Privacy policy
Last updated 3 October 2026
MLBeautycave (“we”, “us”) sells skincare, runs pre-order batches and offers skincare consultations at www.mlbeautycave.com. This policy explains what we collect when you use the site, why, and the choices you have. We follow the Nigeria Data Protection Act 2023.
1. What we collect
- Account details: your name, email address and phone number. If you sign in with Google, we receive your name and email from Google.
- Order details: what you buy, your delivery address or pickup choice, and your order history.
- Payment records: the amount, date and reference of each payment. Card and bank details are entered on Paystack’s page and never reach us.
- Consultation answers: your skin type, concerns, current routine, allergies, budget and any photos you choose to share.
- Product suggestions: the product details and photos you send when suggesting an item for a batch.
- Messages: anything you send us on WhatsApp, by phone or by email.
Your cart is saved in your own browser so it’s still there when you come back. We don’t use advertising or tracking cookies.
2. Why we use it
- To process, deliver and update you on your orders and pre-orders.
- To run your consultation and recommend a routine.
- To sign you in and keep your account secure.
- To answer your questions and handle refunds.
- To keep the financial records the law requires.
3. Who we share it with
We don’t sell your information. We share only what each of these services needs to work for us:
- Hosting and database providers that store our website, accounts and uploaded photos.
- Our payment processor, which receives your name, email, phone and order amount.
- Google, if you choose to sign in with Google.
- Our email provider, which sends sign-in links and order emails.
- Delivery partners, who receive your name, phone and address to deliver your order.
Some of these services store data outside Nigeria. We use providers that protect it to standards comparable to Nigerian law.
4. How long we keep it
We keep your account until you ask us to delete it. Order and payment records are kept for six years, as Nigerian tax law requires. Consultation photos are kept only as long as they help your consultation, and are deleted on request.
5. Your rights
You can ask us to:
- show you the personal information we hold about you;
- correct it (you can also edit your details on your account page);
- delete your account and personal information, except records we must keep by law;
- stop using your information for a particular purpose.
To make a request, message us on WhatsApp or call +234 913 924 1642. We’ll respond within 30 days. If you’re not satisfied, you can complain to the Nigeria Data Protection Commission.
6. Security
Access to your information is limited to you and our staff. The site uses encrypted connections, and payments go through Paystack, which is PCI DSS certified. No system is perfectly secure; if we learn of a breach affecting you, we’ll tell you.
7. Children
The site is for adults. We don’t knowingly collect information from anyone under 18.
8. Changes and contact
If we change this policy, we’ll update the date at the top and, for significant changes, tell account holders. Questions? message us on WhatsApp or call +234 913 924 1642.