Privacy Policy
Last updated: June 2026
1. Who We Are
Ncollection ("we", "us", "our") is an independent womenswear boutique based in Eswatini.
Address: Valley View Centre – Shop No. 5A, Nando's Block, Ezulwini, Eswatini
Contact: +268 7964 9172
Email: [Insert email address]
2. What Personal Data We Collect
We collect only the information necessary to process your order and provide you with a personalised shopping experience:
- Identity Information: first name, last name.
- Contact Information: email address, phone number.
- Order Information: products purchased, sizes, quantities, order total, order status.
- Payment Information: we do not store credit card details. Bank transfer is our sole payment method. Proof of payment files you upload are stored on our image hosting service (ImageKit).
- Communication: any notes or messages you include with your order.
- Newsletter: email address if you subscribe to our mailing list.
3. How We Collect Your Data
- Directly from you: when you place an order, fill in the contact form, subscribe to our newsletter, or communicate with us via WhatsApp or phone.
- Automatically: we use cookies and similar technologies to improve your browsing experience (see Section 8).
4. Why We Process Your Data & Legal Basis
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Process and fulfil your order | Name, email, phone, order details, proof of payment | Performance of a contract |
| Send order updates via WhatsApp or email | Phone number, email, order status | Performance of a contract / legitimate interest |
| Respond to your enquiries | Name, email, phone, message content | Legitimate interest |
| Send marketing newsletters (if you subscribe) | Email address | Consent |
| Improve our website and customer experience | Browsing behaviour, device information | Legitimate interest |
| Comply with legal obligations (e.g. tax records) | Order data, customer information | Legal obligation |
5. Who We Share Your Data With
We do not sell your personal data to third parties. We share data only with trusted service providers who help us operate our business:
- ImageKit (imagekit.io) — stores product images and proof of payment files. Their servers are located globally. ImageKit Privacy Policy
- Supabase (supabase.com) — our database hosting provider. Supabase Privacy Policy
- WhatsApp / Meta (if notification integration is active) — used to send order confirmation and status updates. Meta Privacy Policy
- Railway (railway.com) — our hosting platform. Railway Privacy Policy
We may also share data if required by law, or to protect our rights and safety.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this policy:
- Order data: retained for 5 years after the order is completed (to comply with tax and accounting obligations).
- Newsletter subscription: retained until you unsubscribe.
- Enquiries: retained for 1 year after the last communication.
After these periods, your data is deleted or anonymised.
7. Your Rights
You have the following rights regarding your personal data:
- Right of access: request a copy of the data we hold about you.
- Right to rectification: request correction of inaccurate data.
- Right to erasure: request deletion of your data (subject to legal retention obligations).
- Right to restrict processing: request that we limit how we use your data.
- Right to data portability: request a copy of your data in a machine-readable format.
- Right to object: object to processing based on legitimate interests or direct marketing.
- Right to withdraw consent: at any time, for processing based on consent (e.g. newsletter).
To exercise any of these rights, contact us at [Insert email address] or +268 7964 9172. We will respond within 30 days.
8. Cookies
Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and remember your preferences.
Essential cookies: required for the shopping cart and session to function. These cannot be disabled.
Analytics cookies: we may use analytics to understand how visitors interact with our site. You can opt out of these in your browser settings.
Most browsers allow you to control cookies through their settings. Please note that disabling certain cookies may affect the functionality of our website.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:
- HTTPS encryption on all pages.
- Secure database hosting with access controls.
- Limited staff access to personal data on a need-to-know basis.
However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
10. Third-Party Links
Our website may contain links to third-party sites (e.g. social media platforms). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any personal data.
11. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their data, please contact us so we can delete it.
12. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
13. Contact Us
If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:
- Phone / WhatsApp: +268 7964 9172
- Email: [Insert email address]
- In person: Valley View Centre – Shop No. 5A, Nando's Block, Ezulwini, Eswatini