Privacy Policy

01 Overview

Tommy Footwears ("we", "us", "our") operates the website at https://tommyfootwears.com.ng. This Privacy Policy explains how we collect, use, store, and protect information about you when you visit our site or place an order with us.

By using our website or making a purchase, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use our website.

This policy applies to all personal data collected through our website, WhatsApp order flow, email communications, and any other channel through which you interact with us.

02 What We Collect

We collect only the information necessary to process your orders and improve your experience with us. This falls into two categories:

Information You Give Us Directly

Identity data — your full name.
Contact data — email address, phone number (including WhatsApp number).
Delivery data — your delivery address, city, state, and any delivery instructions.
Order data — products ordered, sizes, quantities, order number, and order history.
Payment data — payment method selected. We do not store card numbers or bank account details. Online payments are handled entirely by Paystack on their secure servers.
Communication data — messages you send us via WhatsApp, email, or our contact form, including any sizing questions, complaints, or feedback.
Newsletter data — your email address and subscription preferences if you sign up for our mailing list.

Information Collected Automatically

Technical data — your IP address, browser type and version, operating system, and device type.
Usage data — pages visited, time spent on pages, links clicked, and referring URLs.
Cookie data — see the Cookies section below.

We do not collect any special category data (such as health information, biometric data, or government ID numbers).

03 How We Use Your Information

We use your personal information for the following purposes:

To Fulfil Your Order

Process and confirm your order.
Charge your selected payment method.
Arrange delivery and share your address with our logistics partners.
Send you order confirmations, dispatch notifications, and delivery updates via email and WhatsApp.
Handle returns, exchanges, or complaints relating to your order.

To Communicate With You

Respond to your enquiries and support requests.
Send you newsletters, new arrivals, promotions, and special offers — only if you have subscribed or purchased from us. You can unsubscribe at any time.
Send you important service notices (e.g. changes to our policies or website downtime).

To Improve Our Service

Analyse site traffic and usage patterns to improve our website and product listings.
Monitor for fraud, abuse, and security threats.
Comply with our legal and regulatory obligations.

We will only use your personal information for the purposes for which it was collected. If we need to use it for a materially different purpose, we will notify you and, where required, seek your consent.

04 Sharing Your Information

We do not sell, rent, or trade your personal information to any third party. We share your data only in the limited circumstances below:

Delivery partners — we share your name, phone number, and delivery address with our logistics couriers solely to deliver your order.
Payment processors — if you pay online, your payment is processed by Paystack (paystack.com). We share only what is necessary (order total, reference) to initiate the transaction. Paystack's privacy policy governs how they handle your card data.
Email service provider — we use Brevo (formerly Sendinblue) to send transactional and marketing emails. Your email address and name are stored on their platform for this purpose.
Legal obligations — we may disclose your information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights or the safety of others.
Business transfer — if Tommy Footwears is acquired, merged, or its assets transferred, your data may be transferred to the new owner, who will be bound by this policy.

All third parties we work with are required to keep your information confidential and to use it only for the purpose for which it was shared.

05 Cookies

Our website uses cookies — small text files stored on your device — to make the site work properly and to help us understand how visitors use it.

Essential Cookies

These are required for the website to function. They include your session token (keeps you logged in), cart contents, and checkout state. You cannot opt out of these without disabling the site's core functionality.

Analytics Cookies

We may use analytics tools to understand how visitors navigate our site — which pages are popular, where visitors drop off in checkout, and so on. This data is aggregated and anonymised; it is not linked to your personal identity.

Marketing Cookies

We do not currently run retargeting ads. If this changes, we will update this policy and provide an opt-out mechanism.

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking essential cookies will affect the shopping cart and checkout. For instructions, visit your browser's help documentation or aboutcookies.org.

06 Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Order records — retained for a minimum of 6 years to comply with Nigerian tax and financial record-keeping requirements.
Customer accounts — retained for as long as you remain a customer. If you request deletion, we will remove your data within 30 days, except where retention is required by law.
Newsletter subscribers — retained until you unsubscribe. After unsubscribing, your email is removed from active lists within 7 days.
Support communications — retained for 2 years from the date of the last interaction.
Website analytics data — retained in aggregated, anonymised form indefinitely.

07 Your Rights

You have the following rights regarding your personal data. To exercise any of these rights, contact us at hello@tommyfootwears.com.ng and we will respond within 30 days.

Access — you can request a copy of the personal data we hold about you.
Correction — you can ask us to correct inaccurate or incomplete data.
Deletion — you can ask us to delete your personal data. We will do so unless retention is required by law (e.g. for tax records).
Objection to marketing — you can opt out of marketing emails at any time using the unsubscribe link in any email, or by contacting us directly. Opting out of marketing does not affect transactional communications about active orders.
Data portability — you can request your order data in a machine-readable format (CSV or JSON).
Withdrawal of consent — where we process data based on your consent (e.g. newsletter), you may withdraw consent at any time without affecting the lawfulness of prior processing.

We do not charge a fee to exercise these rights. We may need to verify your identity before processing a request.

08 Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These include:

HTTPS encryption on all pages of the website.
Passwords stored as one-way hashed values — we never store or see your plain-text password.
Payment card data never touches our servers — all card transactions are handled directly by Paystack on their PCI-DSS-certified infrastructure.
Admin access protected by strong passwords and session expiry controls.
Database access restricted to authorised personnel only.

Despite these measures, no method of transmission over the internet is 100% secure. We cannot guarantee the absolute security of your data, but we will notify you promptly in the event of a data breach that affects your personal information.

09 Third-Party Links & Services

Our website may contain links to external websites (for example, our social media profiles on Instagram and TikTok). These sites have their own privacy policies, which we have no control over and take no responsibility for. We encourage you to review the privacy policies of any third-party site you visit.

Our WhatsApp order flow uses Meta's WhatsApp platform. When you message us on WhatsApp, your messages are subject to Meta's privacy policy in addition to ours. We only use WhatsApp for order-related communication and we do not share or export your WhatsApp conversation data.

10 Children's Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hello@tommyfootwears.com.ng and we will delete the data promptly.

Orders for children's footwear must be placed by a parent or adult guardian who agrees to these policies on behalf of the child.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or a notice on our website.

We encourage you to review this policy periodically. Continued use of the website after changes are posted constitutes your acceptance of the revised policy.

12 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your data, please contact our data controller:

Name: Adeagbo Tomiwa — Founder, Tommy Footwears
Email: hello@tommyfootwears.com.ng
WhatsApp: +234 811 951 0481
Website: https://tommyfootwears.com.ng/contact.php

We take privacy complaints seriously and will investigate and respond to all complaints within 14 business days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

Tommy Footwears is operated by Adeagbo Tomiwa, Lagos, Nigeria.
This Privacy Policy was last revised in May 2026.