PRIVACY POLICY – UNITED KINGDOM (UK GDPR)

Issued by La Maison NiCi's – Abidjan, Côte d'Ivoire, operating through Greenchic Africa – UK

Data Controller: La Maison NiCi's
Address: 2 Plateaux Vallon, Rue J85, Villa 217, Abidjan, Côte d'Ivoire
Email: privacy@greenchic.africa / dpo@greenchic.africa

1. Introduction

This Privacy Policy explains how La Maison NiCi's, an individual enterprise registered in Côte d'Ivoire and operating through Greenchic Africa, collects, uses, stores, and protects personal data of its customers, partners, and users within the United Kingdom, in compliance with the UK GDPR and the Data Protection Act 2018.

3. Legal Basis for Processing

Processing of personal data is based on:

The explicit consent of the data subject
The performance of a contract or pre-contractual measures
Compliance with legal obligations
The legitimate interests of La Maison NiCi's in providing and improving services

4. Data Collected

We collect and process the following categories of personal data:

Identity and contact information (name, address, phone, email)
Commercial data (purchase history, preferences, order records)
Payment data (transaction references, handled by certified third parties)
Technical data (IP address, cookies, logs)
Communication data (messages sent via website or social networks)

5. Purpose of Processing

Data are processed for:

Order management, delivery, and invoicing
Customer relationship management and loyalty programs
Communication and marketing (with consent)
Service improvement and user experience analysis
Legal and accounting compliance

6. Data Recipients

Personal data are processed by:

La Maison NiCi's (data controller)
Greenchic Africa UK (operating branch)
Technical service providers (GoDaddy, payment processors, logistics partners)
Public authorities when legally required

No data is sold or transferred to third parties for commercial purposes.

7. International Data Transfers

Personal data may be transferred outside the United Kingdom, including to the United States (GoDaddy hosting) and Côte d'Ivoire (main office). These transfers are carried out with the explicit consent of the data subjects, under Standard Contractual Clauses (SCC) approved by the ICO, and with adequate safeguards ensuring data protection.

8. Data Retention

Customers: 5 years after last transaction
Prospects: 3 years after last contact
Accounting data: 10 years
Cookies and logs: 12 months

9. Rights of Data Subjects

Under the UK GDPR, individuals have the right to:

Access their personal data
Request rectification or deletion
Restrict or object to processing
Withdraw consent at any time
File a complaint with the Information Commissioner's Office (ICO)

Contact: privacy@greenchic.africa

10. Data Security

La Maison NiCi's implements appropriate technical and organisational measures:

SSL encryption and secure hosting
Restricted access to authorised personnel only
Regular backups and monitoring
Incident response and reporting procedures

11. Declaration and Registration

La Maison NiCi's commits to registering its data processing activities with the Information Commissioner's Office (ICO) and obtaining any required authorisations for cross-border data transfers.

12. Updates

This policy may be updated to reflect legal or technological developments. Latest update: October 2025.