Legal
Privacy Policy
How Edimays Couture collects, uses, protects, and stores customer information across the storefront.
Effective date: 24 July 2026
Last updated: 24 July 2026
Introduction
Edimays Couture respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how Edimays Couture collects, uses, stores, shares and protects personal information when you:
visit edimayscouture.com;
create or use a customer account;
place or manage an order;
make a payment;
request delivery, a return, an exchange or a refund;
subscribe to our email or SMS communications;
communicate with our customer-service team;
interact with our advertisements or social-media pages; or
otherwise use our products and services.
It also explains the privacy rights that may be available to you.
This Privacy Policy applies to customers and website visitors in Ghana and other countries from which Edimays Couture accepts orders.
Who We Are
For the purposes of applicable data-protection laws, the controller responsible for your personal information is:
Legal or registered business name: Edimays Couture
Trading name: Edimays Couture
Business registration number: BN684910822
Registered or principal address: 42, ATIA TSO NAA ST, GK-0434-8584
Email: edimayscouture@gmail.com
Customer-service email: edimayscouture@gmail.com
Telephone: +233554091090
Website: edimayscouture.com
In this Privacy Policy, “Edimays Couture,” “we,” “us” and “our” refer to the business identified above.
Laws Governing This Policy
Edimays Couture is based in Ghana. Our processing of personal information is therefore governed primarily by applicable Ghanaian laws, including:
the Data Protection Act, 2012 (Act 843);
the Electronic Transactions Act, 2008 (Act 772); and
other applicable Ghanaian consumer-protection, ecommerce, cybersecurity, tax, accounting and commercial laws.
Where we offer products or services to individuals located in the European Economic Area, the European Union General Data Protection Regulation may also apply to the relevant processing.
Where we offer products or services to individuals located in the United Kingdom, applicable UK data-protection and electronic-marketing laws may also apply, including the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.
Other national or regional privacy laws may apply depending on the customer’s location, our activities in that jurisdiction and any applicable legal thresholds.
Nothing in this Privacy Policy limits any rights that cannot lawfully be limited under applicable law.
Personal Information We Collect
The information we collect depends on how you interact with us.
4.1 Identity and Contact Information
We may collect:
full name;
title;
email address;
telephone number;
billing address;
delivery address;
city, region, postal code and country;
account username;
customer number; and
social-media username where you contact us through social media.
4.2 Account Information
When you create or use an account, we may collect:
login credentials;
encrypted or hashed password information;
account preferences;
saved delivery addresses;
saved products or wish lists;
account creation date;
account activity;
login history;
security information; and
communication preferences.
You are responsible for keeping your login credentials confidential.
4.3 Order and Transaction Information
We may collect and generate information relating to:
products ordered;
product size, colour, quantity and other selections;
order value;
discounts and promotional codes;
billing and delivery details;
order number;
payment status;
transaction reference;
purchase history;
delivery status;
cancellations;
returns;
exchanges;
refunds;
complaints;
store credits; and
suspected fraudulent or unauthorised transactions.
4.4 Payment Information
Payments may be processed by third-party payment providers.
Depending on your selected payment method, the payment provider may collect:
cardholder name;
debit or credit card details;
mobile-money information;
bank or wallet information;
billing address;
authentication details;
transaction information; and
fraud-prevention information.
Edimays Couture does not ordinarily receive or store complete payment-card numbers, card security codes or complete mobile-money credentials.
We may receive limited payment information, such as:
payment method;
payment status;
transaction reference;
card type;
the final digits of a payment card; and
information required to process a refund or resolve a payment dispute.
Our payment providers process personal information under their own privacy notices and legal obligations.
4.5 Delivery Information
To fulfil and deliver an order, we may collect or disclose:
recipient name;
telephone number;
email address;
delivery address;
delivery instructions;
order reference;
parcel details;
customs information;
tracking information;
delivery confirmation; and
correspondence about a delayed, failed or disputed delivery.
4.6 Product Preferences
We may collect information such as:
clothing size;
fit preferences;
colour preferences;
products viewed;
products saved;
wish-list activity;
shopping-basket contents;
previous purchases; and
product recommendations selected or rejected.
4.7 Communications and Customer Support
When you contact us, we may collect:
the contents of your message;
email and chat correspondence;
telephone call notes;
photographs or videos you provide;
product reviews;
feedback;
survey responses;
return or complaint details; and
records of how we responded.
Please do not send sensitive personal information unless it is necessary for us to address your request.
4.8 Marketing Information
We may collect:
email and SMS subscription status;
marketing consent records;
communication preferences;
messages opened;
links selected;
campaign source;
advertising interactions;
promotion participation; and
unsubscribe or opt-out records.
4.9 Information Collected Automatically
When you use our website, authorised service providers and we may automatically collect:
Internet Protocol address;
browser type and version;
device type;
operating system;
device identifiers;
approximate location derived from an IP address;
language and region;
referring website;
pages and products viewed;
searches conducted;
links and buttons selected;
basket activity;
checkout activity;
date and time of access;
session duration;
cookie identifiers;
advertising identifiers;
website errors;
diagnostic information;
security logs; and
website performance information.
4.10 Information Received From Other Sources
We may receive personal information from:
payment processors;
banks and financial institutions;
delivery and logistics providers;
ecommerce service providers;
hosting and cloud-service providers;
identity and authentication providers;
email and SMS providers;
analytics providers;
advertising and social-media platforms;
fraud-prevention providers;
customer-service platforms;
business partners;
public sources; and
another person who places an order or arranges delivery on your behalf.
5. How We Use Personal Information
We may use personal information for the following purposes.
5.1 Providing Our Products and Services
We may use your information to:
operate our website and online store;
create and manage customer accounts;
display products;
maintain wish lists and shopping baskets;
receive and process orders;
process or verify payments;
provide order confirmations;
prepare and package products;
arrange domestic and international delivery;
provide delivery and tracking updates;
manage cancellations, returns, exchanges and refunds;
provide customer support; and
maintain records of your purchases.
5.2 Communicating With You
We may use your information to:
send order, payment and delivery notifications;
respond to enquiries;
provide sizing, product-care or purchasing assistance;
communicate about a return, exchange or refund;
notify you of account or security issues;
send service announcements;
communicate changes to our services or policies; and
request feedback about your experience.
5.3 Personalizing and Improving Our Services
We may use information to:
remember your preferences;
recommend products;
personalize website content;
understand how customers use our website;
identify popular products;
improve navigation and checkout;
test website functionality;
diagnose technical errors;
conduct research and analytics; and
improve our products, services and customer experience.
5.4 Marketing and Advertising
Where permitted by law, we may use your information to:
send promotional emails;
send promotional SMS messages;
notify you about new collections, products, offers or events;
personalize advertisements;
create advertising audiences;
conduct retargeting or remarketing;
measure advertising effectiveness;
determine whether an advertisement resulted in a visit or purchase; and
prevent the same advertisement from being displayed excessively.
We will obtain consent where applicable law requires it.
5.5 Security and Fraud Prevention
We may use personal information to:
authenticate customer accounts;
verify transactions;
identify suspicious activity;
prevent payment fraud;
investigate unauthorized access;
secure our website and systems;
enforce our policies;
protect customers and the public; and
maintain security and audit records.
5.6 Legal and Business Purposes
We may process personal information to:
maintain accounting and tax records;
comply with customs and international-shipping requirements;
comply with consumer-protection obligations;
respond to lawful regulatory or court requests;
establish, exercise or defend legal claims;
enforce contracts;
resolve disputes;
obtain professional advice;
conduct audits;
manage insurance claims; and
protect our legal rights, property and business.
6. Lawful Grounds for Processing
Where applicable law requires us to identify a lawful basis, we rely on one or more of the following grounds.
6.1 Performance of a Contract
We process information where necessary to:
create and administer your customer account;
accept and process an order;
process payment;
deliver your purchase;
communicate about your order;
manage a cancellation;
provide an exchange;
issue a refund; or
otherwise perform our agreement with you.
Certain information is necessary to fulfil your order. If it is not provided, we may be unable to complete the transaction or deliver your products.
6.2 Steps Taken Before Entering a Contract
We may process information at your request to:
answer a product enquiry;
provide sizing or fit guidance;
calculate delivery options;
confirm product availability; or
help you prepare an order.
6.3 Legal Obligations
We may process information where necessary to comply with:
tax and accounting requirements;
consumer-protection laws;
customs and shipping requirements;
court orders;
regulatory requirements;
fraud-prevention requirements; and
other applicable legal obligations.
6.4 Legitimate Interests
We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights.
Our legitimate interests may include:
operating and improving our store;
securing our systems;
preventing fraud;
maintaining business records;
understanding customer behaviour;
improving products and services;
measuring business performance;
communicating with existing customers;
defending legal claims; and
protecting our business, customers and personnel.
Where required, we assess the purpose, necessity and potential privacy impact of processing based on legitimate interests.
6.5 Consent
We may rely on your consent for:
non-essential cookies;
analytics technologies where consent is required;
personalized advertising;
promotional emails;
promotional SMS messages;
optional profile information; and
any other processing for which the law requires consent.
You may withdraw consent at any time. Withdrawal does not affect processing lawfully carried out before consent was withdrawn.
6.6 Vital Interests
In an emergency, we may process information where reasonably necessary to protect a person’s life or physical safety.
6.7 Legal Claims
We may process and retain information where necessary to establish, exercise or defend a legal claim.
7. Cookies and Similar Technologies
Our website may use cookies, pixels, tags, local storage and similar technologies.
7.1 Strictly Necessary Technologies
Strictly necessary technologies support essential functions such as:
website security;
shopping-basket functionality;
checkout;
payment processing;
customer authentication;
traffic management;
fraud prevention; and
recording your privacy choices.
These technologies generally cannot be disabled through our consent tool because the website may not function properly without them.
7.2 Preference Technologies
Preference technologies remember choices such as:
language;
region;
account settings;
shopping preferences; and
display preferences.
7.3 Analytics Technologies
Analytics technologies help us understand:
how visitors use the website;
which products and pages are popular;
whether errors occur;
how customers navigate through checkout;
where website traffic originates; and
how the website performs.
7.4 Advertising Technologies
Advertising technologies may be used to:
measure advertisements;
personalize advertising;
create advertising audiences;
conduct retargeting;
associate website activity with an advertising campaign; and
determine whether an advertisement led to a purchase.
Where consent is required, non-essential analytics and advertising technologies will not be activated until you have made a valid consent choice.
You may accept, reject or customise non-essential technologies using our cookie-consent tool.
You may change your choices at any time using the Cookie Settings link in the website footer.
You can also delete or block cookies through your browser. Blocking certain technologies may affect some website features.
Further details, including the names, providers, purposes and durations of cookies, should be provided in our separate Cookie Policy or consent-management tool.
8. Marketing Communications
We may send marketing communications where:
you have given consent;
the communication is permitted under applicable law; or
an existing-customer marketing exception lawfully applies.
You may unsubscribe at any time by:
selecting the unsubscribe link in a marketing email;
following the opt-out instructions in an SMS;
changing your account preferences; or
contacting us at edimayscouture@gmail.com.
We may maintain a minimal suppression record after you unsubscribe so that we do not accidentally add you back to a marketing list.
Opting out of marketing will not prevent us from sending essential communications concerning:
your order;
payment;
delivery;
return;
refund;
account security; or
changes that materially affect our services or policies.
9. How We Share Personal Information
We do not sell personal information for monetary payment.
We may disclose information to the following recipients where reasonably necessary.
9.1 Payment Providers
Payment providers may process payments, authenticate transactions, manage disputes, issue refunds and prevent fraud.
Payment providers used by Edimays Couture: Paystack Ghana Ltd
9.2 Delivery, Courier and Logistics Providers
We may disclose delivery information to:
local couriers;
international couriers;
fulfilment providers;
postal services;
customs authorities; and
delivery-support providers.
Delivery providers used by Edimays Couture: DHL and Local Courier Operators
9.3 Website, Hosting and Cloud Providers
These providers may host our:
website;
databases;
product images;
customer accounts;
files;
backups;
emails; and
other technical infrastructure.
Relevant providers: Netlify, Cloudinary, MongoDB, BackBlaze B2.
9.4 Ecommerce and Authentication Providers
These providers may support:
website functionality;
checkout;
account management;
identity verification;
authentication;
order management; and
inventory management.
Relevant providers: NextAuth, Google Oauth.
9.5 Email and SMS Providers
We may use third-party providers to deliver:
order confirmations;
account notifications;
delivery messages;
customer-service communications;
promotional emails; and
promotional SMS messages.
Relevant providers: Brevo.
9.6 Analytics, Advertising and Social-Media Providers
Subject to your consent choices and applicable law, information may be disclosed to analytics, advertising and social-media providers.
Relevant providers: Google Analytics
Depending on the service and legal context, these providers may act as processors, independent controllers or joint controllers.
9.7 Fraud and Security Providers
We may disclose limited information to providers that help:
authenticate users;
prevent fraudulent transactions;
detect bots;
secure our website;
monitor suspicious activity; and
investigate security incidents.
9.8 Professional Advisers
We may disclose information to:
lawyers;
accountants;
auditors;
insurers;
banks;
tax advisers; and
other professional consultants.
These recipients are expected to protect information under applicable confidentiality and legal obligations.
9.9 Government and Legal Authorities
We may disclose information where required or permitted by law, including to:
the Ghana Data Protection Commission;
tax authorities;
customs authorities;
courts;
law-enforcement bodies;
regulators; and
other competent public authorities.
9.10 Corporate Transactions
Personal information may be disclosed in connection with a proposed or completed:
merger;
investment;
financing;
acquisition;
restructuring;
transfer of assets;
insolvency; or
sale of all or part of Edimays Couture.
Any recipient will be required to handle personal information in accordance with applicable law.
10. International Data Transfers
Edimays Couture is based in Ghana and serves customers in Ghana and other countries.
Our service providers may operate or store personal information in Ghana, the European Economic Area, the United Kingdom, the United States and other countries.
As a result, your information may be:
transferred outside your country;
accessed from another country; or
stored in a country whose privacy laws differ from those in your location.
We will take reasonable steps to ensure that international transfers are lawful and appropriately protected.
Where the EU GDPR applies to a restricted international transfer, safeguards may include:
a European Commission adequacy decision;
approved Standard Contractual Clauses;
supplementary contractual, organisational or technical measures;
an approved certification or code mechanism;
a legally permitted derogation; or
another valid transfer mechanism.
Where UK data-protection law applies, safeguards may include:
UK adequacy regulations;
the UK International Data Transfer Agreement;
the UK Addendum to approved Standard Contractual Clauses;
supplementary safeguards;
a legally permitted exception; or
another authorised transfer mechanism.
You may contact us for information about safeguards relevant to your information.
11. Data Retention
We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, including legal, tax, accounting, security and dispute-resolution requirements.
Our general retention periods are:
Customer account information: while the account remains active and for up to one year after account closure;
Orders, payments and invoices: for at least the period required under applicable Ghanaian tax, accounting and commercial laws;
Delivery records: until delivery is completed and for an appropriate period to handle claims and disputes;
Returns, exchanges and refunds: for one year after the matter is completed;
Customer-service records: for one year after the enquiry or complaint is resolved;
Marketing consent records: while marketing continues and for an appropriate period after withdrawal or opt-out;
Marketing suppression records: for as long as reasonably necessary to respect the opt-out;
Cookie and analytics records: according to the duration disclosed in our Cookie Policy or consent tool;
Shopping-basket and abandoned-checkout records: for one month;
Security logs: for one year, unless needed for an investigation;
Fraud-prevention records: for as long as reasonably necessary to detect, prevent and investigate fraud; and
Legal-dispute records: until the matter is finally resolved and applicable limitation periods have expired.
We consider the following when deciding how long to retain information:
the purpose for which it was collected;
the amount and sensitivity of the information;
the potential harm from unauthorized use;
whether the information remains necessary;
contractual requirements;
statutory retention duties; and
applicable limitation periods.
When information is no longer required, we will delete it, anonymize it or securely restrict access to it.
Information that has been irreversibly anonymized may be retained for statistical and analytical purposes.
12. Data Security
We use reasonable technical and organizational safeguards designed to protect personal information against:
unauthorized access;
accidental loss;
unlawful use;
alteration;
disclosure;
destruction; and
other forms of unauthorized processing.
Depending on the system and information involved, our safeguards may include:
encrypted website connections using HTTPS;
password hashing;
authentication and access controls;
restricted administrative permissions;
secure payment processing through authorized providers;
system and security monitoring;
audit logging;
backups;
software patching;
malware and vulnerability protections;
vendor reviews;
confidentiality obligations; and
incident-response procedures.
Only persons who need personal information for an authorized business purpose should be permitted to access it.
No internet transmission, website, or storage system can be guaranteed to be completely secure. You should use a strong, unique password and contact us promptly if you suspect unauthorized access to your account.
13. Personal-Data Breaches
Where we become aware of a suspected personal-data breach, we will:
investigate the incident;
take reasonable steps to contain it;
assess the likely risks;
document the incident;
take appropriate corrective measures; and
make notifications required by applicable law.
Where legally required, we will notify the relevant data-protection authority and affected individuals.
14. Your Privacy Rights
Your rights depend on the law applicable to your personal information.
Subject to applicable conditions, exemptions and identity verification, you may have the right to:
be informed about the processing of your information;
request confirmation that we hold your personal information;
access your personal information;
request correction of inaccurate or incomplete information;
request deletion of information;
object to certain processing;
object to direct marketing at any time;
withdraw consent;
request restriction of processing;
request a copy of certain information in a structured, commonly used and machine-readable format;
request transfer of eligible information to another controller;
complain to a data-protection authority;
receive information about international-transfer safeguards; and
request human involvement in certain automated decisions.
These rights are not absolute. We may refuse or limit a request where permitted by law, including where information must be retained for:
legal compliance;
tax or accounting records;
fraud prevention;
contractual claims;
legal proceedings;
public-interest purposes; or
the rights and freedoms of another person.
15. Rights of Customers in Ghana
Subject to the Data Protection Act, 2012 and applicable exceptions, customers in Ghana may request:
information about the processing of their personal data;
access to personal data held about them;
correction or deletion of inaccurate, excessive or unlawfully processed information;
cessation of direct marketing;
prevention of processing likely to cause unwarranted damage or distress; and
other remedies available under applicable Ghanaian law.
Customers may also submit a complaint to the Ghana Data Protection Commission.
16. Rights of Individuals in the European Economic Area
Where the EU GDPR applies, you may have the right to:
access;
rectification;
erasure;
restriction;
objection;
data portability;
withdrawal of consent;
freedom from certain solely automated decisions; and
lodge a complaint with a competent supervisory authority.
You may object at any time to processing of your personal information for direct-marketing purposes.
Where we rely on legitimate interests, you may object based on circumstances specific to you. We may continue processing where we demonstrate compelling legitimate grounds or where processing is required for legal claims.
17. Rights of Individuals in the United Kingdom
Where UK data-protection law applies, you may have rights concerning:
access;
correction;
erasure;
restriction;
objection;
data portability;
withdrawal of consent;
certain automated decisions; and
complaints to the UK Information Commissioner’s Office.
Your rights remain subject to applicable legal conditions and exemptions.
18. Exercising Your Rights
To exercise a privacy right, contact us at:
Email: edimayscouture@gmail.com
Email subject: Privacy Request
Please include:
your name;
the email address associated with your account or order;
a description of your request; and
any information reasonably necessary to identify the relevant account or transaction.
We may request additional information to verify your identity and prevent unauthorized disclosure.
Where permitted, an authorized representative may submit a request on your behalf. We may require proof of the representative’s authority and may still need to verify your identity.
We aim to respond within the time required by applicable law. Where the GDPR applies, this will generally be within one month, subject to permitted extensions.
We do not ordinarily charge a fee. We may charge a reasonable fee or refuse a request where permitted by law, including where a request is manifestly unfounded, excessive or repetitive.
19. Automated Decision-Making and Profiling
We may use limited automated systems to:
detect potentially fraudulent transactions;
identify suspicious account activity;
recommend products;
personalize website content;
create advertising audiences; and
analyze marketing performance.
We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects unless:
the processing is necessary to enter into or perform a contract;
it is authorized by applicable law; or
you have provided explicit consent,
and any legally required safeguards are provided.
Where applicable, you may request:
human review;
an explanation;
an opportunity to express your view; and
an opportunity to challenge the decision.
20. Children’s Privacy
Our website is intended for adults and is not directed at children.
You must be at least 18 years old, or the age of legal majority in your country, to create an account or purchase independently.
We do not knowingly collect personal information directly from children for account registration or marketing purposes without legally valid permission from a parent or guardian.
A parent or guardian who believes that a child has submitted personal information without appropriate permission should contact us at edimayscouture@gmail.com.
We will take reasonable steps to investigate and delete the information where required.
21. Gift Orders and Information About Other People
You may provide another person’s details when:
purchasing a gift;
naming a delivery recipient; or
arranging delivery on someone else’s behalf.
You must have permission to provide that person’s information.
We will use the information only as reasonably necessary to fulfil the order, communicate about delivery and comply with legal requirements.
22. Social Media
Edimays Couture may operate pages on social media platforms.
When you interact with our social media pages, the platform may independently collect and process information under its own privacy policy.
Depending on the platform and activity, Edimays Couture and the platform may act as:
separate controllers;
joint controllers; or
controller and processor.
You should review the privacy and advertising settings provided by the relevant platform.
23. Third-Party Websites and Services
Our website may link to:
payment providers;
courier tracking websites;
social media platforms;
external content; and
other independently operated services.
We do not control the privacy or security practices of independently operated third parties.
A link does not mean that we endorse the third party’s privacy practices. You should review the third party’s privacy notice before providing personal information.
24. Business Customers
Where a customer purchases on behalf of a company or organization, we may process:
employee or representative names;
business contact details;
billing information;
delivery details;
purchasing authority; and
transaction records.
The organization providing this information is responsible for ensuring it has a lawful basis for doing so.
25. Do Not Track and Browser Privacy Signals
Some browsers transmit “Do Not Track” signals. There is currently no single universally accepted standard for responding to every such signal.
Where required by applicable law and supported by our consent technology, we will recognise applicable browser-based privacy preferences or opt-out signals.
You may also manage privacy preferences through:
our Cookie Settings tool;
your browser;
your device settings; and
the settings provided by advertising and social-media platforms.
26. Complaints
We encourage you to contact us first so we can try to resolve your concern.
Privacy email: edimayscouture@gmail.com
Ghana
You may submit a complaint to:
Data Protection Commission of Ghana
Website: dataprotection.org.gh
Telephone: +233256301533
Email: info@dataprotection.org.gh
European Economic Area
Where the EU GDPR applies, you may lodge a complaint with the supervisory authority in:
the country where you live;
the country where you work; or
the country where you believe the infringement occurred.
United Kingdom
Where UK data-protection law applies, you may lodge a complaint with the UK Information Commissioner’s Office.
You are not required to contact us before exercising any right to complain directly to a competent authority.
27. European or UK Representatives
Where required by applicable law, Edimays Couture may appoint a representative in the European Economic Area or United Kingdom.
The absence of representative details in this section should not be interpreted as a representation that an appointment is or is not legally required. This requirement should be assessed based on Edimays Couture’s actual EU and UK activities.
28. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in:
our products and services;
our technologies;
our service providers;
our business operations;
applicable laws;
regulatory guidance; or
our processing activities.
The updated policy will be published on this page with a revised “Last updated” date.
Where a change materially affects your rights or how we use personal information, we will provide additional notice where required, such as through:
a website notice;
an account notification; or
email.
Where a new purpose requires consent, we will request consent before beginning the relevant processing.
29. Contact Us
For questions, complaints or privacy requests, contact:
Edimays Couture trading as Edimays Couture
Business address: 42, ATIA TSO NAA ST, GK-0434-8584
Privacy email: edimayscouture@gmail.com
Customer-service email: edimayscouture@gmail.com
Telephone: +233554091090
Website: edimayscouture.com
Please use the subject line “Privacy Request” when contacting us about personal information.