Privacy Policy

NICOTAWINES Limited is a premium wine importation and distribution company registered in Nigeria. Our registered address is 200 Ikotun-Idimu Road, Alimosho, Lagos, Nigeria.

For all data protection enquiries, you may contact us at:

• Email: info@nicotawines.com
• Phone: +234 805 736 0332

We may collect the following categories of personal information:

a) Information you provide directly

• Full name, email address, phone number, and delivery address when you register an account or place an order
• Payment information processed securely through our payment partners (we do not store card details)
• Date of birth or age verification data to confirm legal drinking age
• Communications you send to us via email, contact forms, or social media
• Newsletter subscription preferences

b) Information collected automatically

• IP address, browser type, device information, and operating system
• Pages visited, time spent on site, and clickstream data
• Cookies and similar tracking technologies (see Section 8)

c) Information from third parties

• Authentication data if you sign in via Google OAuth
• Publicly available information to verify business identity for trade accounts

We use your personal information for the following purposes:

• To process and fulfil your orders and manage your account
• To verify your legal drinking age as required by Nigerian law
• To send transactional communications such as order confirmations, shipping updates, and receipts
• To send marketing communications, newsletters, and event invitations where you have consented
• To personalise your experience on our website and recommend relevant products
• To improve our website, products, and customer service
• To comply with legal obligations, including tax, customs, and regulatory requirements
• To detect, prevent, and investigate fraud, security breaches, and other prohibited activities
• To manage our Wine Club membership and associated benefits

We process your personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil your orders and provide our services
• Legal obligation: Where we are required to process data to comply with applicable laws
• Legitimate interests: For fraud prevention, website security, and improving our services, where these interests are not overridden by your rights
• Consent: For marketing communications and cookies, where you have given clear consent

We do not sell, rent, or trade your personal data. We may share your information with:

• Service providers: Logistics and delivery partners, payment processors, email service providers (including Resend), cloud hosting providers (Supabase, Vercel), and analytics providers who process data on our behalf under strict confidentiality obligations
• Regulatory authorities: Nigerian Customs Service, NAFDAC, FIRS, and other governmental bodies where required by law
• Professional advisers: Lawyers, accountants, and auditors bound by professional confidentiality obligations
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction

Where we transfer your data internationally, we ensure appropriate safeguards are in place in accordance with the NDPR and applicable data protection frameworks.

We retain your personal data only for as long as necessary for the purposes outlined in this policy, or as required by law. Specifically:

• Account data is retained for the duration of your account and for 7 years after closure for legal and audit purposes
• Order records are retained for 7 years in accordance with Nigerian tax and accounting regulations
• Marketing preferences are retained until you withdraw consent
• Website analytics data is retained for up to 26 months

Under the Nigeria Data Protection Regulation (NDPR) and applicable law, you have the following rights:

• Right of access: To request a copy of the personal data we hold about you
• Right to rectification: To request correction of inaccurate or incomplete data
• Right to erasure: To request deletion of your personal data where there is no compelling reason for us to continue processing it
• Right to restrict processing: To request that we limit how we use your data in certain circumstances
• Right to data portability: To receive your data in a structured, machine-readable format
• Right to object: To object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at info@nicotawines.com. We will respond within 30 days.

We use cookies and similar technologies to enhance your browsing experience, analyse site traffic, and support our marketing activities. Cookies we use include:

• Essential cookies: Required for the website to function, including authentication and session management
• Analytics cookies: To understand how visitors use our site and improve our content
• Marketing cookies: To deliver relevant advertisements and measure campaign effectiveness

You may manage or disable cookies through your browser settings. Disabling essential cookies may affect your ability to use certain features of our website.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS), secure database access controls, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Our services are not directed to individuals under the legal drinking age in Nigeria (18 years). We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will promptly delete that information.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of our services after any changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact us:

• Email: info@nicotawines.com
• Phone: +234 805 736 0332
• Address: 200 Ikotun-Idimu Road, Alimosho, Lagos, Nigeria

You also have the right to lodge a complaint with the Nigeria Data Protection Bureau (NDPB) at ndpb.gov.ng.