Privacy Policy

1. Who we are

RoyalFloor.ng is a website for flooring, building materials,
construction-related products and related service inquiries.
In this Policy, “RoyalFloor”, “we”, “us” and “our” refer to the
business operating the website at
https://royalfloor.ng/.

We act as the data controller for personal information where we
determine why and how it is processed. A data controller is the
person or organisation responsible for those decisions.

Business contact details
RoyalFloor.ng
Coker, Lagos, Nigeria
Email: contact@royalfloor.ng
Telephone: 07042452081

For privacy requests, contact us using the email above and put
“Privacy Request” in the subject line. We will direct your request
to the person responsible for handling privacy matters.

2. Information we collect

The information we collect depends on how you interact with our
website and services.

2.1 Information you provide directly

• Contact details: your name, email address,
  telephone number and preferred contact method.
• Quotation and project details: project address,
  selected product or service, project description, estimated
  requirements, proposed timeline and other information you submit.
• Service inquiries: information you provide when
  asking about contractors, flooring installation, construction
  materials, deliveries or related services.
• Communications: messages, feedback, complaints
  and information you send to us by email, telephone, website forms
  or WhatsApp.
• Business transaction information: where applicable,
  order details, delivery information, invoices and records needed
  to manage a transaction. Payment-card details should be handled by
  the relevant payment provider rather than collected unnecessarily
  through general inquiry forms.
• Marketing preferences: whether you choose to
  receive promotional emails or other marketing communications.

2.2 Information collected automatically

Depending on the website configuration and your cookie choices,
we or our service providers may collect:

• IP address and approximate location derived from it;
• browser type, device type and operating system;
• pages visited, referral sources and interactions with website features;
• date, time, duration and technical logs of website visits;
• cookie identifiers and similar online identifiers; and
• security and error information used to maintain website operation.

We do not intend to collect more personal information than is
reasonably necessary for the relevant purpose.

2.3 Information from other sources

Where appropriate and lawful, we may receive information from a
contractor involved in your project, a delivery provider, a payment
provider or another service provider helping us respond to your
request. We may also receive information you have made available
publicly where it is relevant to a legitimate business inquiry.

Please do not submit sensitive personal information through ordinary
quotation forms unless it is genuinely necessary and we have
explained how it will be handled.

3. How we use your information

We may use personal information to:

• respond to inquiries and quotation requests;
• understand your construction or flooring requirements;
• provide information about products, materials and services;
• coordinate contractor inquiries, project discussions and deliveries;
• communicate about orders, appointments or service arrangements;
• maintain, troubleshoot and improve our website;
• measure website performance where appropriate and permitted;
• prevent fraud, spam, misuse and unauthorised access;
• maintain business, accounting and transaction records;
• meet applicable legal obligations and respond to lawful requests;
• send promotional communications where legally permitted; and
• handle complaints, disputes and the exercise of privacy rights.

We will not use your personal information for a materially different
purpose without a valid legal basis and any notice or consent
required by applicable law.

4. Legal grounds for processing

Under the Nigeria Data Protection Act 2023, personal information
must be processed on an applicable lawful basis. Depending on the
circumstances, RoyalFloor may rely on:

• Steps requested by you or a contract: to respond
  to a quotation request, prepare a proposal or fulfil an agreed
  transaction.
• Legal obligations: to maintain records, comply
  with applicable laws or respond to lawful regulatory requests.
• Legitimate interests: for reasonable business
  operations, website security, service improvement or the handling
  of business inquiries, provided those interests do not override
  your applicable rights and protections.
• Consent: where required, such as for certain
  non-essential cookies, tracking technologies or marketing activities.
• Other lawful grounds: where an additional basis
  recognised by applicable law is relevant to the circumstances.

The applicable basis depends on the activity. We will seek consent
where consent is legally required. You may withdraw consent at any
time, although this does not make processing carried out before
withdrawal unlawful.

5. Cookies and tracking technologies

Cookies are small files stored on your device. Similar technologies
may remember preferences, help protect the website or measure how
visitors use it.

5.1 Types of cookies

• Strictly necessary: support core website functions,
  security, form submission or your selected privacy settings.
• Functional: remember preferences and improve
  website usability.
• Analytics: help us understand traffic and website
  performance, if such tools are installed.
• Advertising and measurement: may measure advertising
  performance or support advertising features, if enabled.

5.2 Your choices

Where required by law, non-essential cookies and trackers must not
be activated before the appropriate consent is obtained. You should
be able to accept or reject non-essential cookies and change your
choices later. Essential cookies may remain active where necessary
for the website to function.

You can also manage cookies through your browser settings. Blocking
certain cookies may affect some website features.

Cookie details: We will provide a separate Cookie
Policy at /cookie-policy/ if a separate
page is maintained. That page should identify the cookies and
trackers actually used, their purposes, providers and applicable
retention periods.

We will not claim that a particular analytics, advertising or
tracking provider is used unless it is actually enabled on the site.

6. Who may receive your information

We do not sell your personal information as part of our ordinary
business operations. We may share the minimum information necessary
with the following categories of recipients where appropriate and lawful:

• Website and hosting providers: to host, maintain
  and secure the website.
• Email and form providers: to receive, transmit
  and manage quotation requests and customer messages.
• Contractors and project partners: where sharing
  is necessary to respond to your request or coordinate a service,
  and the sharing is lawful.
• Delivery, logistics and payment providers: where
  necessary to arrange deliveries or process transactions.
• Analytics and advertising providers: only where
  relevant tools are configured and their use is permitted by law
  and your applicable privacy choices.
• Professional advisers: such as legal, accounting
  or security advisers where reasonably necessary.
• Public authorities: where required by law or
  pursuant to a valid legal process.

Service providers processing information on our behalf should be
subject to appropriate confidentiality, security and data-protection
obligations. Some independent service providers may process data
under their own privacy policies for their own services.

We may also disclose information in connection with a proposed
business restructuring or transfer, subject to applicable law and
appropriate safeguards.

7. International data transfers

RoyalFloor operates in Nigeria. Some website, email, cloud-storage,
analytics or communication providers may store or process information
outside Nigeria, depending on the services configured.

Where personal data is transferred across borders, we will assess
the applicable requirements under the Nigeria Data Protection Act
2023 and relevant NDPC directives, including whether an appropriate
transfer mechanism and safeguards are required.

Depending on the circumstances, this may involve an applicable
adequacy decision, an approved transfer instrument or another
permitted legal mechanism. We will provide information about
relevant transfers and safeguards where required by law.

If we serve individuals in other jurisdictions, additional laws may
apply to the relevant processing. For example, the EU General Data
Protection Regulation (GDPR) or applicable United States privacy
laws may apply where their territorial and other legal requirements
are met. Their applicability is not automatic merely because
someone visits our website.

8. How long we keep personal information

We retain personal information only for as long as reasonably
necessary for the purpose for which it was collected, subject to
applicable legal, accounting, contractual and dispute-resolution
requirements.

The following is a proposed retention schedule and must be confirmed
against RoyalFloor’s actual practices before publication:

• Unconverted quotation inquiries: up to 24 months
  after the last meaningful contact, unless a longer period is
  justified or required.
• Customer orders and transaction records: for the
  applicable accounting, tax, contractual and legal retention period.
• Marketing preferences and suppression records:
  while needed to manage subscriptions and retain evidence of
  preferences or opt-outs.
• Website logs and security records: according to
  the configured retention period and any security or legal need.
• Cookies and analytics identifiers: according to
  the relevant cookie settings and the provider’s configured
  retention period.

When information is no longer required, we will take reasonable
steps to delete it or irreversibly anonymise it, unless we must
retain it for a lawful reason. Backups may retain copies for a
limited period under the applicable backup cycle.

9. How we protect information

We will take appropriate technical and organisational measures,
proportionate to the nature of the information and the risks
involved, to help protect personal information against unauthorised
access, loss, alteration, disclosure or destruction.

Measures may include, where implemented and appropriate:

• restricted access to personal information;
• secure website connections and updated software;
• strong authentication and account-access controls;
• security monitoring, backups and recovery procedures;
• careful selection and oversight of service providers; and
• staff or contractor guidance on handling personal information.

No website, email service or internet transmission can be guaranteed
to be completely secure. Please avoid sending payment-card details,
passwords or unnecessary sensitive information through ordinary
website forms or email.

9.1 Personal data breaches

If we become aware of a personal data breach, we will investigate,
take reasonable steps to contain and remedy it, assess the potential
impact, and notify the relevant authority and affected individuals
where required by applicable law. Notifications will be made within
the applicable legal time limits and will include the information
required in the circumstances.

10. Your privacy rights

Subject to applicable law, exemptions and verification requirements,
you may have the right to:

• Be informed: receive clear information about how
  your personal data is used.
• Access: request confirmation of whether we process
  your personal data and request access to it.
• Correct information: ask us to correct inaccurate
  or incomplete information.
• Request deletion: ask us to erase personal data
  where the law provides that right.
• Object or restrict processing: object to certain
  uses or ask for processing to be restricted where the law permits.
• Withdraw consent: withdraw consent where we rely
  on consent, without affecting the lawfulness of earlier processing.
• Data portability: request a copy of certain data
  in a structured, commonly used format where the legal conditions
  are met.
• Challenge certain automated decisions: where
  applicable, exercise rights relating to decisions made solely by
  automated means that have legal or similarly significant effects.
• Complain: raise a concern with us and lodge a
  complaint with the Nigeria Data Protection Commission.

These rights are not absolute in every situation. We may need to
retain some information to comply with the law, establish or defend
legal claims, complete a transaction or exercise another lawful basis.

10.1 How to submit a request

Email
contact@royalfloor.ng with the subject “Privacy Request”.
Please explain what you would like us to do and provide enough
information for us to locate the relevant records.

We may ask for reasonable additional information to verify your
identity and protect your data from unauthorised disclosure.
Please do not send passwords or unnecessary identity documents.
We will respond within the timeframe required by applicable law.
If we cannot fulfil a request, we will explain the reason where
legally required.

You may unsubscribe from promotional emails using the unsubscribe
link, if provided, or contact us directly. Stopping marketing
messages does not necessarily stop service-related communications
or processing required for a transaction.

11. Children’s privacy

Our website is intended for people seeking construction materials
and related services, rather than children. We do not knowingly
collect children’s personal information for marketing purposes.

Where information about a child is collected in circumstances
permitted by law, we will apply the safeguards and consent
requirements that are relevant to the child’s age and situation.
If you believe a child has provided us with personal information
inappropriately, please contact us so we can assess and address
the matter.

12. Links to other websites and services

Our website may link to third-party websites or services, including
messaging platforms and external service providers. When you follow
a third-party link or contact us through an external platform,
that provider may collect or process information under its own
terms and privacy policy.

We do not control the privacy practices of external websites.
Please review their privacy notices before providing information.

13. Questions and privacy complaints

If you have a question or concern about how RoyalFloor handles
your personal information, please contact us first:

RoyalFloor.ng — Privacy Inquiries
Coker, Lagos, Nigeria
Email:
contact@royalfloor.ng
Telephone: 07042452081

We will review your concern and respond as soon as reasonably
possible, in accordance with applicable requirements.

You may also contact the

Nigeria Data Protection Commission (NDPC), Nigeria’s data
protection regulator, through its official website to find current
guidance on submitting a complaint.

14. Changes to this Privacy Policy

We may update this Policy when our services, website technologies,
data practices or legal obligations change. The latest version will
be published on this page with its effective or last-updated date.
Where required by law, we will provide additional notice or seek
consent for material changes.

Change log

15. Contact us

For general questions about this Policy or how your personal
information is handled, contact:

RoyalFloor.ng
Coker, Lagos, Nigeria
contact@royalfloor.ng
07042452081