Privacy Policy
Last updated 1 November 2026
Cub & Cradle is operated by C&C Group, based in Lagos, Nigeria. You can reach us at hello@cubandcradle.com.ng. We are the “data controller” for the personal information described here. This policy follows the Nigeria Data Protection Act 2023 (NDPA).
What we collect
- When you order: your name, email address, phone number, delivery address and state, and what you ordered.
- When you contact us: your name, email, phone (if you give it) and your message.
- When you pay: Paystack collects your payment details. We receive confirmation that you paid and a payment reference, never your full card number.
- When you use the site: basic technical information such as your device and browser type, needed to keep the site working and secure.
Why we use it
- To take and deliver your order, and to give you tracking updates (this is needed to carry out our contract with you).
- To let you view your past orders when you sign in with your email.
- To answer your questions and deal with returns or complaints.
- To keep records we must keep for tax, accounting and legal reasons.
- To keep the website secure and prevent fraud and spam.
We do not sell your personal information. We will only send you marketing messages if you have clearly agreed to receive them, and you can stop them at any time.
Who we share it with
We share only what is needed with the companies that help us run the shop:
- Paystack, to take your payment.
- Delivery and courier partners, to deliver your order (name, phone and address).
- Technology providers that host our website, store our database and images and send our emails (currently Cloudflare, Neon, Cloudinary and Resend).
- Authorities, when the law requires it.
Some of these providers store data outside Nigeria. When that happens, we use providers that apply appropriate safeguards to protect your information.
How long we keep it
We keep order records for as long as we need them to look after your order, handle returns and meet our legal, tax and accounting duties. Contact messages are kept for as long as needed to deal with your question. After that, we delete or anonymise the information.
Your rights
Under the NDPA you can ask us to: give you a copy of your information; correct it; delete it where we no longer need it; restrict or object to how we use it; and give it to you in a portable format. You can also withdraw any consent you gave, and you have the right to complain to the Nigeria Data Protection Commission (NDPC). To use any of these rights, email hello@cubandcradle.com.ng. We will reply within a reasonable time.
Children
Our products are for children, but our shop is for adults. We do not knowingly collect personal information from children. Orders should be placed by a parent, guardian or another adult.
Cookies and similar technology
See our Cookie Notice.
Security
We protect your information with secure connections (HTTPS), restricted access and trusted providers. No online system is perfectly secure, so if we ever have a breach that puts you at risk, we will tell you and the regulator as the law requires.
Changes
If we change this policy, we will update the date at the top of this page.