Privacy Policy

When you shop: your name, email address, phone number and delivery address, what you ordered and what you paid. With an account, we also keep your saved addresses and order history.

When you use the Fit Checker: your height, weight, body shape and fit preference. These are sent to our server to work out a size recommendation. We only store them against you if you’re signed in and choose to save them — and you can change or clear them any time.

When you join our list: your email address, and your WhatsApp number if you give it.

When you contact us: your name, email address and what you write, including follow-up messages in the same conversation.

When you browse: which products you view, what you search for, and what you add to your cart or wishlist. This is tied to a random identifier stored in your browser rather than to your name — but if you later enter your email at checkout, we can connect the two. We’re telling you that rather than calling it anonymous.

When you begin checking out: if you enter your email and don’t finish, we keep that address and your cart so we can send you one reminder. See “Marketing”.

The Nigeria Data Protection Act 2023 requires us to tell you the lawful basis for each use.

• To fulfil your order — payment, delivery, confirmations, returns. Performance of a contract with you.
• To provide your account — saved addresses, order history, wishlist, saved sizes. Performance of a contract with you.
• To recommend a size — the Fit Checker uses what you tell us to suggest a size. Your consent.
• To answer you — support conversations and their history. Our legitimate interest in running a shop people can talk to.
• To improve the store — which pieces get viewed, what people search for, where checkouts stall. Our legitimate interest.
• To market to you — our email list, and one reminder if you leave something in your cart. Your consent, or our legitimate interest in the case of the cart reminder, which you can stop at any time.
• To meet legal obligations — records of sales for tax and accounting. Legal obligation.

We build a simple picture of customers to decide what to make and who to tell about it: what you’ve bought, how often, and which pieces you’ve saved. We use it to group customers for marketing and to plan collections.

Our Fit Checker suggests a size from the measurements you give it. It is a suggestion, not a decision about you, and a person is always available if you’d rather ask.

We don’t make any decision about you by automated means alone that has a legal or similarly significant effect. You can object to profiling for marketing at any time by emailing us or unsubscribing.

We don’t sell your personal information. We share it with the companies that make the shop work:

• Supabase — hosts our database and account logins.
• Paystack and Flutterwave — process card payments. Your full card details go to them and your bank, never to us.
• GIG Logistics — our delivery partner, who receives your name, phone number and delivery address.
• Google — we send your delivery address to Google Maps to turn it into coordinates so we can quote delivery accurately, including partial address text as you type it into the address box. Google Fonts also supplies the typefaces on this site, which means Google receives your IP address when a page loads.
• Resend — sends our emails and receives your replies to them.
• Meta (Facebook/Instagram) and TikTok — advertising and measurement. They record which pages and products you viewed and whether you bought. We send Meta no name, email or phone. We send TikTok a scrambled (hashed) version of your email when you complete a purchase, so it can match the sale to an advert. See “Cookies and tracking”.
• Our own team, and professional advisers, courts or regulators where the law requires it.

Supabase, Google, Resend, Meta and TikTok store data outside Nigeria. We rely on the standard contractual clauses in our data-processing agreements with each of them, which is a transfer mechanism recognised under section 41 of the Nigeria Data Protection Act. If you’d like to know more about a particular transfer, ask us.

We store small amounts of information in your browser. Some is essential — your cart, your login, your saved sizes — and the shop can’t work without it.

We also use advertising and measurement tools from Meta and TikTok, which set their own cookies and record which pages you visit. These only load if you accept them. You’ll be asked when you first visit, you can decline, and you can change your mind at any time from the link in our footer. Declining doesn’t limit anything you can do or buy here.

We’ll email you about your order whenever there’s something you need to know — that’s part of buying from us and you can’t opt out of it.

For anything else — new collections, early access, offers — we email you only if you asked us to. Every one of those has an unsubscribe link and we act on it immediately.

One exception worth naming: if you enter your email at checkout and don’t finish, we may send you one reminder that your selection is waiting. If you’d rather we didn’t, unsubscribe from it and we won’t do it again.

• Order records — at least 6 years, because tax and accounting law requires it.
• Your account — for as long as you have one.
• Support conversations — 3 years after the conversation closes.
• Marketing list — until you unsubscribe. We keep a record that you unsubscribed so we don’t email you again by mistake.
• Browsing events — 90 days, then deleted automatically.
• Search terms — 12 months. These aren’t linked to your name.
• Abandoned checkouts — 12 months.

Being straight with you: some of these are commitments we’re putting in place alongside this policy rather than describing something already automated. If you want your information gone sooner, ask and we’ll do it.

Under the Nigeria Data Protection Act 2023 you have the right to:

• know what we hold about you and get a copy of it;
• correct anything wrong — most of it you can fix yourself in your account;
• ask us to delete your information, where we have no legal reason to keep it;
• object to how we use it, including for marketing;
• restrict how we use it while a question about it is sorted out;
• withdraw consent at any time, for anything you gave it for;
• take your information elsewhere in a machine-readable format;
• complain to the Nigeria Data Protection Commission if you think we’ve got it wrong.

To close your account or delete your information, email hello@wearzowis.com and we’ll do it within 30 days. We’ll keep your order records, for the tax reason above. For any other request, email the same address — we’ll respond within 30 days and may ask you to confirm who you are first, which is to protect you rather than to slow you down.

Your connection to this site is encrypted. Passwords are handled by our authentication provider and we never see them. Card details never touch our systems. Access to customer information is limited to the people who need it to run the shop.

No system is perfectly secure, and anyone who says otherwise is selling something. If a breach ever puts your information at risk, we’ll notify the Nigeria Data Protection Commission within 72 hours and tell you immediately.

Zowis isn’t intended for children and we don’t knowingly collect information from anyone under 18. If you believe a child has given us their information, email us and we’ll delete it.

If we change this policy we’ll update the date at the top. For anything significant we’ll tell the people on our list directly rather than quietly editing the page.

Zowis Fashion Limited (RC 9040402) · Abuja, Nigeria
hello@wearzowis.com

You also have the right to complain to the Nigeria Data Protection Commission — ndpc.gov.ng.