This policy explains how Trelluna collects, uses, and protects your information when you order gifts, book decor setups, or browse our website.
We've written it in plain language. If anything here is unclear, contact us using the details at the end.
1. Who we are
- Trelluna is operated by TRELLUNA GIFT & DECOR, registered in Nigeria with RC number 9586736.
- We are the data controller for the information described in this policy. That means we decide how and why your information is used, and we're responsible for looking after it.
- We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA).
- Contact for privacy matters: [email protected]
2. Information we collect
2.1 Information you give us
When you place an order or book a setup:
Your name
Your email address
Your phone number
Your delivery or billing address
Your order details, including any gift message you write
The date and time you want delivery or setup
Any special instructions you provide
When you contact us, create an account, or subscribe:
Your name and contact details
The content of your messages to us, including WhatsApp and social media messages
Your account login details, if you create an account
Your marketing preferences
2.2 Information about gift recipients
Because we deliver gifts and set up decor for other people, most orders involve someone other than you.
When you place an order, you may give us:
The recipient's name
The recipient's delivery address
The recipient's phone number
The venue or location details for a decor setup
Your gift message to them
Please note: by giving us someone else's details, you confirm you're entitled to share them with us for the purpose of making the delivery. We use recipient information only to complete and confirm that delivery — we don't add recipients to our marketing lists or use their details to advertise to them.
If you're a recipient and want to know how we hold your information, or want it removed, contact us at [email protected]
2.3 Information we collect automatically
When you use our website:
Your IP address and rough location (city level)
Your device type, browser and operating system
Pages you visited, what you clicked, and how long you stayed
The site or search that brought you to us
Cookie data (see section 8)
2.4 Photographs
- We photograph completed deliveries and decor setups, sometimes as proof of delivery and sometimes for our website and social media.
- We will not publish a photograph that identifies you, a recipient, or a private residence for marketing purposes without asking you first. If you'd prefer we don't photograph your order at all, tell us when you book.
3. Why we use your information
| What we use it for | Our lawful basis under the NDPA |
|---|---|
| Processing and delivering your order | Performance of a contract with you |
| Contacting you about your order or setup | Performance of a contract with you |
| Taking payment and preventing fraud | Performance of a contract; legal obligation |
| Responding to your enquiries and complaints | Legitimate interest; performance of a contract |
| Sending you a review invitation after delivery | Legitimate interest in improving our service |
| Sending marketing emails or messages | Your consent |
| Improving our website and understanding how it's used | Legitimate interest |
| Keeping accounting and tax records | Legal obligation |
| Resolving disputes and enforcing our terms | Legitimate interest |
4. Payment information
Payments are handled by Paystack, a licensed payment provider.
We do not collect, see or store your full card number, CVV, or bank login details. Those go directly to the payment provider, who processes them under their own privacy policy and applicable card scheme standards.
What we do receive and keep is a record that the payment succeeded, the amount, the date, and a partial card reference such as the last four digits, so we can match payments to orders and handle refunds.
5. Reviews
After your order is delivered, we may email you a link inviting you to leave a review.
If you submit a review, we publish:
The rating you gave
The comment you wrote
The first name you provide (you can use an initial or a nickname)
The date of the review
Whether the review is linked to a verified purchase
We do not publish your email address, phone number, full address, or order number.
We don't edit the substance of reviews or remove negative ones to improve our average. We may remove a review that contains abusive content, someone else's personal information, or content unrelated to the order.
You can ask us to remove your review at any time by contacting [email protected]
6. Who we share your information with
We share information only where we need to. We do not sell your personal data.
Delivery and logistics partners — the recipient's name, address and phone number, so they can complete the delivery.
Payment providers — Paystack, to take payment and process refunds.
Technology providers — the companies that host our website, send our emails and help us understand site usage: Contabo, Zoho, Google Analytics 4. These providers act on our instructions and are not permitted to use your data for their own purposes.
Professional advisers — accountants or lawyers, where necessary.
Authorities — where we're legally required to disclose information, or to establish, exercise or defend legal claims.
7. Transfers outside Nigeria
Some of our service providers store data on servers outside Nigeria.
Where that happens, we take steps to ensure your information receives an adequate level of protection, as required under the NDPA — including relying on recognised adequacy decisions, or contractual safeguards with the provider.
8. Cookies
We use cookies and similar technologies to:
Keep your cart and session working (these are essential — the site can't function without them)
Remember your preferences
Understand how the site is used, so we can improve it
Measure the effectiveness of our advertising, where we run ads
You can control non-essential cookies through [our cookie banner / your browser settings]. Blocking essential cookies will stop parts of the site working, including checkout.
9. How long we keep your information
| Type of information | How long we keep it |
|---|---|
| Order and transaction records | [6] years, to meet tax and accounting requirements |
| Recipient delivery details | [12–24] months after delivery, for dispute resolution and repeat orders |
| Account details | While your account is open, then [12] months |
| Marketing contact details | Until you unsubscribe, then removed from active lists |
| Published reviews | Until you ask us to remove them |
| Website analytics data | [26] months |
| Customer service messages | [24] months |
10. How we protect your information
We use technical and organisational measures to protect your data, including encrypted connections (HTTPS), restricted staff access on a need-to-know basis, secured hosting, and regular review of who has access to what.
No system is completely secure. If a breach occurs that is likely to affect your rights, we will notify you and the Nigeria Data Protection Commission as required by the NDPA.
11. Your rights
Under the NDPA, you have the right to:
Access — get a copy of the personal data we hold about you
Correct — have inaccurate or incomplete data fixed
Delete — ask us to erase your data, where we have no continuing legal reason to keep it
Restrict — ask us to pause use of your data while a concern is resolved
Object — object to processing based on our legitimate interests, including profiling
Portability — receive your data in a portable format, or have it sent to another provider
Withdraw consent — withdraw consent for anything based on it, such as marketing
Complain — lodge a complaint with the Nigeria Data Protection Commission
To exercise any of these, email [email protected]. We'll respond within 30 days. We may ask you to verify your identity first, so we don't disclose your information to someone else.
There's no charge for these requests in normal circumstances.
To complain to the regulator: Nigeria Data Protection Commission (NDPC) — www.ndpc.gov.ng
12. Children
Trelluna is intended for adults. We don't knowingly collect personal data from anyone under 18. If you believe a child has given us their information, contact us and we'll delete it.
Gift recipients may sometimes be children — for example a birthday setup for a child. In those cases we only hold what's needed to complete the delivery, provided by the adult who booked it.
13. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top will always show the current version. If we make a significant change to how we use your information, we'll tell you directly.
14. Contact us
[TRELLUNA GIFT & DECOR]
[LAGOS]
Email: [email protected]
WhatsApp