Privacy Policy
Privacy policy
This policy explains what we do with your personal data. It is written to comply with the Nigeria Data Protection Act 2023.
Who is the data controller
DEX EMPIRE LIMITED, trading as The Scents. Data protection queries go to info@thescents.co.za.
What we collect, why, and on what basis
| Data | Purpose | Lawful basis (section 25, NDPA) |
|---|---|---|
| Name, delivery and billing address, email, telephone | To take, fulfil and deliver your order | Performance of a contract |
| Order and payment history | Returns, warranty claims and accounting | Contract, and compliance with a legal obligation |
| Wholesale account details, including business registration | To assess and operate a wholesale account | Contract, and our legitimate interest in trading with genuine businesses |
| Email address, if you ask for offers | Marketing you asked for | Your consent, withdrawable at any time |
| IP address, browser, pages viewed | Keeping the site working and secure | Our legitimate interest in site security |
What we never do
We do not sell your personal data. We do not rent it, trade it, or pass it to anyone for their own marketing.
Payment details
We never see or store your card number. Card payments are handled entirely by our payment provider on their own systems. We receive only confirmation of success or failure, and the last digits of the card for reconciliation.
Who we share it with
Only those who need it to complete your order: our carrier, our payment provider, and our accountants and auditors where law requires records. Each acts as a data processor under a written contract and may use the data only on our instructions.
Transfers outside Nigeria
The Scents operates storefronts in South Africa, Ireland and the United Kingdom as well as Nigeria, and some service providers are outside Nigeria. Where personal data is transferred out we rely on Part IX of the NDPA and satisfy ourselves that the destination provides an adequate level of protection, or that one of the permitted grounds in section 43 applies.
How long we keep it
Order records are kept for six years from the end of the tax year they fall in, because tax and company law require it. Marketing consents are kept until withdrawn. Wholesale account records are kept while the account is open and for six years after it closes.
Your rights under the NDPA
You have the right to be informed, to access your data, to have it rectified or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. Write to info@thescents.co.za. We respond within one month.
If you are not satisfied, you may complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
Cookies
We use cookies that are strictly necessary for the site to function: keeping you signed in, remembering your cart, and holding your currency and market choice. We do not set advertising or cross-site tracking cookies. The site also stores, in your own browser rather than on our servers, whether you have dismissed the market suggestion bar or the welcome message.
Security
The site is served over HTTPS. Access to customer records is limited to staff who need it, and the platform is kept patched and monitored. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission within 72 hours as section 40 of the NDPA requires, and tell you where the risk to you is high.