House Policies · NDPR Compliant
Privacy Policy
How we handle the details you trust us with, under Nigerian law and aligned with the EU GDPR.
Effective 1 May 2026
Who We Are
Moscherry-Lux is the data controller for personal data submitted through this website. Our office is at Rukpakwulusi New Layout, off East-West Road, Port Harcourt, Rivers State, Nigeria. For data protection enquiries, contact [email protected].
Information We Collect
- Name, email, phone and delivery address.
- For custom orders: body measurements and design preferences.
- Order history and a masked card reference returned by our payment processor.
- IP address and basic usage data, with your cookie consent.
Lawful Basis (NDPR Article 2.2)
- Performance of your order contract.
- Your consent, for marketing and non-essential cookies.
- Legal obligation, for tax and transaction records.
- Legitimate interest, for fraud prevention and site security.
Custom Order Processing Timelines
Standard turnaround for bespoke orders is 14 to 21 working days from design sign-off to dispatch, exclusive of international shipping. Measurement and design data is retained for 24 months from your last order to support re-orders, then deleted unless you ask us to keep it.
Who We Share Data With
We do not sell personal data. We share it only with our payment processors (Paystack, Flutterwave), our courier partners for delivery, our hosting provider, and where required by Nigerian law.
How Long We Keep It
- Order and transaction records: 6 years (Nigerian tax law).
- Measurement profiles: 24 months from last order.
- Marketing consent: until withdrawn.
Your Rights
You have the right to access, correct, delete, restrict, object to, or port your personal data, and to withdraw consent. We respond to verified requests within 30 days. You may complain to the Nigeria Data Protection Commission at ndpc.gov.ng, or to your local supervisory authority if you are in the EU or UK.
Cookies
Strictly-necessary cookies (cart, session) load by default. Analytics and preference cookies load only after you accept them. Change your choice any time from the “Cookie settings” link in the footer.
Security
The site is served over TLS 1.2 or higher. Cardholder data is handled directly by our PCI-DSS compliant payment partners; we do not store raw card numbers, CVVs, expiry dates or PINs. Confirmed breaches are notified to the NDPC and to affected users within 72 hours, in line with the Nigeria Data Protection Act, 2023.
Governing Law
This Privacy Policy is governed by the laws of the Federal Republic of Nigeria. The courts of Rivers State have exclusive jurisdiction.