Privacy Policy

Chamelioni Enterprises Ltd. ("Chamelioni", "we", "us") makes custom furniture and runs this website. We are based in Yaba, Lagos, Nigeria, and we are responsible for the personal information described in this policy.

You can reach us about anything in this policy at hello@chamelioni.com.

Information you give us

• Your account: your name, email address, phone number and password. If you sign in with Google, Google shares your name, email address and profile photo with us.
• Your orders: the pieces you order, your delivery address, phone number and any delivery notes.
• Your custom requests: the photos, sketches, descriptions, measurements, materials, colours and budget you send us when you upload a design, sketch one or describe your vision.
• Messages: what you write to us through the contact form, Book a Call, reviews and email.
• Newsletter: your email address, if you subscribe.

Information collected automatically

• Payments: payments are handled by Paystack. We receive a payment reference and whether the payment succeeded. We never see or store your card details.
• Using the site: pages visited, the type of device and browser, and how long pages take to load. We use this to keep the site fast and working.
• Sign-in and cart: small files on your device keep you signed in and remember what is in your cart.

We use your information to:

• make your furniture, send you quotes and keep you updated on your order;
• arrange delivery and contact you about it;
• take payment and keep records of what you bought;
• answer your messages and consultation requests;
• send our newsletter, only if you asked for it;
• keep the site secure and stop fraud;
• improve our products and the site.

We will not use your information for anything unrelated to these purposes without telling you first.

The Nigeria Data Protection Act 2023 requires a lawful reason for each use of your information. Ours are:

• To carry out our agreement with you: making, delivering and supporting your order.
• Your consent: for the newsletter and any marketing. You can withdraw it at any time, and doing so does not affect anything we did before.
• Our legitimate interests: keeping the site secure, preventing fraud and improving our service, always balanced against your rights.
• The law: keeping tax and accounting records and responding to lawful requests from the authorities.

We never sell your personal information. We share it only with people who help us serve you, and only what they need:

• Our artisans: the details of the piece they are making. They do not receive your payment information.
• Delivery partners: your name, phone number, delivery address and delivery notes.
• Service providers who run parts of the site for us: Supabase (accounts and database), Vercel (website hosting and speed measurements), Cloudinary (storing the photos and sketches you upload), Paystack (payments), SendGrid (emails) and Google (if you choose to sign in with Google).
• The authorities, when the law requires it.

Each provider may use your information only to provide its service to us.

Some of our service providers store information on servers outside Nigeria. Our database is hosted in Ireland in the European Union, and some providers also use servers in the United States.

When your information leaves Nigeria, we only use providers that protect it to a standard the Nigeria Data Protection Act 2023 accepts, through the law of the country concerned or through binding agreements with the provider.

• Your account: for as long as you have an account. If you ask us to delete it, we delete or anonymise your details, except what the law requires us to keep.
• Orders and payments: for as long as Nigerian tax and company law requires us to keep business records.
• Custom request photos and sketches: for as long as we need them to make and support your piece, then deleted.
• Newsletter: until you unsubscribe.
• Messages: for up to two years after the conversation ends, unless they relate to an order.

Under the Nigeria Data Protection Act 2023 you have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct anything that is wrong or incomplete;
• ask us to delete your information;
• object to, or ask us to limit, how we use it;
• withdraw your consent at any time, where we rely on consent;
• receive your information in a format you can take to another provider;
• not be subject to decisions made only by a computer. We do not make such decisions.

To use any of these rights, email hello@chamelioni.com. We may ask you to confirm who you are, and we will reply within one month.

If you are unhappy with how we handle your information, please tell us first so we can put it right. You can also complain to the Nigeria Data Protection Commission (NDPC).

We use only what the site needs to work:

• Essential: keeps you signed in and remembers your cart and your choices on the site. The site cannot work properly without these.
• Performance: measures how fast pages load so we can keep the site quick. This does not identify you and is not used for advertising.

We do not use advertising cookies, and we do not let advertisers track you on our site.

• Everything you send to the site travels over an encrypted connection.
• Passwords are stored by our sign-in provider in a form that cannot be read back, not even by us.
• Each customer can only see their own orders and details. This is enforced by the database itself, not only by the website.
• Only staff who need access to do their work can see customer information.

No system is perfectly secure. If a breach ever puts your information at risk, we will tell you and the authorities as the law requires.

Our site and services are for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

We may update this policy as our services or the law change. The date at the top shows when it last changed. If we make an important change, we will tell you by email or with a notice on the site.

Questions, requests or concerns about your privacy: email hello@chamelioni.com or write to Chamelioni Enterprises Ltd., Yaba, Lagos, Nigeria.