Privacy Policy
Last updated: 1 October 2026
Demo notice
Scentpocket is a demonstration store built for the HNG Internship. Nothing on this site is for sale and no order will be delivered or charged. We still treat the information you give us with care, as described below.
1. Who we are
Scentpocket ("we", "us") is operated by Emmanuel Nwaohiri, Lagos, Nigeria. Contact: emmanuelxs101@gmail.com.
2. What we collect
| Data | Source | When |
|---|---|---|
| Name, email address, profile picture | Your Google account, when you choose "Continue with Google" | Sign in |
| Phone number, delivery address, city, state, delivery zone | You, at checkout | Placing an order |
| Order details (items, sizes, quantities, prices, status, dates) | Created by your order | Placing an order |
| Cart contents | Stored in your own browser (local storage), not on our servers | Shopping |
| Technical logs (IP address, browser, timestamps) | Our hosting and database providers | Any visit |
We only request the basic Google permissions (your name, email and profile picture). We cannot read your Gmail, contacts or files.
3. Why we use it (lawful basis)
| Purpose | Lawful basis under the NDPA |
|---|---|
| Creating your account and signing you in | Performance of a contract (providing the service you asked for) |
| Processing and showing your orders, sending order confirmation emails | Performance of a contract |
| Keeping the site secure and fixing problems | Legitimate interests |
| Keeping order records | Legal obligation and legitimate interests |
We do not sell your data, use it for advertising, or make automated decisions that have legal or similarly significant effects on you.
4. Who receives it
We share data only with service providers that help run the site:
| Provider | Role |
|---|---|
| Supabase | Database, authentication, file storage |
| Netlify | Website hosting |
| Sign in (Google OAuth) and, as a fallback, sending email through Gmail | |
| Mailgun | Sending order confirmation emails |
Some of these providers store data outside Nigeria. Where they do, we rely on their contractual and security commitments to protect it as the NDPA requires.
5. How long we keep it
- Account data: until you ask us to delete your account.
- Orders: 2 years from the order date, then deleted. As this is a demo, we may delete all data at any time when the project ends.
- Cart: until you clear your browser storage.
6. Your rights
Under the NDPA you can:
- ask for a copy of the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data;
- ask us to restrict or object to how we use it;
- withdraw consent where we rely on it;
- ask for your data in a portable format.
Email emmanuelxs101@gmail.com. We'll reply within 30 days. You also have the right to complain to the Nigeria Data Protection Commission (NDPC).
7. Security
Data is encrypted in transit (HTTPS). Database access is restricted to our server; the public website cannot read other customers' data. If a breach is likely to put your rights at risk, we will notify the NDPC within 72 hours and tell you without undue delay.
8. Children
Scentpocket is not intended for anyone under 18.
9. Changes
We'll update the date at the top when this policy changes.