Privacy
Your data, handled plainly
We name our stones plainly, and we treat your information the same way: what we collect, why, who sees it, and how to ask us to change or delete it.
Who we are
Villa De Jewels (“the house”, “we”, “us”) runs villadejewels.com and is responsible for the personal data described here. If you have any question about this policy or your data, write to hello@villadejewels.com or use our contact form.
What we collect, and why
| When you… | We collect | So that we can |
|---|---|---|
| Send a message or book a viewing | Name, email, phone (optional), your message | Reply to you and arrange your viewing |
| Join the house letter | Email address | Send our monthly letter, until you unsubscribe |
| Place an order | Name, delivery address, phone, email, order details | Make, deliver and support your piece, and keep the records the law requires |
| Create an account or save a wishlist | Login details, saved pieces | Keep your account and wishlist working |
| Browse the site | Pages viewed, device and browser type, approximate location (only if you accept analytics cookies) | Understand which pages help guests, and improve the site |
Our legal bases under the Nigeria Data Protection Act 2023 are: performing a contract with you (orders), your consent (the house letter and analytics cookies), and our legitimate interest in answering enquiries and running the house well. Where we rely on consent, you can withdraw it at any time.
Payments
When online payment is available, card details are entered directly with our payment provider and never reach or stay on our servers. We only receive confirmation that a payment succeeded.
Who we share it with
We never sell your data. We share only what is needed with the services that help us run the house:
- Hostinger, which hosts this website.
- Google (Analytics and Search Console), to measure how the site is used, only with your consent.
- Delivery partners, who need your name, address and phone to bring your piece to you.
- Our payment provider, when online payment is enabled.
- Authorities, only when the law requires it.
Some of these providers store data outside Nigeria. Where they do, we rely on the safeguards the Nigeria Data Protection Act allows, such as the provider’s contractual commitments.
Cookies
Cookies are small files stored by your browser. We use two kinds:
| Cookie | Purpose | Kept for |
|---|---|---|
| woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_* | Essential. Remember your bag and checkout | The session, up to 2 days |
| wordpress_logged_in_*, wordpress_sec_* | Essential. Keep you signed in to your account | The session, or up to 14 days if you choose “remember me” |
| woosw_key | Essential. Remember your wishlist | Up to 1 year |
| wp_consent_* | Essential. Remember your cookie choice | Up to 1 year |
| _ga, _ga_* | Analytics (optional). Google Analytics: count visits and see which pages are used | Up to 2 years |
Analytics cookies are only set if you choose Accept on our cookie notice. You can change your mind at any time with the cookie settings link, or by clearing cookies in your browser.
How long we keep it
- Messages and viewing requests: up to 2 years after our last contact.
- Order and invoice records: 6 years, as tax law requires.
- House letter: until you unsubscribe.
- Accounts and wishlists: until you close your account, or after 3 years without use.
- Google Analytics data: no longer than 14 months.
Your rights
Under the Nigeria Data Protection Act 2023 you can ask us to: see the data we hold about you; correct it; delete it; restrict or object to how we use it; receive a copy to take elsewhere; and withdraw consent you have given. Write to hello@villadejewels.com and we will reply within 30 days. If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission.
Keeping it safe
The site uses an encrypted connection (HTTPS), access to our systems is limited to the people who need it, and we only keep what we need for as long as we need it.
Children
This site is not intended for anyone under 18, and we do not knowingly collect their data.
Changes
If we change this policy, we will update it here and change the date below.
Last updated 4 October 2026.