Privacy notice

The6814 is the data controller for the personal data described here. For anything on this page — including a request to see or delete your data — write to the6814shop@gmail.com.

We only collect what an order or an account actually needs.

• Contact and delivery details. Your name, email, phone number, and delivery address — so we can price shipping, deliver the order, and tell you where it is. Kept for seven years because tax law requires us to keep order records.
• Your account. Your email and a securely hashed password. We never store your password in a readable form.
• Orders. What you bought, what you paid, and the status of the order, so you and our support team can both see your history.
• Cart and wishlist. The items you save. If you are signed out these stay in your own browser or phone; if you are signed in we store them on your account so they follow you between devices.
• Reviews. If you write one, the name you give and the text you write are published on the product page.
• Photos you search with. If you use image search, your photo is analysed in memory and thrown away immediately. We never store it, never log it, and never share it. Only the list of matching products comes back.
• Push notifications (app). If you allow them, we store your device's notification token so we can tell you when your order is paid, shipped, or delivered. Turning notifications off, or signing out, removes it.
• Technical logs and analytics. Standard server logs and aggregate page-view statistics. Our analytics is cookieless and does not identify or follow you across other websites.

We never see your card details. Payments are taken on Paystack’s or Flutterwave’s own secure page. They send us back only a reference and whether the payment succeeded, and we confirm every payment directly with them on our server before marking an order paid. Your card number, CVV, and PIN never reach our systems.

We use only what the store needs to work: a secure sign-in cookie (which page scripts cannot read) and your cart and wishlist saved in your own browser or app. We do not use advertising or tracking cookies, and our page-view analytics sets no cookie at all — so we never ask you to accept those.

Live chat is the one exception. Our chat provider sets its own cookies to keep a conversation going, so we do not load it until you open chat. Until you press that button nothing of theirs runs on the page and no cookie of theirs is set — which is why you are not asked to dismiss a cookie banner to browse. Opening chat is what turns it on; if you would rather not, the message form reaches us just as well.

Only the suppliers that make the store work, and only for that purpose: our hosting providers (Hostinger and Vercel), our payment providers (Paystack and Flutterwave), our email provider, our live chat provider, and the courier that delivers your parcel. We do not sell your data, and we do not share it for advertising.

If you start a live chat while signed in, we pass our support team the product you were looking at and a short summary of your own account — your name, email, how many orders you have placed, and the most recent one — so you don’t have to repeat it. That only happens once you open live chat yourself.

Some of these providers operate outside Nigeria, so your data may be processed abroad. Where that happens we rely on the contractual data protection terms each provider commits to.

Under the Nigeria Data Protection Act you can ask us to: show you the data we hold about you, correct it, delete it, stop or limit how we use it, send it to you in a portable form, or withdraw a consent you gave.

Email the6814shop@gmail.com and we will respond within one month. We may ask you to confirm your identity first — usually by writing from the email address on your account.

One thing we cannot do is erase completed orders outright: tax law requires us to keep those records for seven years. In that case we remove your personal details from them instead.

If you are not satisfied with how we handle your request, you can complain to the Nigeria Data Protection Commission.

The whole site runs over an encrypted connection. Sign-in tokens are stored in a way page scripts cannot read. Every payment is verified against the payment provider on our server, so a tampered link can never mark an order as paid. Our administrative keys are stored as protected environment settings, never in our code.

If we change how we handle personal data we will update this page and the date at the top. Significant changes will be announced on the site.