Privacy policy

• No card details payments are handled entirely by our payment partners
• Your choice analytics cookies only if you accept them
• Self-service download or erase your data from My Account → Privacy

Who we are

This website is operated by ODDWRIST (“we”, “us”), c/o Carmax Autocare Center, Plot A2 Billings Way, Inside 10 Degrees Event Center, Oregun, Ikeja, Lagos, Nigeria. We are responsible for the personal data described in this policy and handle it in line with the Nigeria Data Protection Act 2023. For anything about your data, email orders@oddwrist.com.

What we collect

• Orders: your name, billing and delivery addresses, email, phone number, what you ordered, and any gift message.
• Your account: your email, password (stored only as a secure hash), saved addresses, wishlist, alerts and preferences.
• Returns and warranty: the reason for a return and, if you register a watch, its serial number and purchase details.
• Messages and reviews: what you send through our contact form, and reviews you publish with the name you choose.
• Newsletter: your email and a record of the consent you gave. You join only after confirming by email.
• Alerts: your email if you ask to be told when a watch is back in stock.
• Campaign source: if you arrive from one of our campaigns, which campaign it was, saved with your order.
• Searches: the words typed into our search box, without anything that identifies you, to improve results.

What we never collect

Card numbers or security codes. You enter card details on our payment partner’s secure form, and we receive only confirmation that the payment succeeded.

Why we use it

• To fulfil your order and contract with you: processing payment, delivery, returns, warranty and customer service.
• With your consent: our newsletter, stock and price alerts, and analytics cookies. You can withdraw consent at any time.
• For legitimate interests: keeping the store secure, preventing fraud and abuse, and improving search and the catalogue.
• To meet legal obligations: keeping transaction records required by tax and accounting law.

Who we share it with

• Payment partners (for example Paystack, Flutterwave, Stripe or PayPal, depending on the method you choose) to take your payment.
• Delivery partners, who receive your name, address and phone number to deliver your order.
• Our hosting and email provider, which runs this website and sends our emails.
• Google Analytics, only if you accept analytics cookies. IP addresses are anonymised, and purchase events contain product information only — never your name or contact details.

We don’t sell your personal data. Some of these providers process data outside Nigeria; where they do, we rely on the safeguards the Nigeria Data Protection Act requires.

Cookies and similar technologies

Essential cookies keep the store working and are always on. Analytics cookies are set only if you choose “Accept” in the cookie banner.

• Cart and checkout (woocommerce_*, wp_woocommerce_session_*): your bag, for up to two days.
• Signing in (wordpress_*): keeps you signed in, for the session or up to two weeks if you choose “Keep me signed in”.
• ow_consent: remembers your cookie choice, for 180 days.
• ow_currency: remembers your currency, for one year.
• ow_compare: watches you are comparing, for 30 days.
• ow_wl_token: your wishlist if you aren’t signed in, for 60 days.
• ow_utm: the campaign that brought you here, for 30 days.
• _ga, _ga_* (Google Analytics, only with your consent): anonymous usage statistics, for up to two years.
• Your browser’s local storage also keeps your light or dark mode choice and recently viewed watches. This stays on your device.

How long we keep it

• Orders and invoices: for as long as tax and accounting law requires.
• Your account: until you delete it, or ask us to.
• Search terms: 90 days. Guest wishlists: 60 days.
• Completed stock alerts: 180 days. Unconfirmed newsletter sign-ups: 30 days.
• Unsubscribed newsletter addresses: erased after two years; we keep a minimal record until then so we don’t email you again.
• Security logs of staff actions: 12 months.

Your rights

You can ask to see, correct, download or delete your personal data, to restrict or object to how we use it, and to withdraw consent at any time. With an account, you can download or erase your data yourself from My Account → Privacy. Otherwise, email orders@oddwrist.com. We will reply within the time the law requires.

If you’re not satisfied with our response, you can complain to the Nigeria Data Protection Commission.

Security

The whole site runs over an encrypted connection (HTTPS). Staff access is limited by role and logged, and passwords are stored as secure hashes. No system is perfect, but we work to keep your data safe and will tell you and the regulator if a breach puts you at risk.

Children

Our store is not intended for children under 18, and we don’t knowingly collect their data.

Changes to this policy

If we change how we handle your data, we’ll update this page and the date at the top. Significant changes will be highlighted on the site or emailed to account holders.