Login

Privacy Policy

Babyducts is committed to respecting and protecting your privacy and ensuring that your personal information is processed lawfully, fairly, transparently, securely, and responsibly.

Part I — Introduction, Definitions, Application and Data Controller Information

Welcome to Babyducts.

Babyducts ("Babyducts", "we", "our", or "us") is committed to respecting and protecting your privacy and ensuring that your personal information is processed lawfully, fairly, transparently, securely, and responsibly.

As a technology-enabled maternal and child care platform, Babyducts processes personal information in the course of providing products and services to expectant mothers, parents, caregivers, families, healthcare professionals, institutions, partners, and other users.

This Privacy Policy explains:

  • what personal data we collect;
  • why we collect it;
  • the lawful bases on which we process it;
  • how we use and protect it;
  • when we share it;
  • how long we retain it;
  • your rights regarding your personal data; and
  • how you may contact us regarding privacy matters.

This Privacy Policy applies whenever you interact with Babyducts through any of our products, services, platforms, websites, mobile applications, customer support channels, social media channels, artificial intelligence services, community platforms, or any other services operated by Babyducts.

We encourage you to read this Privacy Policy carefully before using any Babyducts Service.

Privacy is a fundamental part of the trust our customers place in Babyducts. Accordingly, Babyducts is committed to:

  • processing personal data in accordance with applicable data protection laws;
  • collecting only personal data that is reasonably necessary for specified and legitimate purposes;
  • implementing appropriate technical and organisational measures to safeguard personal data;
  • respecting the rights of data subjects;
  • ensuring accountability throughout our data processing activities; and
  • continuously improving our privacy and information security practices.

Where we engage third parties to process personal data on our behalf, we take reasonable steps to ensure that they provide appropriate safeguards and process personal data only in accordance with our instructions and applicable law.

This Privacy Policy has been developed having regard to applicable data protection and privacy laws, including, where applicable:

  • the Nigeria Data Protection Act, 2023 (NDPA);
  • regulations, directives, and guidance issued by the Nigeria Data Protection Commission (NDPC);
  • other applicable laws and regulations governing the protection of personal data in jurisdictions where Babyducts operates or provides services.

Where there is any conflict between this Privacy Policy and applicable law, the applicable law shall prevail to the extent of the inconsistency.

This Privacy Policy applies to personal data processed by Babyducts in connection with:

Digital Platforms

  • the Babyducts website;
  • customer accounts;
  • mobile applications;
  • customer portals;
  • online stores;
  • payment portals;
  • digital forms;
  • customer dashboards;
  • APIs made available by Babyducts.

Products

Including but not limited to:

  • maternity hospital packs;
  • newborn essentials;
  • mother and baby products;
  • curated product bundles;
  • subscription products;
  • digital products;
  • future Babyducts products.

Services

Including but not limited to:

  • e-commerce services;
  • customer support;
  • order fulfilment;
  • delivery coordination;
  • educational resources;
  • webinars;
  • newsletters;
  • loyalty programmes;
  • promotional campaigns;
  • referral programmes;
  • product recommendations;
  • community services;
  • healthcare partnership programmes;
  • employer programmes;
  • corporate programmes;
  • future Babyducts services.

Artificial Intelligence Services

Including:

  • Big Mummy AI;
  • AI chat assistants;
  • recommendation engines;
  • customer support automation;
  • future AI-powered services.

Communications

Including communications through:

  • email;
  • WhatsApp;
  • SMS;
  • telephone;
  • social media;
  • live chat;
  • customer support;
  • surveys;
  • feedback channels.

This Privacy Policy applies to every individual whose personal data is processed by Babyducts, including:

  • customers;
  • prospective customers;
  • registered users;
  • website visitors;
  • parents;
  • expectant mothers;
  • caregivers;
  • guardians;
  • healthcare professionals using Babyducts services;
  • corporate customers;
  • hospital partners;
  • HMO partners;
  • community members;
  • AI users;
  • event participants;
  • competition entrants;
  • newsletter subscribers;
  • any other person interacting with Babyducts.

Unless the context otherwise requires, the following definitions apply throughout this Privacy Policy.

"Personal Data"

Any information relating to an identified or identifiable natural person, whether directly or indirectly, including information that can reasonably be linked to an individual.

"Sensitive Personal Data"

Personal data requiring a higher level of protection under applicable law. Depending on the circumstances and applicable legal requirements, this may include health-related information, biometric information, or other categories of data afforded additional protection.

"Processing"

Any operation performed on personal data, whether by automated or non-automated means, including collection, recording, organisation, storage, alteration, retrieval, consultation, use, disclosure, transmission, sharing, restriction, erasure, destruction, or any other operation performed on personal data.

"Data Subject"

An individual whose personal data is processed by Babyducts.

"Data Controller"

The person or organisation that determines the purposes and means of processing personal data.

For the purposes of the Services covered by this Privacy Policy, Babyducts acts as the Data Controller unless otherwise stated.

"Data Processor"

A person or organisation that processes personal data on behalf of the Data Controller.

Babyducts may engage carefully selected Data Processors to support the delivery of our Services.

"Third Party"

Any person or organisation other than:

  • Babyducts;
  • the Data Subject;
  • persons acting under the direct authority of Babyducts.

"Platform"

Any website, mobile application, portal, software, digital interface, or technology operated by or on behalf of Babyducts.

"Services"

All products, digital services, physical services, technologies, community offerings, AI services, educational resources, and future offerings provided by Babyducts.

For the purposes of applicable data protection laws, the Data Controller responsible for processing personal data under this Privacy Policy is:

Where Babyducts appoints a Data Protection Officer ("DPO") or another designated privacy contact under applicable law, this Privacy Policy will be updated with the relevant contact details.

Babyducts is committed to integrating privacy considerations into the design, development, implementation, and operation of our products and services.

We seek to implement appropriate governance measures that promote responsible handling of personal data throughout its lifecycle. These measures may include:

  • internal privacy policies and procedures;
  • employee awareness and training;
  • role-based access controls;
  • appropriate contractual safeguards with service providers;
  • information security measures;
  • risk assessments where appropriate;
  • ongoing review of our privacy practices.

Privacy and data protection are considered throughout the planning and delivery of new products, technologies, and services.

By creating a Babyducts account, placing an order, using our Platform, interacting with our AI Services, participating in our community, communicating with us, or otherwise providing your personal data to Babyducts, you acknowledge that you have read and understood this Privacy Policy.

Where processing is based on your consent, we will request your consent in accordance with applicable law. You may withdraw your consent at any time where consent is the lawful basis for processing, without affecting the lawfulness of processing carried out before such withdrawal.

Where another lawful basis applies under applicable law, Babyducts may continue to process personal data to the extent permitted or required by law.

Part II — Personal Data We Collect, Sources of Personal Data, and Lawful Bases for Processing

The categories of personal data Babyducts collects depend on how you interact with our Services. We are committed to collecting only personal data that is adequate, relevant, and limited to what is necessary for the purposes described in this Privacy Policy and in accordance with applicable law.

We may collect the following categories of personal data.

A. Identity Information

We may collect information that identifies or relates to you, including:

  • Full name
  • Preferred name
  • Gender
  • Date of birth
  • Photograph or profile image (where voluntarily provided)
  • Customer identification number
  • Account username
  • Account credentials (stored in encrypted or hashed form where applicable)

B. Contact Information

To communicate with you and deliver our Services, we may collect:

  • Email address
  • Mobile phone number
  • WhatsApp phone number
  • Residential address
  • Delivery address
  • Billing address
  • State of residence
  • Country of residence
  • Postal code (where applicable)
  • Emergency contact information (where voluntarily provided)

C. Account Information

When you create or maintain a Babyducts account, we may collect:

  • Account registration details
  • Password (stored securely in encrypted or hashed form)
  • Login history
  • Authentication records
  • Password reset history
  • Device sessions
  • Account preferences
  • Saved delivery addresses
  • Saved shopping preferences
  • Wishlist information
  • Loyalty or rewards information (where applicable)

D. Order and Transaction Information

When you purchase products or services through Babyducts, we may collect:

  • Products purchased
  • Quantity ordered
  • Order history
  • Delivery preferences
  • Order value
  • Discounts applied
  • Coupons redeemed
  • Invoice information
  • Refund history
  • Exchange requests
  • Return requests
  • Customer service records relating to purchases

E. Payment Information

Payments made through Babyducts are processed by licensed third-party payment providers. Babyducts does not intentionally store complete payment card details.

Depending on the payment method used, we may receive information such as:

  • Payment reference number
  • Transaction identifier
  • Payment confirmation
  • Payment status
  • Payment method
  • Amount paid
  • Currency
  • Billing verification status

F. Pregnancy and Parenting Information

To personalize our Services and improve customer experience, you may voluntarily provide information including:

  • Pregnancy status
  • Expected delivery date
  • Pregnancy trimester
  • Number of children
  • Baby's date of birth
  • Baby's age
  • Baby's gender (if known)
  • Parenting preferences
  • Feeding preferences
  • Hospital bag preferences
  • Product preferences
  • Shopping preferences

Providing this information is generally optional unless required for a specific service requested by you.

G. Health-Related Information

Certain Babyducts Services may involve the collection of limited health-related information that you voluntarily choose to provide. Examples may include:

  • Pregnancy-related information
  • Delivery-related preferences
  • Mother and baby wellness information
  • Product suitability information
  • Information shared with customer support
  • Information voluntarily shared with Big Mummy AI

Where health-related information constitutes sensitive personal data under applicable law, Babyducts will process such information only where an appropriate lawful basis exists. Babyducts does not operate as a healthcare provider unless expressly stated for a specific service.

H. AI Interaction Information

When you use Big Mummy AI or any future AI-powered Babyducts Service, we may process:

  • Questions submitted
  • Prompts entered
  • AI-generated responses
  • User feedback
  • Conversation history
  • Conversation preferences
  • AI feature usage
  • Technical diagnostics necessary to improve AI performance

We encourage users not to disclose unnecessary sensitive personal information during AI interactions.

I. Customer Support Information

When you contact Babyducts, we may collect:

  • Customer enquiries
  • Complaint records
  • Support tickets
  • Email correspondence
  • Telephone records
  • Live chat history
  • WhatsApp conversations
  • Social media messages
  • Feedback
  • Survey responses

J. Community Information

Where you participate in Babyducts community features, we may collect:

  • Posts
  • Comments
  • Uploaded content
  • Community profile information
  • Group participation
  • Event participation
  • Reactions
  • Community engagement history

Information shared publicly within community spaces may be visible to other users depending on the nature of the platform.

K. Technical Information

When you access our Platform, we may automatically collect technical information including:

  • IP address
  • Browser type
  • Browser version
  • Device type
  • Operating system
  • Device identifiers
  • Screen resolution
  • Language settings
  • Time zone
  • Network information
  • Application version
  • Error logs
  • Security logs

L. Usage Information

We may collect information about how you interact with Babyducts, including:

  • Pages visited
  • Products viewed
  • Search history
  • Time spent on pages
  • Navigation patterns
  • Shopping cart activity
  • Click behaviour
  • Referral sources
  • Device interactions
  • Feature usage
  • Marketing campaign interactions

Some information processed by Babyducts may qualify as sensitive personal data under applicable law. Examples may include:

  • Pregnancy-related information
  • Mother or infant health information voluntarily provided
  • Information relating to disabilities (where voluntarily provided)
  • Other categories of information afforded enhanced protection under applicable law

Babyducts recognises that sensitive personal data requires a higher standard of protection. Accordingly, we implement additional safeguards appropriate to the nature of the data and process such information only where permitted by applicable law and supported by an appropriate lawful basis.

Babyducts provides products and services intended primarily for parents, expectant mothers, caregivers, guardians, and families.

While our products are intended for babies and children, our Services are generally intended to be used by adults.

We do not knowingly collect personal data directly from children unless:

  • permitted by applicable law;
  • appropriate consent has been obtained where required; or
  • collection is otherwise authorised or required by law.

Information relating to babies or children that is voluntarily provided by a parent or legal guardian is processed only for the purposes of delivering the requested Services.

If Babyducts becomes aware that personal data has been collected directly from a child in circumstances not permitted by applicable law, we will take reasonable steps to delete or otherwise handle that information in accordance with legal requirements.

Babyducts may collect personal data from the following sources.

Information You Provide Directly

This includes information you provide when you:

  • create an account;
  • place an order;
  • contact customer support;
  • communicate with us through WhatsApp;
  • complete online forms;
  • subscribe to newsletters;
  • join our community;
  • interact with Big Mummy AI;
  • participate in surveys;
  • attend Babyducts events;
  • enter competitions or promotions;
  • submit reviews or testimonials.

Information Collected Automatically

We may automatically collect certain information through:

  • cookies;
  • web beacons;
  • analytics tools;
  • server logs;
  • device information;
  • security monitoring tools;
  • website usage technologies.

Further information is available in our Cookie Policy.

Information from Third Parties

Where permitted by law, we may receive personal data from trusted third parties including:

  • payment service providers;
  • logistics providers;
  • identity verification providers;
  • marketing partners;
  • healthcare partners (where you have authorised such sharing);
  • referral partners;
  • technology providers;
  • publicly available sources where appropriate.

Before using personal data obtained from third parties, Babyducts will take reasonable steps to ensure that such processing is lawful.

Babyducts processes personal data only where there is a lawful basis under applicable law. Depending on the circumstances, our lawful basis may include one or more of the following.

A. Performance of a Contract

We process personal data where necessary to:

  • create customer accounts;
  • process orders;
  • deliver products;
  • provide customer support;
  • fulfil subscriptions;
  • provide AI Services requested by users;
  • administer promotions;
  • perform other contractual obligations.

B. Consent

Where required by law, we rely on your consent to:

  • send marketing communications;
  • process certain categories of sensitive personal data;
  • use non-essential cookies;
  • provide optional personalised services;
  • participate in surveys or research;
  • process information for other purposes where consent is the appropriate lawful basis.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

C. Compliance with Legal Obligations

Babyducts may process personal data where necessary to comply with legal or regulatory obligations, including obligations relating to:

  • taxation;
  • accounting;
  • fraud prevention;
  • consumer protection;
  • court orders;
  • lawful requests from competent authorities;
  • regulatory reporting;
  • data protection compliance.

D. Legitimate Interests

Where permitted by applicable law and balanced against your rights and freedoms, Babyducts may process personal data for legitimate interests such as:

  • improving our Services;
  • preventing fraud;
  • maintaining platform security;
  • responding to customer enquiries;
  • conducting internal analytics;
  • improving customer experience;
  • developing new products and services;
  • protecting our legal rights;
  • business continuity;
  • quality assurance;
  • training customer support personnel.

Where we rely on legitimate interests, we take reasonable steps to ensure that such interests do not override your fundamental rights and freedoms.

E. Protection of Vital Interests

In limited circumstances, Babyducts may process personal data where necessary to protect the vital interests of an individual, including situations involving serious threats to life, health, or safety, where permitted by applicable law.

F. Other Lawful Bases

Where applicable law provides additional lawful bases for processing personal data, Babyducts may rely on such lawful bases where appropriate and in accordance with legal requirements.

Part III — How We Use Personal Data, Data Sharing, Third-Party Processors, International Transfers, AI Services, and Cookies

Babyducts processes personal data only for specified, explicit, and legitimate purposes consistent with applicable law. Depending on your interaction with our Services, we may process your personal data for one or more of the following purposes.

A. Account Management

To:

  • create and maintain customer accounts;
  • authenticate users;
  • verify account ownership;
  • manage passwords and login credentials;
  • administer account settings;
  • maintain account security.

B. Order Processing and Fulfilment

To:

  • process purchases;
  • prepare and package orders;
  • coordinate deliveries;
  • process returns and refunds;
  • communicate order updates;
  • resolve order-related enquiries.

C. Customer Support

To:

  • respond to enquiries;
  • investigate complaints;
  • provide technical assistance;
  • improve customer service;
  • maintain customer communication records.

D. Product and Service Delivery

To:

  • deliver products and services requested by customers;
  • personalise product recommendations;
  • provide educational resources;
  • facilitate customer participation in Babyducts programmes;
  • administer loyalty, referral, or rewards programmes where available.

E. Big Mummy AI and Other AI Services

Personal data may be processed to:

  • respond to questions submitted through Big Mummy AI;
  • provide educational information;
  • generate product recommendations;
  • improve user experience;
  • detect misuse or abuse of AI services;
  • maintain system performance and reliability;
  • improve the quality, safety, and effectiveness of our AI services.

AI-generated responses are intended for informational and customer support purposes only and do not replace professional medical advice, diagnosis, or treatment.

Where appropriate, AI interactions may be reviewed by authorised personnel for quality assurance, service improvement, security, or compliance purposes.

F. Communications

To communicate with you regarding:

  • orders;
  • deliveries;
  • account activity;
  • customer support;
  • service announcements;
  • security notifications;
  • product recalls;
  • important operational updates;
  • marketing communications where permitted by law or with your consent.

G. Safety, Security, and Fraud Prevention

To:

  • verify identities;
  • detect fraudulent transactions;
  • investigate suspicious activity;
  • prevent abuse of our Platform;
  • monitor security incidents;
  • protect customers, employees, and business partners;
  • safeguard our systems and infrastructure.

H. Platform Improvement

To:

  • analyse customer behaviour;
  • improve website functionality;
  • improve mobile applications;
  • optimise customer experience;
  • identify technical issues;
  • develop new features;
  • conduct internal research and analytics.

Where reasonably practicable, Babyducts uses aggregated or anonymised information for research and service improvement.

I. Legal and Regulatory Compliance

To:

  • comply with applicable laws;
  • satisfy regulatory requirements;
  • respond to lawful requests from public authorities;
  • exercise or defend legal claims;
  • maintain business records;
  • fulfil accounting and tax obligations.

Where permitted by applicable law or where you have provided your consent, Babyducts may send communications relating to:

  • pregnancy education;
  • parenting information;
  • product launches;
  • special offers;
  • newsletters;
  • promotional campaigns;
  • events;
  • surveys;
  • customer feedback opportunities.

You may withdraw your consent or unsubscribe from marketing communications at any time using the unsubscribe mechanism provided or by contacting Babyducts.

Withdrawal of marketing consent will not affect transactional or service-related communications that are necessary for the provision of our Services.

Babyducts does not sell personal data to third parties.

We disclose personal data only where necessary for legitimate business purposes, to provide our Services, to comply with legal obligations, or with your consent where required.

Depending on the circumstances, we may share personal data with:

  • payment service providers;
  • logistics and delivery partners;
  • cloud hosting providers;
  • technology infrastructure providers;
  • customer relationship management providers;
  • customer support service providers;
  • communication service providers;
  • analytics providers;
  • fraud prevention providers;
  • identity verification providers;
  • healthcare partners where you have requested or authorised the relevant service;
  • insurance partners where applicable;
  • professional advisers;
  • auditors;
  • regulatory authorities;
  • courts or law enforcement agencies where required by law;
  • other parties with your consent or as otherwise permitted by law.

Personal data is disclosed only to the extent reasonably necessary for the relevant purpose.

Babyducts may engage trusted third-party organisations ("Data Processors") to process personal data on our behalf in connection with the delivery of our Services. Examples include providers of:

  • payment processing;
  • cloud infrastructure;
  • website hosting;
  • email delivery;
  • customer support platforms;
  • logistics management;
  • analytics services;
  • cybersecurity services;
  • artificial intelligence infrastructure;
  • software development;
  • customer communications.

Where Babyducts appoints a Data Processor, we take reasonable steps to ensure that the processor:

  • provides sufficient guarantees regarding the protection of personal data;
  • implements appropriate technical and organisational security measures;
  • processes personal data only on documented instructions from Babyducts;
  • maintains confidentiality of personal data;
  • assists Babyducts in meeting applicable legal obligations where appropriate;
  • notifies Babyducts of personal data breaches affecting information processed on our behalf where required by law or contract.

Babyducts remains responsible for ensuring that personal data entrusted to our Data Processors is managed in accordance with applicable data protection laws.

Our Platform may contain links to websites, applications, products, or services operated by independent third parties. These third-party services operate under their own privacy policies and terms.

Babyducts is not responsible for the privacy practices, security, or content of independent third-party services that are not under our control.

We encourage users to review the privacy policies of those third parties before providing personal information directly to them.

Babyducts may engage service providers or technology partners that process personal data in countries outside Nigeria.

Where personal data is transferred internationally, Babyducts will take reasonable steps to ensure that appropriate safeguards are implemented in accordance with applicable data protection laws. Such safeguards may include:

  • contractual data protection obligations;
  • assessment of the recipient's ability to protect personal data;
  • implementation of appropriate technical and organisational security measures;
  • other safeguards recognised under applicable law.

Babyducts seeks to ensure that international transfers do not diminish the level of protection afforded to personal data.

Babyducts uses cookies and similar technologies to improve user experience, maintain security, analyse website performance, personalise content, and support the functionality of our Platform. Cookies may be used to:

  • remember user preferences;
  • maintain login sessions;
  • support shopping cart functionality;
  • improve website performance;
  • analyse traffic;
  • detect fraudulent activity;
  • personalise user experience;
  • measure the effectiveness of marketing campaigns;
  • improve AI and customer support services.

Where required by applicable law, Babyducts will obtain your consent before placing non-essential cookies on your device.

Further information regarding our use of cookies is available in the Babyducts Cookie Policy.

Babyducts may use automated technologies, including artificial intelligence and recommendation systems, to improve customer experience and provide personalised services. Examples may include:

  • recommending products;
  • suggesting hospital pack and maternal/child care items/products options;
  • personalising educational content;
  • identifying relevant parenting resources;
  • detecting suspicious transactions;
  • improving customer support efficiency.

Where automated processing produces legal or similarly significant effects on an individual, Babyducts will implement appropriate safeguards as required by applicable law.

Users may contact Babyducts if they require further information regarding significant automated processing activities affecting them.

Babyducts is committed to collecting and processing only the personal data that is reasonably necessary for the specified purposes described in this Privacy Policy.

We do not knowingly process personal data for purposes that are incompatible with the purposes for which it was originally collected unless permitted or required by applicable law or with your consent where necessary.

Where new processing purposes arise, Babyducts will take appropriate steps to inform affected individuals and obtain consent where required by law.

Part IV — Security, Retention, Your Privacy Rights, Complaints, and Governance

Babyducts is committed to protecting the confidentiality, integrity, and availability of personal data.

We implement reasonable and appropriate technical, organisational, and administrative measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access, or other unlawful processing.

Depending on the nature of the personal data and the risks involved, these measures may include:

  • Encryption of data in transit and, where appropriate, at rest.
  • Secure authentication mechanisms.
  • Password hashing using industry-accepted methods.
  • Role-based access controls.
  • Multi-factor authentication for administrative systems where appropriate.
  • Firewalls and network security controls.
  • Security monitoring and logging.
  • Vulnerability assessments and security testing.
  • Backup and disaster recovery procedures.
  • Secure software development practices.
  • Staff confidentiality obligations.
  • Employee privacy and security awareness training.
  • Physical security measures for facilities where applicable.
  • Controlled access to systems containing personal data.

While Babyducts takes reasonable steps to safeguard personal data, no method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

Babyducts retains personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including to:

  • provide our Services;
  • manage customer accounts;
  • complete transactions;
  • fulfil contractual obligations;
  • provide customer support;
  • comply with legal, tax, accounting, and regulatory obligations;
  • resolve disputes;
  • establish, exercise, or defend legal claims;
  • prevent fraud and abuse;
  • maintain business continuity and operational records.

Retention periods vary depending on the type of information, applicable legal requirements, and the nature of the relationship with Babyducts.

Where personal data is no longer required, Babyducts will securely delete, anonymise, or otherwise dispose of it in accordance with our internal data retention procedures and applicable law.

Babyducts takes reasonable steps to ensure that personal data is accurate, complete, and, where necessary, kept up to date.

We encourage users to promptly update their account information or notify us if any of their personal data changes or becomes inaccurate.

Where Babyducts becomes aware that personal data is inaccurate or incomplete, we will take reasonable steps to correct or update it.

Subject to applicable law, you may have one or more of the following rights in relation to your personal data.

Right to Information

You have the right to be informed about how Babyducts collects, uses, stores, shares, and otherwise processes your personal data.

Right of Access

You may request confirmation of whether Babyducts processes your personal data and, where applicable, request access to such information.

Right to Rectification

You may request correction of inaccurate, incomplete, or outdated personal data held by Babyducts.

Right to Erasure

In certain circumstances, you may request that Babyducts delete your personal data where retention is no longer necessary or where deletion is otherwise required by applicable law. This right is not absolute and may be subject to legal or regulatory obligations requiring continued retention.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

Right to Object

Where permitted by applicable law, you may object to certain categories of processing, including processing carried out on the basis of legitimate interests or for direct marketing purposes. Babyducts will consider such requests in accordance with applicable legal requirements.

Right to Restrict Processing

Where applicable law permits, you may request that Babyducts temporarily restrict certain processing activities while specific issues are being resolved.

Right to Data Portability

Where applicable and technically feasible, you may request a copy of certain personal data you have provided in a structured, commonly used, and machine-readable format.

Rights Relating to Automated Decision-Making

Where applicable law grants such rights and where Babyducts carries out automated processing that produces legal or similarly significant effects, you may request additional information or exercise any rights available under applicable law.

Right to Lodge a Complaint

You have the right to lodge a complaint with Babyducts or with the relevant supervisory authority if you believe your personal data has been processed in a manner inconsistent with applicable law.

To exercise any of your privacy rights, please contact Babyducts using the contact details provided in this Privacy Policy.

To protect your privacy and prevent unauthorised disclosure of personal data, Babyducts may request reasonable information to verify your identity before responding to your request.

We aim to respond within the timeframes required by applicable law.

Where Babyducts is unable to comply with a request, we will provide an explanation where required or appropriate.

Babyducts maintains procedures for identifying, assessing, managing, and responding to personal data breaches.

Where Babyducts becomes aware of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, we will take appropriate action, which may include:

  • investigating the incident;
  • containing and mitigating the impact of the breach;
  • notifying affected service providers where appropriate;
  • notifying affected individuals where required by applicable law;
  • notifying the Nigeria Data Protection Commission or other competent authority where legally required;
  • implementing corrective measures to reduce the likelihood of recurrence.

Babyducts is committed to maintaining an effective privacy governance framework.

Depending on the size, nature, and complexity of our operations, our privacy governance programme may include:

  • privacy policies and procedures;
  • internal data protection standards;
  • employee awareness and training;
  • information security controls;
  • vendor and processor management;
  • contractual privacy obligations;
  • data protection impact assessments where appropriate;
  • records of processing activities where required;
  • privacy risk assessments;
  • periodic policy reviews;
  • incident response procedures;
  • continuous improvement initiatives.

Privacy governance forms an integral part of Babyducts' commitment to responsible business practices.

Babyducts may update this Privacy Policy from time to time to reflect:

  • changes in applicable law;
  • regulatory guidance;
  • technological developments;
  • operational improvements;
  • new products or services;
  • changes to our data processing activities.

Where material changes are made, we will update the "Last Updated" date and, where appropriate, notify users through our Platform, email, or other appropriate communication channels.

Your continued use of the Services following the effective date of the updated Privacy Policy constitutes acknowledgement of the revised Policy, except where additional consent is required by applicable law.

If you have questions, concerns, or requests regarding this Privacy Policy or our processing of personal data, you may contact Babyducts using the details below.

Privacy Enquiries

Email: [email protected]

Customer Support

Email: [email protected]

General Enquiries

Email: [email protected]

Website

www.babyducts.com

Where Babyducts appoints a Data Protection Officer or designated privacy contact, this Privacy Policy will be updated accordingly.

If you believe Babyducts has not handled your personal data in accordance with applicable law, we encourage you to contact us first so that we may have an opportunity to investigate and resolve your concern.

If you remain dissatisfied, you may have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or any other competent supervisory authority with jurisdiction over your complaint.

Nothing in this Privacy Policy limits any statutory rights or remedies available to you under applicable law.

If any provision of this Privacy Policy is held to be invalid, unlawful, or unenforceable, the remaining provisions shall continue in full force and effect to the extent permitted by applicable law.

This Privacy Policy, together with any documents expressly incorporated by reference, including our Cookie Policy and other applicable Babyducts policies, constitutes the complete Privacy Policy governing the processing of personal data by Babyducts.

Where there is any inconsistency between this Privacy Policy and applicable law, the applicable law shall prevail.

By creating a Babyducts account, placing an order, accessing our Platform, interacting with Big Mummy AI, participating in our community, or otherwise using any Babyducts Service, you acknowledge that you have read and understood this Privacy Policy.

Where required by applicable law, Babyducts will obtain your consent before processing personal data where consent is the appropriate lawful basis.

Nothing in this Privacy Policy limits any rights that you may have under applicable data protection laws.