is active. You may request deletion at any time.
Student registration data: Retained for academic record-keeping purposes throughout your programme and thereafter as required by applicable regulations.
Bespoke requests: Retained while we are working on your outfit and for as long as we need to follow up with you. When a request is deleted, its photos are removed from our storage automatically shortly afterwards.
Testimonials: Retained indefinitely unless you request removal.
Technical data (rate limiting): Retained for a limited duration for security purposes only.
8. Cookies and Similar Storage
We use cookies and similar browser storage in two groups:
Strictly necessary (always on): Your sign-in session (authentication tokens kept in your browser by Supabase), security features, and temporary copies of public product information so that pages load faster. The website cannot work properly without these.
Analytics and performance (optional, off by default): We do not currently run analytics. If we add it in future, it will only run if you have allowed it.
We do not use advertising cookies or tracking pixels, and we do not use third-party analytics at this time.
Your cookie choices
The first time you visit, we ask for your choice. We save it on your device, in your browser storage and in a small cookie named “cookie_consent”, for up to 6 months, and then we ask again. You can change your mind at any time:
You can also clear cookies and site data in your browser settings. Doing so will sign you out, and we will ask for your cookie choice again.
9. Children's Privacy
Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
Users between 13 and 18 must have parental or guardian consent to use our services, particularly for course registration.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised “Last updated” date. We encourage you to review this policy periodically.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: