LEGAL
EFFECTIVE DATE: AUGUST 31, 2026
Replenish Beauty Enterprise ("Replenish", "we", "us", or "our") operates a skincare marketplace and subscription replenishment service for customers in Nigeria, accessible through our website, app, and related channels (the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the choices you have. By using Replenish, you agree to the collection and use of your information as described in this Policy.
Replenish Beauty Enterprise is registered and operating in Lagos, Nigeria. We are the data controller responsible for your personal data under the Nigeria Data Protection Act, 2023 (NDPA) and the Nigeria Data Protection Regulation.
2.1 Information you give us
We may receive limited information from payment processors, delivery partners, and marketing platforms we work with, such as confirmation that a payment or delivery was completed.
We do not store your full card details on our own servers. Payments are processed by licensed third-party payment processors, who handle your card or bank information under their own security standards. We only receive confirmation that a payment was successful, along with limited transaction details needed to fulfil your order.
We do not sell your personal data. We share information only in the following situations:
Any third party we share data with is required to protect it and use it only for the purpose we specify.
We keep your personal data for as long as your account is active and for a reasonable period afterward, to meet legal, accounting, or dispute-resolution needs. When we no longer need your data for these purposes, we delete or anonymize it.
Under the Nigeria Data Protection Act, you have the right to:
To exercise any of these rights, contact us using the details in Section 11.
We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how customers use our website and app. You can control cookies through your browser settings, though some features of the Service may not work properly if cookies are disabled.
We use reasonable technical and organizational measures to protect your personal data from loss, misuse, or unauthorized access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
If you have questions about this Privacy Policy or how we handle your personal data, contact us at:
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email. The date at the top of this Policy shows when it was last updated.