Effective Date: 22 September 2026
Last Updated: 22 September 2026
1. Introduction
At Infinity Hand Bags Ltd, we respect the privacy of customers who browse our collections, place orders and contact our team. This Privacy Policy explains how we collect, use, share, store and protect personal information through infinityhandbags.com.
It applies to visitors, registered customers, shoppers, newsletter subscribers and anyone who communicates with us about our products or an order. This policy concerns the information associated with shopping for these products and using our website.
Infinity Hand Bags Ltd is responsible for determining how and why customer information is processed for our business activities. We handle this information in accordance with the Nigeria Data Protection Act, 2023 and other applicable data protection requirements.
This policy explains our practices; visiting the website does not, by itself, constitute consent to optional marketing or tracking.
2. Information We Collect
The information we collect depends on how you interact with our store.
Information you provide
When you register, purchase a handbag, request assistance or contact us, we may collect:
- Your name and email address.
- Billing and delivery addresses.
- Contact details needed to arrange delivery.
- Account credentials and saved preferences, where you create an account.
- Products ordered, quantities, selected options and order instructions.
- Messages, enquiries and correspondence with customer support.
- Information needed to assess returns, refunds, cancellations or delivery complaints.
- Photographs you voluntarily provide to explain a product fault or order issue.
- Reviews, feedback and marketing preferences.
Please provide only information relevant to your request. For example, photographs submitted to explain a damaged handbag should avoid showing payment documents or unrelated personal information.
If you arrange delivery to another person, provide their details only where you are authorised to do so and let them know that we will use those details to fulfil the delivery.
Transaction information
We may receive information needed to reconcile payments and manage orders, including the transaction reference, payment status, amount, currency and refund confirmation. Depending on the payment service used, we may also receive limited payment identifiers, such as a masked card number.
These transaction records are different from the confidential credentials used to authorise a payment.
Information collected through website use
When you browse our store, technical information may be collected, including:
- IP address and approximate location derived from it.
- Browser, device and operating system information.
- Pages visited and products viewed.
- Shopping cart activity and website interactions.
- Referral sources, access times and error records.
- Cookie identifiers, subject to applicable consent requirements.
We use this information to operate the store, understand website performance and identify security problems.
3. How and Why We Use Your Information
We process personal information for specific purposes and rely on an appropriate legal basis for each activity.
Orders and delivery: We use customer and order details to accept purchases, confirm payment, prepare parcels, arrange delivery and manage returns or refunds. This processing is necessary to perform our contract with you or take steps you request before purchasing.
Customer accounts: We use registration details to provide account access, display order history and maintain preferences where these features are available.
Customer support: We use your messages and relevant order information to answer questions about handbag dimensions, materials, availability, care, delivery or an existing purchase.
Security and fraud prevention: We may examine transaction records and technical activity to investigate suspicious orders, prevent account misuse and protect the website. Where we rely on legitimate interests, we assess whether those interests are outweighed by your rights.
Business records and legal obligations: We retain and use relevant information to meet applicable accounting, tax and legal requirements, respond to lawful requests and manage disputes.
Website improvement: We may use performance information to identify errors and improve navigation and shopping functionality. Optional tracking is subject to the consent requirements that apply.
Marketing: Where you have given the necessary consent, we may send collection updates, product announcements and promotional offers. You can withdraw that consent at any time.
If information is required to fulfil an order and you do not provide it, we may be unable to complete the purchase or deliver your parcel. Optional marketing consent is not a condition of shopping with us.
4. Payment Information and Security
Payments are handled through the third-party payment services available at checkout. Those providers process payment credentials under their own privacy notices and security arrangements.
We use transaction confirmations and related order records to verify payments, issue refunds and investigate payment disputes.
[Before publication: obtain confirmation from the payment provider or website developer before including the following sentence: “We do not store your debit or credit card numbers, CVV, or UPI PIN on our servers.” Include the UPI reference only if that payment method is supported.]
Do not send your full card details, CVV, payment PIN, password or one-time authentication code through customer support messages, product reviews or order notes.
If we need evidence of a payment, provide the transaction reference or a suitably redacted receipt. Payment authentication should take place through the payment provider’s designated process.
5. When We Share Personal Information
We share information where it is necessary to operate our store, fulfil an order or meet a lawful obligation.
Depending on the service involved, recipients may include:
- Payment providers, to process payments, refunds and payment disputes.
- Delivery and logistics partners, to deliver parcels and investigate delivery issues.
- Hosting and website service providers, to operate and maintain the store.
- Customer support and email providers, to manage enquiries and send service communications.
- Analytics providers, where enabled and subject to applicable consent requirements.
- Professional advisers, where necessary for accounting, legal advice or dispute management.
- Public authorities, where disclosure is required or otherwise lawfully justified.
We limit disclosures to information relevant to the particular purpose.
Where a supplier processes personal information on our behalf, appropriate contractual safeguards must govern its handling of that information. Some organisations, including certain payment providers, may act independently for activities such as their own fraud prevention or legal compliance.
If the business undergoes a sale, merger or restructuring, relevant customer information may be transferred with appropriate safeguards and any legally required notice.
6. Cookies and Tracking
Our website uses cookies and similar technologies to support its functions.
Essential cookies help maintain shopping sessions, remember cart contents and support secure account access. Other technologies, where used, may measure website performance, remember preferences or support advertising.
Where consent is required, optional tracking must remain inactive until you make an affirmative choice. Refusing optional cookies should not prevent you from using essential shopping functions.
You can manage stored cookies through your browser and through website privacy controls where available. Blocking essential cookies may affect features such as account access or checkout.
Information about the specific cookies, their providers, purposes and durations should be available in our Cookie Policy.
7. Marketing Communications
Where you subscribe to promotional communications, we use your contact details and preferences to send relevant updates about Infinity Hand Bags Ltd.
You can unsubscribe using the link in a marketing email or by contacting us. Withdrawing marketing consent does not affect the lawfulness of processing carried out before withdrawal.
We may keep a limited record of your unsubscribe request so that your preference continues to be respected.
Order confirmations, delivery updates, refund messages and responses to enquiries are service communications. You may still receive these where necessary, even after opting out of marketing.
8. How Long We Keep Information
We retain personal information only for as long as it is needed for its purpose, including any applicable legal obligations.
Retention depends on the category of information:
- Account information: Kept while needed to maintain your account, with periodic consideration of inactive accounts and deletion requests.
- Orders, payments and refunds: Kept for the applicable accounting, tax, dispute and legal recordkeeping periods.
- Support correspondence: Kept for the time needed to resolve the enquiry and address related follow-up issues or claims.
- Marketing information: Used until you withdraw consent or it is no longer needed, with limited suppression records retained to honour opt-outs.
- Technical and security records: Kept for a proportionate period based on operational needs, security investigations and any legal requirements.
- Cookie information: Retained according to the relevant cookie’s duration and your settings.
Where a complaint, investigation or legal claim remains unresolved, relevant information may need to be retained for longer.
When information is no longer required, it should be securely deleted or irreversibly anonymised. Residual backup copies may remain until the applicable backup cycle expires, with access restricted.
You can contact us for further information about retention criteria affecting your records.
9. Protecting Your Information
We maintain safeguards intended to reduce the risk of unauthorised access, disclosure, alteration or loss.
Our security arrangements include encrypted website connections, restricted access to customer information, website maintenance and monitoring, and the use of third-party payment services.
Access to personal information should be limited to authorised people and service providers who need it for their responsibilities.
You can help protect your account by using a unique password, keeping login details private and signing out of shared devices.
No online service can guarantee complete security. This does not remove our responsibility to apply appropriate safeguards. Where a personal data breach occurs, we will assess the incident and notify the relevant authority and affected individuals when legally required.
10. International Data Transfers
Some service providers may process information outside Nigeria, including providers involved in hosting, email delivery, payments or technical support.
Where personal information is transferred internationally, we must establish a lawful transfer basis under the Nigeria Data Protection Act, 2023. Depending on the circumstances, this may involve adequate protection in the receiving jurisdiction, appropriate contractual safeguards or another legally permitted basis.
We consider the purpose of the transfer, the information involved and the protections available to the recipient.
You may contact us to request information about international transfers affecting your data and the safeguards used.
11. Your Privacy Rights
Subject to applicable conditions and exceptions, you may request:
- Information about how your personal data is used.
- Access to personal information we hold about you.
- Correction of inaccurate or incomplete information.
- Deletion of information that no longer needs to be retained.
- Restriction of processing in relevant circumstances.
- An objection to processing based on legitimate interests.
- An end to the use of your information for direct marketing.
- Withdrawal of consent where processing relies on consent.
- A portable copy of eligible information where that right applies.
- Review of a decision based solely on automated processing where it has legal or similarly significant effects and applicable law provides that protection.
These rights are not absolute. For example, deleting an account does not necessarily require deletion of invoices or records that must be retained by law.
Where the EU General Data Protection Regulation (GDPR) applies to our processing, eligible individuals also benefit from its applicable rights and safeguards.
To exercise your rights, contact us using the details at the end of this policy. We may request proportionate information to verify your identity before releasing or changing personal data.
We respond within the period required by applicable law. If we cannot fulfil a request, we will explain the reason and the available complaint options.
You may raise a complaint with the Nigeria Data Protection Commission, including through ndpc.gov.ng. Where GDPR applies, you may also have the right to complain to the relevant European supervisory authority.
12. Children’s Privacy
Our store is intended for adult shoppers and does not invite children to create accounts or submit personal information independently.
Parents and guardians purchasing a handbag for a child should use their own account, contact details and payment information. Please avoid supplying unnecessary information about the child.
Where processing a child’s information requires parental or guardian consent under Nigerian law, that consent must be obtained and appropriately verified unless a lawful exception applies.
If you believe a child has provided information without the required authorisation, contact us. We will review the situation and delete or otherwise address the information as required.
13. Reviews and External Websites
If you submit a product review for publication, the review and the display name associated with it may be visible to other visitors. Avoid including your address, payment information or other confidential details in public feedback.
Our website may link to payment services, social media platforms or other external websites. Those organisations have their own privacy practices. Review their notices before providing information directly to them.
14. Changes to This Privacy Policy
We may update this policy when our shopping features, service providers, data practices or legal obligations change.
The latest version will appear on this page with an updated date. Where a change materially affects how we use personal information, we will provide additional notice where required.
If a new use requires your consent, we will request it separately. Continued browsing does not replace legally required consent.
15. Contact Us
For privacy questions, requests to exercise your rights, concerns about personal information or clarification about this policy, contact:
Infinity Hand Bags Ltd
Website: https://infinityhandbags.com/
Support Email: support@infinityhandbags.com
Info Email: info@infinityhandbags.com
Address: FLAT B, ROAD 36, PHASE 3, KUBWA, ABUJA, FCT, NIGERIA.