Privacy Policy

1. Introduction

At MODABAY ("we", "our", or "us"), protecting your privacy and personal data is fundamental to how we design our experiences. This Privacy Policy outlines our transparent practices regarding the collection, storage, processing, and protection of personal information when you visit our website, register an account, or interact with our personalized digital catalog.

2. Information We Collect

We collect information you provide directly to us as well as data gathered automatically as you interact with our platform:

• Account & Profile Information: First and last name, email address, telephone number, encrypted password, gender, age group, and style interests/hobbies selected during registration.
• Order & Delivery Data: Delivery addresses, city, state, postal information, order items, quantities, and delivery notes.
• Payment Verification: Transaction references, payment methods, and timestamps. Note: Sensitive credit/debit card numbers are tokenized and processed securely by our certified PCI-DSS payment partner (Paystack) and are never stored on MODABAY servers.
• Customer Feedback: Product reviews, star ratings, and optional user-submitted product photos.

🧠 3. AI Behavioral Tracking & Personalization Disclosure

MODABAY incorporates an advanced AI Style Recommendation Engine. To offer meaningful, tailored outfit discovery, our system tracks 13 specific user activities:

Data Anonymization: When candidate items are sent to our Google Gemini AI models for continuous personalization, prompts contain strictly anonymized behavioral tokens and catalog attributes. No personal identifiers (such as your full name, email, or telephone number) are ever shared with artificial intelligence model providers.

4. How We Use Your Data

We process your personal information for legitimate business purposes, including:

• Fulfilling, shipping, and confirming your purchases.
• Personalizing your home feed, category suggestions, and style recommendations.
• Sending important order status updates and delivery notifications.
• Preventing fraudulent orders and maintaining platform security.
• Continuously refining and improving our catalog navigation and site speed.

5. Cookies & Session Storage

We use essential session cookies configured with HttpOnly and SameSite=Lax security flags to maintain your logged-in session, shopping cart items, and CSRF protection tokens. We also utilize local storage to remember your recent search keywords on your device. You may disable cookies in your browser settings, though certain interactive features like cart checkout may be affected.

6. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We only share necessary data with trusted third-party service providers bound by strict confidentiality agreements:

• Payment Processors: Paystack Payments Limited for processing debit/credit cards and bank transfers.
• Logistics Partners: Courier and fulfillment teams to deliver your parcels.
• Legal Authorities: Solely when strictly required by applicable Nigerian law or court orders.

7. Your Legal Rights

Under the Nigeria Data Protection Act (NDPA) and applicable privacy laws, you possess the right to:

• Access a copy of the personal information we hold about you.
• Request corrections to inaccurate personal details via your Customer Profile.
• Request erasure of your account and associated browsing history.
• Opt out of marketing communications at any time.

8. Contact Our Data Protection Officer

If you have questions, feedback, or requests regarding this Privacy Policy or how your data is handled, please contact our Data Protection Officer: