Privacy Policy

This policy explains what personal data Eleven Enterprise ("we", "us") collects through this website, why, and what rights you have over it. We operate in Nigeria and aim to comply with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation (NDPR).

What we collect

• Account details: name, email, and a securely hashed password, if you create an account.
• Order details: items purchased, delivery/contact information, and payment confirmation (we never see or store your card details, see Payments below).
• Booking details: the session type, date, time, and any note you add when requesting a reading.
• Communications: anything you tell us directly, such as an inquiry about Ongoing guidance.
• Technical data: your IP address (used only to prevent abuse of checkout and sign-in, see the security note below) and basic site usage.

Why we collect it

To fulfil orders and bookings, issue receipts, respond to you, keep the checkout process secure (preventing duplicate or abusive bookings/purchases), and meet our own legal and accounting obligations.

Who we share it with

We use a small number of processors to run this site, each only for the purpose stated:

• Paystack: processes payments. We never receive or store your card number.
• Resend: sends transactional emails (receipts, booking confirmations, password resets).
• Vercel: hosts the site, the database, and any images/files you see here.

We do not sell personal data, and we do not share it with anyone for their own marketing purposes.

How long we keep it

Order, invoice, and payment records: 6 years from the end of the relevant accounting year. This isn't our own preference. It matches Nigerian tax law's recordkeeping requirements (Companies Income Tax Act s.66, FIRS Establishment Act s.55), which require financial records to be retained at least this long.

Account data (your profile, login credentials): kept for as long as your account is active, and deleted on request (see "Your rights" below).

Booking requests, cancelled bookings, and enquiries that don't result in a completed, confirmed booking or purchase: 6 months from the date of the request, after which they're deleted. Nigeria's Data Protection Act doesn't set a fixed number for this category. It's left to be defined by the data controller, so this is a deliberate choice, not a legal minimum.

Outside of what's listed above, our general practice is to keep data only for as long as it's needed for the purpose it was collected for, or as long as the law requires, whichever is longer.

Your rights

If you have an account, you can:

• Download a copy of your data at any time from your account page.
• Delete your account at any time from the same page. Deleting your account removes your login and profile; past orders/bookings are kept as business records but are no longer linked to you.
• Contact us at elvn.lvn11@gmail.com to correct inaccurate data or ask any question about how your data is handled.

Security

Passwords are never stored in plain text. Sessions use secure, browser-only cookies. Checkout is rate-limited and server-verified to prevent abuse. Payment card data never touches our servers. It's handled entirely by Paystack.

Children

This site is not directed at children, and we don't knowingly collect data from anyone under 18. See our Terms of Use for our age requirement.

Changes to this policy

We'll update this page if what we collect or how we use it changes, and update the date at the top.

Contact

Eleven Enterprise
[Add BUSINESS_ADDRESS to your env]
elvn.lvn11@gmail.com