PRIVACY
POLICY.

Who We Are

BIG ZAYN is a menswear brand based in Lagos, Nigeria, operating through bigzayn.com. We design and make traditional and contemporary African menswear: kaftans, agbadas, aso oke, tees, caps and more. When you shop with us, you share some personal information with us. This policy explains what we collect, why, who helps us handle it, and what your rights are.

For any privacy question, email us at hello@bigzayn.com or message us through the support chat.

What We Collect

We only collect what we need to make and deliver your order and to run the shop. This includes:

• Your name, title (such as Mr, Chief or Dr, if you choose one), email address, phone number and delivery address when you place an order
• Your measurements, fit choices and any measurement photos you send us, so your piece is made to fit
• Payment references from our payment providers. We never see or store your card details
• Your order history, saved pieces and, if you add it, your birthday
• Your email address if you join our email list
• Reviews you write, including your name and rating
• Messages you send us through the support chat or email
• Anonymous shop activity, such as pages viewed, searches and pieces saved. This is not linked to your name or email

We do not collect health information, biometric data or government ID numbers.

How We Use Your Data

We use your information to:

• Make, dispatch and deliver your order, and keep you updated on it
• Send order confirmations, order updates and sign-in links by email
• Send you news about new pieces and offers, only if you joined our email list
• Reply to your messages and support requests
• Show your reviews on the site, using only the name you gave
• Understand what people look for in the shop so we can improve it
• Meet our legal and accounting obligations under Nigerian law

We will never sell your personal data. We do not use your data for automated decisions that affect your rights.

Emails We Send

Order and account emails. When you order or sign in, we email you the confirmation, updates as your order is made, shipped and delivered, replies to your support messages, and sign-in links. These are part of serving you, so they are not marketing and you can't unsubscribe from them while you have an order with us.

Our email list. We only send news, new pieces and offers to people who joined the list: through the sign-up box at the bottom of our pages, the sign-up window on the site, the box at checkout, or by asking us in person. Nobody is added just for buying from us.

When you join, we may email you a one-time welcome code. Each code is tied to the email address that joined and works once, on a first order, before the date shown in the email.

You can leave the list at any time with the unsubscribe link at the bottom of every list email, or with the unsubscribe button in your email app. Leaving the list does not affect emails about your orders.

Opens and clicks. Our emails record whether they were opened and which links were clicked, so we can tell what is useful and send less of what isn't. Links in our emails pass briefly through links.bigzayn.com for this. Some email apps block this by default; that's fine and changes nothing for you.

Legal Basis for Processing

Under the Nigeria Data Protection Act 2023 (NDPA) and, where it applies, the EU General Data Protection Regulation (GDPR), we process your data on these grounds:

• Contract: to make and deliver an order you placed with us
• Consent: for our email list, which you can leave at any time
• Legitimate interests: to improve the shop, understand anonymous shop activity and prevent fraud
• Legal obligation: where the law requires us to keep records

Who We Share Data With

We share data only with the companies that help us run BIG ZAYN, and only what each one needs:

• Railway: hosts our website and database
• Cloudflare: runs our domain and stores product and measurement photos
• Resend: sends our emails and manages our email list
• Bachs: processes card and bank transfer payments
• Breet: processes crypto payments
• Delivery partners: receive your name, phone number and address to deliver your order

Some of these providers store data outside Nigeria, mainly in the European Union. Where that happens, we rely on providers that protect data to a standard at least as strong as the NDPA requires.

How Long We Keep Your Data

We keep your data only as long as we need it:

• Order records: 6 years, for accounting and legal compliance
• Measurements and fit: while you have an account, so future pieces fit without measuring again
• Reviews: until you ask us to remove them
• Support messages: 12 months after the conversation ends
• Email list: until you unsubscribe. After that we keep only your email address and the date you left, so we never add you back by mistake
• Account data: while your account is active, and deleted within 90 days of a verified deletion request

Your Rights

Under the NDPA (and the GDPR where it applies), you have the right to:

• Access the personal data we hold about you
• Correct data that is wrong
• Ask us to delete your data ("right to erasure")
• Object to how we use your data
• Withdraw your consent at any time, including leaving our email list
• Complain to the Nigeria Data Protection Commission (NDPC)

To use any of these rights, email hello@bigzayn.com. We will reply within 30 days.

Cookies, Storage & Tracking

We do not use advertising trackers and we do not sell data to marketing platforms.

Your browser stores a few small things for us so the shop works: your bag, your sign-in, whether you've already seen or closed our email sign-up window, and a welcome code you're about to use. You can clear these in your browser settings at any time. You'll just need to sign in again.

With your permission only, we record anonymous shop activity (pages viewed, searches, pieces saved, checkouts started) using a random code that is forgotten when you close the tab. It isn't linked to your name or email. When you first visit, we ask: choose ACCEPT ALL to allow it, or ESSENTIAL ONLY to keep just what the shop needs to work. You can change your choice anytime with the COOKIES link at the bottom of every page.

Our emails record opens and clicks, as explained in section 04.

Data Security

We protect your data with encrypted connections (HTTPS), restricted access for our team (each team member only sees the parts of the admin they need), and secure providers. No system on the internet is 100% secure. If you think something is wrong with your account, contact us straight away.

Changes to This Policy

We may update this policy as BIG ZAYN grows. When we make a significant change, we'll update the date at the top of this page. Continuing to use the site after a change means you accept the updated policy.