Privacy Policy

Esprito Royale Collective (Business Name Registration No. 9673596) is the data controller responsible for your personal data, operating at esprito.com.ng.

For any question, request, or complaint about your data, contact privacy@esprito.com.ng.

We collect only what we need in order to sell you shoes and deliver them:

• Your name — to address you, and so the courier knows who to deliver to
• Email address — for order confirmations, delivery updates, and signing in
• Phone number — so the courier can reach you on the day
• Delivery and billing addresses — to deliver your order and calculate the correct delivery fee
• Order history — so you can see past purchases, and so we can handle returns and warranty questions

• To process and deliver your orders — the contract between us
• To send transactional messages: order confirmations, dispatch notices, delivery updates
• To manage your account, including sign-in and password resets
• To handle returns, refunds, and customer support
• To detect and prevent fraud
• To meet our legal and tax obligations
• To understand which products sell, using aggregated figures rather than individual behaviour
• To measure whether our advertising on Facebook and Instagram works, and to show our adverts to people more likely to be interested

We send marketing email only if you subscribe, and every such message carries a one-click unsubscribe link. Subscribing is never a condition of buying.

We do not sell your personal data. We never have and we do not intend to. We share it only with the service providers who make the shop function:

Each acts on our instructions and is bound to protect your data. We may also disclose information where the law requires it.

As we grow into a curated marketplace, we will share only what an approved seller needs to fulfil your order — your name, delivery address, and the items ordered. We will update this policy and tell you before that begins.

• Account details: while your account is open, and for a reasonable period afterwards
• Order records: as long as Nigerian tax and accounting law requires
• Marketing subscriptions: until you unsubscribe
• Support correspondence: typically two years

Under the Nigeria Data Protection Act, you have the right to:

• Ask what personal data we hold about you, and receive a copy
• Have inaccurate information corrected
• Ask us to delete your data, where no legal obligation requires us to keep it
• Object to how we are using it, or ask us to restrict that use
• Withdraw consent to marketing at any time, and opt out of advertising measurement as described under Advertising
• Receive your data in a portable format
• Complain to the Nigeria Data Protection Commission if you believe we have got it wrong

To exercise any of these, email privacy@esprito.com.ng. We will respond within 30 days. You can also update your details and addresses yourself at any time under your account.

• The entire site runs over encrypted HTTPS connections
• Passwords are hashed with argon2id — we cannot read them, even internally
• Card details never reach our systems; Paystack handles them directly
• Administrative access is restricted and every sensitive action is logged
• Our database is not reachable from the public internet

No system is perfectly secure, and we will not claim otherwise. If a breach ever affects your data, we will tell you and the relevant authority promptly.

We advertise on Facebook and Instagram. To know whether those adverts are worth running, this site uses the Meta Pixel, a small script from Meta that records when you view a page, look at a product, add something to your bag, or complete an order. Meta uses this to report which adverts led to sales, and to decide who else to show our adverts to.

When you place an order, our server also sends Meta a record of the purchase together with a hashed version of your email, phone number, name, city, and state. Hashing turns each value into a fixed scramble that cannot be reversed; Meta can only compare it against the same scramble of details it already holds for its own users. Your card details, delivery address, and order history are never sent.

You can opt out in three ways: use a browser or ad-blocking extension that blocks the Meta Pixel (the shop works normally without it); decline advertising cookies in your browser settings; or adjust how Meta uses data from other websites under your Facebook ad settings. Meta's own handling of this data is described in the Meta Privacy Policy.

Essential cookies keep you signed in and remember your bag between visits. Blocking them will prevent sign-in and checkout from functioning.

Advertising cookies are set by the Meta Pixel described above (_fbp and, if you arrived from a Meta advert, _fbc). They let Meta recognise the same browser across visits and connect a purchase to the advert that led to it. The shop works fully without them.

We use no other analytics or cross-site tracking cookies.

This shop is intended for adults. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will remove it.

As we add services — additional payment methods, international delivery, marketplace sellers — we will update this policy and revise the date above. Material changes affecting how we use your data will be communicated to you directly.