Effective Date: 22 September 2026
Last Updated: 22 September 2026
1. GDPR and Kente Cove Ltd
Kente Cove Ltd operates from Nigeria and provides children’s fashion through kentecove.com.
The European Union General Data Protection Regulation (“GDPR”) does not automatically apply to every visitor, customer, or transaction merely because our website can be viewed from Europe.
Where Kente Cove Ltd carries out processing that falls within the GDPR’s legal scope, we aim to apply the relevant requirements to that processing.
2. Scope
GDPR requirements may apply in circumstances covered by the Regulation, including certain activities involving offering goods or services to individuals in the European Economic Area (“EEA”) or monitoring relevant behaviour there.
Where GDPR does not apply, other data protection requirements relevant to Kente Cove Ltd’s operations may still govern the processing.
3. Personal Data We May Process
Depending on the interaction, personal data may include:
- Customer names
- Email addresses
- Account details
- Billing information
- Delivery addresses
- Order histories
- Customer communications
- Returns and refunds
- Marketing preferences
- IP addresses
- Device information
- Cookie identifiers
We aim to collect information proportionate to legitimate customer and business needs.
4. Lawful Bases
Where GDPR applies, personal data will be processed under an appropriate lawful basis.
Depending on the activity, this may include:
Contract – where information is necessary to process an order, arrange delivery, or provide a requested service.
Consent – where permission is required for optional cookies, certain marketing, or another activity.
Legal obligation – where processing or retention is necessary to comply with applicable law.
Legitimate interests – where information is reasonably required for security, fraud prevention, customer support, website administration, or similar legitimate purposes without improperly overriding individual rights.
5. Data Minimisation
Kente Cove Ltd seeks to collect only information reasonably needed for the relevant purpose.
This principle is particularly important where information relating to children may be involved.
Purchasing children’s clothing does not require customers to provide unnecessary details about the child who will wear the product.
6. Children’s Data and Parental Involvement
Our products are for children, but our online purchasing services are intended primarily for adults.
We do not intentionally require children to independently create customer accounts, provide payment information, or submit unnecessary personal information.
Where GDPR rules concerning children’s consent apply to a particular online service, appropriate parental or guardian involvement will be considered as required.
7. Orders and Payments
Personal information may be processed to complete purchases, arrange fulfilment, provide delivery, and administer returns or refunds.
Payments may be handled by independent payment providers.
Where sensitive payment credentials are entered directly into their systems, Kente Cove Ltd does not intentionally retain complete card numbers, CVV codes, banking passwords, or similar credentials.
8. Cookies and Consent
Our website may use essential and optional cookies.
Where GDPR-related requirements require consent before optional technologies are used, an appropriate consent mechanism should be provided.
Visitors may also be able to change cookie choices or use browser controls.
9. Marketing
Where required, promotional communications will be based on valid consent or another legally permitted basis.
Adult customers may unsubscribe from promotional emails.
We do not intend to knowingly direct consent-based marketing communications to children where valid parental or adult authorisation would be required.
10. GDPR Rights
Where GDPR applies, individuals may have rights including:
- Access to eligible personal data
- Correction of inaccurate information
- Erasure in qualifying circumstances
- Restriction of certain processing
- Objection to qualifying processing
- Data portability where applicable
- Withdrawal of consent
These rights are subject to the conditions and exceptions established by applicable law.
11. Parent or Guardian Requests
Where a parent or guardian reasonably believes that personal data concerning a child has been collected inappropriately, they may contact Kente Cove Ltd.
We may request reasonable information necessary to verify the request and locate the relevant data.
Additional unnecessary information about the child should not be submitted.
12. Data Security
Reasonable technical and organisational measures are used to reduce risks of unauthorised access, loss, misuse, alteration, or disclosure.
Safeguards may include access controls, authentication, secure connections, system maintenance, monitoring, and suitable third-party arrangements.
No online environment can guarantee absolute security.
13. Data Retention
Personal information should not remain identifiable longer than reasonably necessary for its legitimate purpose.
Retention may depend on orders, accounts, returns, refunds, accounting, fraud prevention, disputes, legal obligations, and legal claims.
Where appropriate, information may subsequently be erased or anonymised.
14. Service Providers
External organisations may assist with payments, hosting, delivery, security, analytics, communications, or technical services.
Where GDPR applies and a provider processes personal information on our behalf, appropriate contractual safeguards will be considered where required.
15. International Transfers
Kente Cove Ltd operates from Nigeria, and service providers may operate in other countries.
Where GDPR applies to an international transfer requiring safeguards, an appropriate recognised mechanism may be used.
Depending on the circumstances, this could include an adequacy mechanism, Standard Contractual Clauses, or another legally permitted safeguard.
16. Automated Processing
Some website or security functions may use automated processes.
Kente Cove Ltd does not represent that it conducts solely automated decision-making producing legal or similarly significant effects unless such functionality is actually used.
If relevant processing is introduced, applicable GDPR transparency and safeguard requirements will be considered.
17. Personal Data Breaches
If a security incident affects personal information, we will take reasonable steps to investigate and contain it.
Where GDPR applies and notification requirements are triggered, the relevant supervisory authority and/or affected individuals will be informed according to applicable requirements.
18. Exercising GDPR Rights
Privacy requests may be submitted using the contact information below.
Reasonable identity verification may be required before personal data is disclosed, corrected, transferred, or deleted.
Requests will be handled within applicable legal requirements.
19. Complaints
Where GDPR applies, individuals may have the right to raise a complaint with an appropriate data protection supervisory authority.
Customers may also contact Kente Cove Ltd directly to allow us to review their concern.
20. Nigerian Data Protection Requirements
Kente Cove Ltd operates from Nigeria and also considers privacy and data protection requirements applicable to its Nigerian operations.
The GDPR applies only where its legal scope extends to a particular Kente Cove Ltd processing activity.
Nothing on this page should be understood as stating that every customer or transaction is governed by GDPR.
21. Changes to This Page
We may revise this GDPR Compliance page to reflect changes to our services, data practices, or legal responsibilities.
The latest version will be identified by its revision date.
22. Contact Us
For GDPR-related enquiries, privacy rights requests, or concerns about children’s personal information, contact:
Kente Cove Ltd
Website: kentecove.com
Business Address: 54, Igbo Quarters, Filindabo, Abuja, FCT, Nigeria
Information Email: info@kentecove.com
Support Email: support@kentecove.com
Please provide enough information for us to understand your request while avoiding unnecessary sensitive information about yourself or a child.