MenacGifts · Legal

Privacy Policy

Last updated: June 2026   ·  Nigeria

MenacGifts is a gift coordination service based in Nigeria. We help Nigerian customers send gifts to recipients abroad by placing orders on third-party platforms on your behalf. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and what rights you have over it. Please read it carefully. By using our website, WhatsApp, Instagram, or any other channel to interact with us, you acknowledge that you have read and understood this policy. If there is any conflict between this Privacy Policy and our Terms and Conditions, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Who We Are

MenacGifts is the data controller for any personal information you share with us directly. We determine the purposes and means of processing your personal data in connection with our gift coordination service. Our website is built on WordPress with WooCommerce handling the shop and checkout. Payments are processed by Paystack. Each of these platforms operates as a data processor on our behalf and has its own privacy policy governing data they collect — links are provided in the relevant sections below.

We do not currently have a formally appointed Data Protection Officer. The person responsible for data protection matters at MenacGifts can be reached at support@menacgifts.com. Any questions, requests, or concerns about how we handle your data should be directed to that address.

Personal Information We Collect

The term "personal information" refers to any information that identifies or can reasonably be linked to you or another individual. We collect information in the following categories depending on how you interact with us:

Your personal details (the Sender). When you place an order or make an enquiry, we collect your name, email address, phone number, billing address, WhatsApp number and chat history, Instagram handle if you order via DM, and any other details you share in the course of placing or managing an order.

Recipient information. To deliver the gift, you will provide the recipient's full name, delivery address abroad, phone number, and any gift message or special delivery instructions you include.

Account and transaction data. If you create an account on our website, WooCommerce stores your username and encrypted password, saved billing and shipping addresses, order history, saved payment method tokens provided by Paystack (not raw card numbers), and account preferences. This data is accessible to us as the store owner only.

Device and usage information. When you visit our website, WordPress may automatically collect your IP address, browser type, device information, and pages visited for security and basic site performance purposes.

We never see or store your card number, CVV, or PIN — card details go directly to Paystack. Bank transfer payments are logged by reference number only. You do not need to create an account to place an order; guest checkout is available.

How We Collect Your Information

We collect personal information directly from you when you create an account, place an order, fill in checkout details, or contact us via WhatsApp, Instagram, or email. We also collect information automatically through WordPress and WooCommerce when you browse our website, add items to your cart, or complete a purchase, and through Paystack when you pay at checkout. In some cases, we may receive order status or tracking updates from third-party gift platforms, which we pass on to you.

Lawful Basis for Processing

Under the Nigeria Data Protection Act (NDPA) 2023, we are required to have a lawful basis for every way we use your personal information. The bases we rely on are as follows:

• Contract performance — processing your order, verifying your payment, communicating order updates, and sharing recipient details with the source platform are all necessary to carry out the gift coordination service you have requested from us.
• Legal obligation — we retain certain records to comply with applicable Nigerian law and to respond to valid legal requests from authorised authorities.
• Legitimate interest — we keep order records, payment references, and chat logs to resolve disputes and protect both you and MenacGifts. We have assessed that these interests are not overridden by your rights.
• Consent — we rely on your consent for any marketing or promotional communications. We will not add you to any mailing list or send promotional messages without your express agreement. You may withdraw consent at any time by emailing support@menacgifts.com, and withdrawal will not affect anything we did before you withdrew.

Our Website Platform — WordPress and WooCommerce

Our website is powered by WordPress and our shop runs on WooCommerce. WordPress may collect your IP address, browser type, and pages visited for security and basic site performance. WooCommerce stores your order details, account information, and saved addresses in our WordPress database, accessible to us as the store owner only. Your customer dashboard — Orders, Addresses, Payment Methods, Account Details — is powered by WooCommerce, and you can update or delete your saved details there at any time. To learn more about how WooCommerce processes data, visit woocommerce.com/privacy-policy.

Payments — Paystack

All payments on our website are processed by Paystack, a PCI-DSS compliant payment gateway. When you pay at checkout, your card details are entered directly into Paystack's secure environment — not our website or servers. We never see, receive, or store your full card number, CVV, or PIN at any point.

The "Save card for future payments" option at checkout is a Paystack feature. If you use it, your card is stored as a secure token by Paystack and displayed in your WooCommerce Payment Methods dashboard. You can remove saved cards from your account at any time. Paystack shares only a transaction reference and payment status with us — enough to confirm your payment and process your order. Paystack's own privacy policy governs data they collect: paystack.com/terms.

We will never ask you to enter card details anywhere other than the Paystack checkout page. If you are ever asked otherwise, do not proceed and contact us immediately at support@menacgifts.com.

Cookies

Our website uses cookies — small text files stored on your device — to make the site work properly. We use only essential cookies required for the shop to function, such as keeping your cart active, maintaining your session during checkout, and keeping you logged in to your account. We do not use advertising, tracking, or analytics cookies of any kind. You can disable cookies in your browser settings, but doing so will prevent the cart and checkout from working correctly.

How We Use Your Information

Depending on how you interact with us, we use your personal information for the following purposes:

• To process and fulfil your order — placing it on the source platform, sharing recipient details to enable delivery, and passing on tracking information.
• To manage your account — keeping your order history, saved addresses, and account details accurate and accessible to you.
• To verify your payment — confirming your Paystack transaction or bank transfer before we place your order.
• To communicate with you — order confirmations, delivery updates, and responses to your enquiries via email, WhatsApp, or Instagram.
• To resolve disputes — our order records, payment confirmations, and chat history may be used if there is ever a disagreement about what was ordered or agreed.
• To improve our service — we may review order patterns and feedback to better understand how we can serve customers more effectively.
• To comply with the law — we may retain or disclose your information if required by Nigerian law or a valid legal request.

We do not use your personal information for unsolicited marketing. We will not send promotional communications without your consent.

Who We Share Your Information With

We share your personal information only where necessary to deliver your order or comply with the law. We do not sell your data to any third party under any circumstances.

• Third-party gift platforms — the recipient's name, address, and phone number are shared with the relevant platform when we place your order. This is the minimum information required to get the gift delivered abroad.
• Couriers — the delivery courier receives recipient details as passed on by the source platform. We do not share this information separately with couriers ourselves.
• Paystack — receives your payment information to process the transaction. They operate under their own privacy policy at paystack.com/terms.
• Our hosting provider — our WordPress and WooCommerce data is stored on a hosting server. The provider may have access to server-level data as part of their standard service.
• Legal authorities — we may disclose your information to law enforcement or government agencies where required by Nigerian law or a valid legal order.

We do not share your data with advertisers, data brokers, or any third party for marketing purposes. We do not share your WhatsApp or Instagram conversations with anyone outside MenacGifts except where required by law or to resolve a formal dispute.

International Data Transfers

Because MenacGifts sends gifts to recipients abroad, some personal data is necessarily transferred outside Nigeria as part of fulfilling your order. Recipient details are shared with the relevant third-party gift platform, which may be based in another country. This transfer is necessary to perform the contract you have placed with us and is limited to the minimum information required for delivery.

Payment data is processed by Paystack, whose infrastructure may involve cross-border data flows as described in their privacy policy. Our hosting provider may also store data on servers located outside Nigeria. We only transfer data internationally where it is necessary to fulfil your order or where required by law. We take reasonable steps to ensure that third-party platforms receiving your data handle it responsibly, but we are not responsible for their privacy practices once data leaves our control.

A Note on Recipient Data

When you provide a recipient's personal details, you are sharing a third party's information with us. By doing so, you confirm that you have the right to share their information for the purpose of delivering a gift, and that the use of their details for this purpose is clearly in their interest. We use recipient details solely to complete delivery. We do not contact recipients for any marketing or other purpose, and we do not retain their information beyond what is needed for the order and its associated records.

WhatsApp and Social Media Conversations

Chat logs from WhatsApp and Instagram may be retained as part of your order record for the purposes of dispute resolution and verifying what was agreed between us. We do not share your private conversations with anyone outside the MenacGifts team, except where required by law or to resolve a formal dispute. WhatsApp and Instagram have their own privacy policies governing how they handle messages on their respective platforms — we are not responsible for those.

We will never ask you to send card numbers, PINs, passwords, or any sensitive financial information over WhatsApp or Instagram. If someone claiming to be MenacGifts requests this, it is not us — contact us immediately at support@menacgifts.com.

How Long We Keep Your Data

How long we retain your personal information depends on the nature of the data and why we collected it. Order records and payment references are kept for a minimum of 12 months from the order date, in case of disputes or refund requests. Account data is kept for as long as your account is active — you can request deletion at any time from your dashboard or by emailing us. Chat logs from WhatsApp and Instagram are retained as part of the order record for a minimum of 12 months. After 12 months, records may be archived or deleted unless there is an ongoing dispute, legal proceeding, or other reason to retain them. We do not keep your data for longer than is necessary for the purposes described in this policy.

Automated Decision-Making

We do not make any decisions about you based solely on automated processing — including profiling — that would produce a legal or similarly significant effect on you. All order decisions, refund assessments, and dispute resolutions involve a human member of our team reviewing the relevant information. We do not use profiling to target you with personalised offers or to assess your eligibility for our service. If this ever changes, we will update this policy and notify you in advance.

How We Protect Your Data

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse. Card payments are handled entirely by Paystack, who are PCI-DSS compliant — the highest security standard for card data. Your account password is encrypted by WordPress; we cannot see it and only you can reset it. Access to order records and customer data within MenacGifts is restricted to authorised team members only. We recommend that you avoid using public or unsecured Wi-Fi networks when placing orders or entering payment details.

No security system is completely impenetrable and we cannot guarantee absolute security. However, we take our responsibility seriously and will act promptly — including notifying you and the relevant authorities — if we become aware of any breach affecting your personal data.

Data Breach Notification

In the event of a personal data breach, we will act promptly in line with our obligations under the NDPA 2023. We will notify the Nigeria Data Protection Commission (NDPC) without undue delay and, where feasible, within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights or freedoms — for example, if payment references, contact details, or order records are exposed — we will also notify you directly by email or WhatsApp as soon as reasonably possible.

Our notification to you will describe what happened, what personal data was involved, what steps we have already taken to address the breach, and what you can do to protect yourself. We maintain internal records of all data incidents, whether or not they meet the threshold for external notification.

Your Rights

Under the Nigeria Data Protection Act (NDPA) 2023, you have the following rights over your personal information. These rights are not absolute and may be subject to limitations under applicable law, but we will always respond to your request and explain our position clearly.

• Right to access — you may ask us to confirm whether we hold personal information about you and to provide you with a copy of it.
• Right to rectification — you may ask us to correct inaccurate or incomplete personal information. You can also update most details directly in your account dashboard.
• Right to erasure — you may ask us to delete your personal information where we are not legally required to keep it. Please note that deleting your account does not erase order records we are required to retain for legal or dispute resolution purposes.
• Right to object — you may ask us to stop processing your personal information for a specific purpose, including for direct marketing.
• Right to data portability — you may request a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format.
• Right to restrict processing — you may ask us to limit how we use your data in certain circumstances, for example while a dispute about accuracy is being resolved.

To exercise any of these rights, please email us at support@menacgifts.com with your name and the details of your request. We will respond within 10 business days. We may need to verify your identity before processing your request. We will not discriminate against you for exercising any of these rights.

Children's Data

Our service is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. If a child's details are provided as a gift recipient, those details are used solely to complete delivery and are not retained beyond the standard order record period. If you are the parent or guardian of a child who has provided us with personal information without appropriate consent, please contact us at support@menacgifts.com and we will delete it promptly.

Third-Party Websites and Links

Our website or communications may contain links to third-party websites or platforms, including the source platforms we use to fulfil orders. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policy of any third-party site you visit. Our inclusion of a link does not imply any endorsement of that site or its owner.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. When we make changes, we will update the date at the top of this page and post the revised policy on our website. Continued use of our service after an update constitutes your acceptance of the revised policy. If we make a significant change that materially affects how we use your personal information, we will notify you directly via WhatsApp or email where we reasonably can.

Complaints

If you have a complaint about how we have handled your personal information, please contact us first at the details below. We will investigate and respond within 10 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal information, please contact us using the details below. We are committed to resolving all queries promptly and transparently.