Privacy

Who we are

delavaga runs the shop at delavaga.com and decides how the information described here is used.

TO CONFIRM: registered legal entity name, company number, registered address, and the country whose data protection regulator supervises us

What we collect

To fulfil an order: your name, delivery address, email address, and a phone number where the carrier requires one for delivery. Also what you bought, which is unavoidable — it is the thing being printed.

To take payment: nothing. Card numbers and mobile money credentials go straight to the payment processor and are never handled by our systems.

To keep the site working: a server-side cart keyed by a cookie, and a session if you sign in. The session token is stored only as a SHA-256 hash, so a copy of our database does not hand anyone a live login. Server logs record IP addresses and request paths for a short period, which is how outages and abuse get diagnosed.

If you subscribe: your email address, kept for as long as you stay on the list.

Why we are allowed to

To perform the contract you entered when you ordered — the address, the email, the order contents. Because we have a legitimate interest in the shop working and not being defrauded — the logs, the session, the fraud checks. Because you consented — marketing email, and nothing else. And because the law requires it — order and tax records we are obliged to retain.

Who else sees it

Four companies, each for one job. None of them are advertising networks, and we do not sell or rent your details to anyone.

• PrintifyFulfilment

  Receives your name, delivery address and what you ordered, and passes them to the print facility that makes and posts it. It never receives payment details.

• Paswad Pay (Paystack rails)Payments

  Takes the card or mobile money details directly at checkout. Those details are never sent to, stored on, or logged by our servers — we receive only whether the payment succeeded and a reference for it.

• GhostJournal and newsletter

  Holds your email address only if you subscribe, and only for as long as you stay subscribed. Every newsletter carries a one-click unsubscribe.

• PaswadOptional accounts

  Used only if you choose to create an account. Checkout as a guest never contacts it, so buying something does not create an identity anywhere.

TO CONFIRM: hosting provider, transactional email provider, and whether Cloudflare Turnstile is enabled on the newsletter form in production — each needs listing here

Where it goes

Orders are printed at the facility closest to the delivery address, so for most orders the information stays in the region it is being delivered to. Some of the companies above operate across borders.

TO CONFIRM: hosting region, and the transfer mechanism relied on for processors outside it

How long we keep it

Carts expire thirty days after they were last touched and are then deleted. Orders are kept longer, because tax and accounting rules require it and because you may need to raise a fault months later.

TO CONFIRM: retention periods for orders, customer records, server logs and marketing subscribers

What you can ask us to do

Depending on where you live you may have some or all of these rights. We will honour them regardless of where you live, as far as we are able.

• Ask for a copy of what we hold about you.
• Ask us to correct something that is wrong.
• Ask us to delete it, where we are not required to keep it for tax or fraud records.
• Ask for it in a portable form.
• Object to a use you disagree with, and withdraw consent to marketing at any time.

Ask by writing to us on thecontact page. If you are not satisfied with how we answer, you can complain to the data protection regulator where you live.

Cookies

There are three of them and they all do a job.The cookie pagelists each one and what breaks if you block it.

Children

The shop is not aimed at children and we do not knowingly collect anything about them. If you believe a child has given us their details, write to us and we will remove them.

Changes

If this policy changes in a way that affects what we do with your information, we will say so here and date the change. Adding a sub-processor counts as such a change.