← Back to shop

Privacy Policy

Last updated: 16 June 2026

This Privacy Policy explains how Bioharb(“we”, “us”, “our”), operating bioharb.com, collects, uses, and protects your personal information when you use our website and buy from us. We are committed to handling your data responsibly and in line with the Nigeria Data Protection Act / Regulation (NDPA/NDPR) and other applicable law.

1. Information we collect

  • Details you give us — your name, phone number, email address, delivery address, and the contents of your order.
  • Account & order data — your order history, wishlist, and any reviews or messages you send us.
  • Payment data — when you pay online, your payment is processed by our payment provider. We receive confirmation of payment but do not collect or store your full card details.
  • Technical data — basic information your device sends automatically (such as IP address and browser type) and cookies (see our Cookie Policy).

2. How we use your information

  • To process, deliver, and manage your orders, including pay-on-delivery and refunds.
  • To provide customer support and respond to your enquiries.
  • To verify orders and prevent fraud.
  • To improve our products, website, and service.
  • To send you order updates and, where you have consented, marketing about products and offers. You can opt out of marketing at any time.
  • To meet our legal and regulatory obligations.

3. Legal basis

We process your data to perform our contract with you (fulfilling your order), with your consent (for marketing and non-essential cookies), to comply with the law, and for our legitimate interests in running and securing the business.

4. Who we share it with

We share your information only as needed to run the service, including with:

  • Delivery partners / couriers — to deliver your order.
  • Payment providers — to process online payments securely.
  • Our order-management system — to manage fulfilment and customer care.
  • Authorities — where required by law. We do not sell your personal data.

5. Data retention

We keep your information for as long as your account is active and as needed to fulfil orders, meet legal and tax obligations, and resolve disputes. We then delete or anonymise it.

6. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit. No method of transmission or storage is completely secure, but we work to safeguard your information and to notify you and the relevant authority if a breach occurs as required by law.

7. Your rights

Subject to applicable law, you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate data;
  • ask us to delete your data;
  • object to or restrict certain processing;
  • withdraw consent (for example, to marketing) at any time;
  • request a copy of your data in a portable format.

To exercise any of these rights, contact us via the Help & Support page. You also have the right to complain to the Nigeria Data Protection Commission (NDPC).

8. Children

Our site is not directed at children under 18, and we do not knowingly collect their data.

9. Changes

We may update this policy from time to time. The “Last updated” date above shows when it last changed.

10. Contact us

For any privacy question or request, reach us through our Help & Support page.