Your data,
handled with care.

When you place an order, create an account, or contact us, we collect: your full name, email address, phone number, delivery address, and payment method preference. For custom orders, we may also collect design preferences, yarn colour choices, and any other details you share to help us fulfil your request.

When you visit our website, we automatically collect certain technical data including your IP address, browser type, device type, pages visited, time spent on pages, and referring URLs. This data helps us understand how our site is used and improve the experience for everyone.

We do not store your card details. All card payments are processed by Paystack, a PCI-DSS compliant payment processor. For bank transfers, we only retain the transfer reference and confirmation for order reconciliation purposes.

We use the information we collect to:

• Process and fulfil your orders, including production, packaging, and delivery. • Send you order confirmations, dispatch notifications, and tracking updates. • Respond to your enquiries, complaints, or support requests. • Send you marketing communications — only if you have opted in. You can unsubscribe at any time. • Improve our website, products, and customer experience. • Prevent fraud and ensure the security of our platform. • Comply with our legal obligations.

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.

We share your information only with trusted third parties who help us operate our business:

• Paystack — for secure payment processing. • GIG Logistics, DHL, and our rider network — for order delivery. • Email and SMS platforms — for order notifications. • Analytics providers — for anonymised website usage data.

All third parties are contractually bound to handle your data securely and only for the purpose we engage them.

We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights and safety of Doreneglam, our customers, or the public.

We take the security of your personal data seriously. Our website uses HTTPS encryption for all data in transit. Access to customer data is restricted to authorised personnel only, and we conduct regular reviews of our data handling practices.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data using commercially reasonable means, we cannot guarantee absolute security.

If you believe your account or data has been compromised, please contact us immediately at hello@doreneglam.com.

Our website uses cookies — small text files stored on your device — to:

• Keep you logged in across sessions. • Remember your cart contents. • Understand how visitors navigate our site (analytics cookies). • Measure the performance of our pages.

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the site — for example, your cart may not persist between visits.

We do not use cookies to serve third-party advertising.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you. • Correction — request that we correct inaccurate or incomplete data. • Deletion — request that we delete your personal data, subject to legal retention requirements. • Objection — object to our processing of your data for marketing purposes. • Portability — request your data in a machine-readable format.

To exercise any of these rights, please contact us at hello@doreneglam.com with the subject line "Data Request". We will respond within 30 days.

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law.

• Order data is retained for 7 years for tax and accounting compliance. • Account data is retained until you request deletion or your account is inactive for 3 years. • Marketing preferences are retained until you unsubscribe.

When we no longer need your data, it is securely deleted or anonymised.

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their personal data, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we do, we will update the "Last updated" date at the top of this page.

For significant changes, we will notify you by email or by placing a notice on our website. Continued use of our site after changes are posted constitutes your acceptance of the updated policy.