Your data

Privacy Policy

This explains exactly what we collect when you buy from us, who else sees it, and what you can ask us to do with it. It describes how the site genuinely works, not a template.

Last updated 11 September 2026

Who we are

Valour Hair is a hair extension business trading from Nigeria as Zomar Ventures. We decide what happens to the information described here, which makes us the data controller for it.

You can reach us at support@valourhair.com or on WhatsApp at +234 707 646 3327.

What we collect, and why

Only what an order actually needs. We do not ask for a date of birth, we do not build a profile of you, and there is no account to create.

Name: To address the parcel and the order confirmation.
Email address: To send your order confirmation and receipt.
Phone number: Given to the courier so they can reach you on delivery.
Delivery address, city, state and country: To ship your order and to work out the correct price and delivery window for your market.
Order note (optional): Passed to whoever packs your parcel, if you leave one.
Order contents and amount paid: To fulfil the order, and as a record of the sale.

We never see your card or bank login. Payment is a bank transfer you make from your own bank. This website takes no payment details of any kind and stores none.

Who else receives it

We do not sell your information, and we do not share it for advertising. It reaches these parties only because your order cannot be completed otherwise:

Your bankPayment by transfer: Nothing from us. You send the transfer from your own bank; we see only what your bank shows on our statement, which is your name and the reference you typed.
Google Firebase (Firestore)Order records: The full order, stored securely so we can fulfil it and answer questions about it later.
Our fulfilment partnerPacking and shipping: Your delivery address and phone number, the items ordered, and your packing note if you left one. They are not given your email address, the prices, or the order total.
Google (Gmail)Sending email: Your email address and the contents of the message we send you.
VercelWebsite hosting: Standard server logs, including IP address, for security and reliability.

Worth being plain about the fulfilment partner. Your parcel is packed and posted by a partner, not from our own premises, so they are given your delivery address and the phone number the courier needs. They are deliberately not given your email address or anything about what you paid. We mention this because it is the part shops most often leave unsaid.

Where it is stored, and for how long

Order records are held in Google Firestore. Because our providers operate internationally, your information may be processed on servers outside your country, including in the European Union and the United States, under the safeguards those providers offer.

We keep order records for as long as we may need them for tax, accounting and dispute purposes, normally six years. Messages you send us are kept only as long as they are useful for answering you.

Cookies and browser storage

Until you accept the notice we show you, there are no advertising cookies and no cross-site trackers on this site. What we store is functional, and the shop stops working properly without it:

valour-cart-v3Local storage: Remembers what is in your bag so it survives a refresh. Holds only product, length, colour and quantity, never prices and never your details.
valour-countryLocal storage and cookie: Remembers the country you are shopping from, so prices stay in the right currency as you move around the site.
valour-consentLocal storage: Remembers your answer to the cookie notice, so you are not asked twice.

We count visits with Vercel Web Analytics. It sets no cookie, stores no identifier and cannot tell one visitor from another beyond a same-day tally; it tells us how many people came and which pages they saw, nothing about who they are.

If you agree in the notice we show you, we also record a few actions that tell us whether the shop is working: a product viewed, a bundle added to a bag, a checkout opened, an order placed. Each records only the product, the currency and the amount. Never your name, email, phone or address. With the same agreement we load the Meta Pixel, which sets a Meta cookie and reports those same actions to Meta so that our advertising on Instagram and Facebook can be measured and shown to people like you. Meta’s own use of that data is described in its privacy policy. Decline and none of this is loaded or sent. You can change your mind at any time by clearing this site’s data in your browser.

Your rights

Wherever you live, you can ask us to do any of the following, and we will answer within 30 days:

Tell you what we hold about you, and give you a copy.
Correct anything that is wrong.
Delete it, where we are not required to keep it for tax or accounting.
Stop using it for anything you did not ask for.

If you are in Nigeria, the Nigeria Data Protection Act gives you these rights and lets you complain to the Nigeria Data Protection Commission. If you are in the United States, residents of some states, California among them, have comparable rights. We apply the same standard to everyone rather than sorting customers by postcode.

Children

This shop is not intended for children under 16, and we do not knowingly collect their information. If you believe a child has sent us personal data, tell us and we will remove it.

Security

The site is served over HTTPS only. Order records sit behind authenticated server-side access and are never readable from the browser. Payment is a bank transfer made from your own bank. No system is perfect, and we will not pretend otherwise, but we do not hold the one thing most worth stealing, which is your payment details.

Changes

If this policy changes in substance we will update the date at the top. Continuing to use the site after a change means you accept the revised version.