Privacy & Cookie Policy
Last updated: October 2026
1. Who we are
WeFord Enterprise is the data controller for this website. We sell laptops from two stores in Computer Village, Ikeja, Lagos: Suite 17, Off Medical Road No. 4, Francis Oremeji Street, and Shop 7, Adejoke Plaza.
For anything in this policy, contact us on weford2019@gmail.com or +234 803 555 1753 (call or WhatsApp). We have not appointed a Data Protection Officer. These contact details are our point of contact for all privacy matters.
2. What we collect, why, and on what basis
We only collect what we need. The law lets us process personal data on a limited set of bases. For each use below we state which one applies.
| Orders | Name, phone number, delivery address, city, state, and optionally your email, plus what you ordered. Used to confirm availability, arrange payment and deliver. Basis: steps needed to enter into and perform your purchase. |
|---|---|
| Customer accounts | Name, email, phone, address, and your password stored as a one-way hash that we cannot read. Used to sign you in and show your order history. Basis: performing our service to you. |
| Corporate enquiries | Organisation, contact name, email, phone, quantity and requirements. Used to prepare a quote. Basis: steps taken at your request before a contract. |
| Newsletter | Your email address. Used to send new arrivals, restocks and offers. Basis: your consent, which you give by choosing to subscribe and can withdraw at any time. |
| Security and abuse prevention | Your IP address, held briefly to limit repeated requests to forms and sign-in. Basis: our legitimate interest in keeping the site secure. |
| Site performance and errors | Page views, shopping actions and speed measurements. These do not include your name, phone, email or address. Basis: our legitimate interest in keeping the site working. |
| Advertising measurement | Only if you press Accept on the cookie banner: Meta (Facebook) Pixel records page views, checkout starts, sign-ups and purchase values so we can measure our advertising. Basis: your consent. |
We do not make decisions about you by automated means and we do not build profiles that have legal or similar effects on you.
3. Who we share it with
We do not sell your data. We use these service providers (processors) who handle it on our behalf:
- Vercel: website hosting, privacy-friendly analytics and speed measurement.
- Supabase: database where orders, accounts and subscribers are stored.
- Cloudinary: product image delivery. No customer data is sent.
- Resend: sends our emails, such as the newsletter welcome message. Receives the recipient email address.
- Upstash: rate limiting. Receives IP addresses briefly.
- Meta Platforms: only if you accept advertising measurement on the cookie banner.
- WhatsApp (Meta): orders are completed by a message you send from your own WhatsApp account, under WhatsApp's own privacy policy.
We also disclose data where the law requires it, for example to a court or regulator.
4. Data sent outside Nigeria
Several of the providers above operate servers outside Nigeria, including in the United Kingdom, the European Union and the United States. We only use providers that commit to protecting personal data to a standard comparable to Nigerian law, and we keep a record of the basis for each transfer. Where you choose Accept for advertising measurement, data is sent to Meta with your consent.
5. How long we keep it
- Orders and delivery details: up to 6 years from the order, for warranty, returns and accounting records.
- Customer accounts: until you ask us to delete the account.
- Corporate enquiries: up to 24 months after the last contact.
- Newsletter email: until you unsubscribe.
- IP addresses used for rate limiting: minutes to hours, then discarded.
- Analytics and error data: kept by those providers for their standard short retention periods.
When a retention period ends, or when you ask us to erase your data and we have no legal reason to keep it, we delete it. Our database provider may keep routine backups for a short rolling period. Erased data drops out of them as they are overwritten.
6. Cookies and local storage
Strictly necessary. Your browser's local storage holds your cart, wishlist, theme choice and whether you have dismissed our newsletter prompt. If you sign in, a session cookie keeps you signed in and expires automatically. These do not need consent.
Analytics. Vercel Web Analytics and Speed Insights measure visits and performance without advertising cookies.
Advertising (optional). The Meta Pixel sets cookies and is loaded only after you press Accept on the cookie banner. If you press Decline, it is never loaded. You can change your choice at any time with the Cookie settings link at the bottom of every page.
7. Your rights
Under the Nigeria Data Protection Act 2023 you can:
- ask whether we hold your data and get a copy in a common electronic format;
- have inaccurate or incomplete data corrected;
- have your data erased where we no longer need it or have no other lawful basis to keep it;
- ask us to restrict how we use your data while a request or objection is resolved;
- object to our use of your data, including at any time to direct marketing;
- withdraw consent at any time. This is as easy as giving it and does not affect what we did before.
To use any right, contact us using the details in section 1. We will respond without undue delay and in any case within 30 days. To stop newsletters, click Unsubscribe in any newsletter email (or use your email app's unsubscribe button), or contact us and we will remove you.
8. Complaints
If you think we have handled your data wrongly, please tell us first so we can put it right. You also have the right to complain to the Nigeria Data Protection Commission at ndpc.gov.ng.
9. Security and breaches
Passwords are hashed with bcrypt. Admin access is limited by role and is never exposed on the public site. Traffic to the site is encrypted over HTTPS, and requests to forms and sign-in are rate limited. If a breach puts your rights at risk, we will notify the Nigeria Data Protection Commission within 72 hours and tell you directly, in plain language, if the risk to you is high.
10. Children
This site is for adults. We do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it.
11. Changes to this policy
If we change how we use your data, we will update this page and the date at the top. For material changes to how we use your data we will tell you before the change takes effect.