Privacy Policy

GoldenEve Wines

Last updated: 24/08/2026

1. Introduction

GoldenEve Wines (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains what information we collect when you visit goldenevewines.com, why we collect it, how we use it, and what rights you have over it.

We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the General Application and Implementation Directive (GAID) 2025 issued by the Nigeria Data Protection Commission (NDPC).

Please read this policy carefully. If anything here is unclear, contact us using the details in Section 10 and we will be glad to explain.

2. Who We Are

For the purposes of the NDPA, GoldenEve Wines is the data controller of the personal data described in this policy. This means we decide what data is collected and how it is used.

3. Information We Collect

3.1 Information you give us

When you shop with us, create an account, or get in touch, you may provide:

• Identity details — your full name
• Contact details — email address, phone number, delivery address, billing address
• Account details — username and password (your password is stored in encrypted form; we cannot see it)
• Order details — the products you buy, order history, delivery instructions
• Communications — messages you send us by email, contact form, WhatsApp, or social media
• Marketing preferences — whether you have chosen to receive our emails or offers
• Age confirmation — confirmation that you are 18 years or older

3.2 Information we collect automatically

When you browse our website, we may automatically collect:

• Your IP address and approximate location (city or region level)
• Browser type, device type, and operating system
• Pages you viewed, time spent on the site, and how you arrived
• Items added to your cart or wishlist

3.3 Payment information

We do not collect or store your full card details. Payments are handled directly by our payment providers, [Paystack], who are regulated to handle card data securely. We receive only a confirmation of whether payment succeeded, along with limited reference details such as the last four digits of the card.

3.4 Sensitive personal data

We do not seek to collect sensitive personal data such as health information, religious beliefs, biometric data, or political opinions. Please do not send us this kind of information.

4. Why We Use Your Information

We only use your personal data where we have a lawful reason to do so. The table below sets out what we do and why.

Legitimate interest means we have a genuine business reason to use your data in a way that does not unfairly override your rights.

5. Cookies and Similar Technologies

Cookies are small text files stored on your device when you visit a website.

We use:

• Essential cookies — required for the site to work. They keep you logged in, remember what’s in your cart, and keep your session secure. These cannot be switched off.
• Analytics cookies — help us understand how visitors use the site so we can improve it.
• Marketing cookies — may be used to show you relevant offers.

Your choice: We will ask for your consent before setting any non-essential cookies. You can change or withdraw this consent at any time through the cookie banner or your browser settings. Blocking essential cookies may prevent parts of the site from working.

6. Who We Share Your Information With

We do not sell your personal data. We never have and we never will.

We share limited data with trusted third parties who help us run our business:

Each of these parties is only given the minimum data they need, and is required to keep it secure and use it only for the purpose we specify.

7. Your Rights

Under the NDPA you have the following rights over your personal data:

• Right to be informed — to know how your data is used, which this policy explains
• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to have inaccurate or incomplete data corrected
• Right to erasure — to ask us to delete your data where there is no ongoing reason for us to keep it
• Right to restrict processing — to ask us to pause use of your data while a concern is resolved
• Right to object — to object to processing based on legitimate interest, and to stop direct marketing at any time
• Right to data portability — to receive your data in a common, machine-readable format
• Right to withdraw consent — where we rely on consent, you can withdraw it at any time without affecting anything done before
• Right not to be subject to automated decision-making — including profiling that significantly affects you

How to exercise your rights: Email us at [INSERT EMAIL] with the words “Data Request” in the subject line. We may ask you to confirm your identity so we do not release your data to the wrong person.

Our response time: We will respond within 30 days. If your request is complex we may need longer, and we will tell you why before that deadline passes. Exercising your rights is free.

8. Keeping Your Information Secure

We use appropriate technical and organisational measures to protect your data, including:

• Encrypted connections (SSL/HTTPS) across the entire website
• Secure, access-controlled hosting
• Strong password requirements and restricted staff access on a need-to-know basis
• Payment handled entirely by regulated third-party providers, so card data never reaches our systems
• Regular software, plugin, and security updates
• Routine backups

No system can ever be guaranteed completely secure. If a data breach occurs that is likely to put your rights at risk, we will notify the NDPC within 72 hours of becoming aware of it, and we will tell you directly where required.

Please help us by choosing a strong, unique password and never sharing your account details.

9. Age Restriction

Our website and products are strictly for adults aged 18 and over.

We do not knowingly collect personal data from anyone under 18. If you are under 18, please do not use this website, create an account, or attempt to place an order.

If we discover that we hold data belonging to someone under 18, we will delete it promptly. If you believe a minor has provided us with personal data, contact us immediately at [INSERT EMAIL].

10. How to Contact Us

For any question, concern, or request about your privacy:

We take every privacy concern seriously and aim to resolve it quickly and fairly.

11. Complaints

If you are not satisfied with how we have handled your data or your request, you have the right to complain to the regulator:

Nigeria Data Protection Commission (NDPC) Website: ndpc.gov.ng

We would appreciate the chance to address your concern first, so please do contact us before escalating.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in the law. The “Last updated” date at the top shows when it was last revised.

If we make a significant change, we will let you know by a notice on our website or by email where appropriate. Please review this page occasionally.

By using goldenevewines.com, you confirm that you have read and understood this Privacy Policy.