Privacy Policy

1. Introduction

Revitalise Keratin ("we", "our", "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our platform, website and services.

We operate in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Nigeria Data Protection Regulation (NDPR).

2. Data We Collect

We collect the following categories of personal data:

• Account Information: Name, email address, phone number, business name, address, Instagram handle, role
• Business Data: Business registration numbers, salon details, territory assignments
• Order Data: Purchase history, payment information, delivery details, invoice records
• Verification Data: Identity documents uploaded for professional verification
• Usage Data: Login activity, page visits, feature usage, device and browser information
• Communication Data: Messages sent through the platform, WhatsApp interactions, email correspondence

3. How We Use Your Data

We use your personal data for the following purposes:

• Creating and managing your account
• Processing and fulfilling orders
• Generating invoices and financial records
• Verifying your professional identity and qualifications
• Sending transactional emails (order confirmations, verification codes, password resets)
• Providing customer support and communication
• Managing the loyalty and rewards programme
• Analysing platform usage to improve our services
• Sending marketing communications (with your consent)
• Complying with legal obligations

4. Email Communications

We use email to send:

• Account verification and security codes
• Order status updates and invoice attachments
• Password reset instructions
• Staff invitation notifications
• Platform updates and announcements

Our email service is powered by Resend. You may unsubscribe from marketing emails at any time, but transactional emails related to your account and orders cannot be opted out of.

5. Payment Data

We collect payment method preferences and payment confirmation details to process orders. We do not store full credit card numbers or banking credentials on our platform. Payment references and confirmation records are retained for accounting and audit purposes.

6. Data Storage & Security

Your data is stored securely using industry-standard encryption and access controls. We implement:

• Encrypted data transmission (HTTPS/TLS)
• Secure password hashing (bcrypt)
• Role-based access controls limiting data visibility
• Regular security audits and monitoring

7. Data Sharing

We do not sell your personal data. We may share data with:

• Service Providers: Email delivery (Resend), messaging (Twilio), hosting infrastructure
• Sales Representatives: Salon contact information necessary for order management
• Legal Authorities: When required by law or to protect our rights

8. Your Rights (UK GDPR)

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Restriction: Request limitation of processing
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing for marketing purposes

To exercise any of these rights, contact us at info@revitalisekeratin.com.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Financial records (orders, invoices) are retained for a minimum of 6 years for accounting compliance. You may request account deletion at any time.

10. Cookies & Tracking

We use essential cookies and local storage to maintain your session and preferences. We do not use third-party advertising trackers.

11. Children's Privacy

Our platform is intended for professional use by adults only. We do not knowingly collect data from individuals under 18 years of age.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or platform notification. Continued use of the platform after changes constitutes acceptance.

13. Contact Us

For privacy-related enquiries: