Effective Date: 22 September 2026
Last Updated: 22 September 2026
1. Introduction and Scope
At Trend Vibe Fashion, we respect your privacy when you browse our collections, purchase products or communicate with us. This notice supplements our Privacy Policy and explains the protections available where our processing of personal information falls within the scope of the General Data Protection Regulation (EU) 2016/679, commonly known as GDPR.
For our Nigeria-based store, GDPR may apply where relevant activities involve offering goods or services to people in the European Union or European Economic Area, or monitoring their behaviour within those territories.
These protections depend on the circumstances of the processing, rather than nationality alone. Simply accessing our website from Europe does not automatically mean that every interaction falls within GDPR.
Our obligations under the Nigeria Data Protection Act, 2023 continue to apply where relevant.
2. Responsibility for Your Information
For the shopping activities covered by this notice, Trend Vibe Fashion determines why and how customer information is processed and acts as the data controller.
You can contact us using the details at the end of this notice to ask questions or exercise your rights.
Some organisations involved in a purchase, such as banks and payment providers, may act as independent controllers for activities they carry out to meet their own legal responsibilities.
3. Personal Information Covered
Depending on how you interact with our store, we may process:
- Your name, email address and account details.
- Billing and delivery addresses.
- Products purchased, including selected sizes, colours and quantities.
- Order references, payment status and refund records.
- Messages, complaints and other customer correspondence.
- Reviews or photographs you choose to submit.
- IP address, device information and browsing activity.
- Cookie choices and marketing preferences.
We generally obtain this information directly from you, through your use of the website or from providers involved in payments and deliveries.
Please provide only information relevant to your purchase or enquiry. Do not send sensitive payment credentials through email or support messages.
4. Purposes and Lawful Bases
Where GDPR applies, each use of personal information must have an appropriate lawful basis.
Purchases and requested services
We use information necessary to process purchases, manage delivery and provide related support to perform our contract with you or take steps you request before entering into a contract.
Legitimate interests
Proportionate activities such as protecting accounts, investigating fraud and administering our business may rely on legitimate interests. We must assess those interests against your rights and reasonable expectations.
Consent
Where required, we obtain consent for activities such as optional tracking and relevant promotional communications. Consent must be freely given, specific, informed and capable of withdrawal.
Legal obligations
We rely on GDPR’s legal-obligation basis only where the obligation meets GDPR requirements. A Nigerian recordkeeping requirement does not automatically qualify as an EU or Member State legal obligation; any related processing must have an appropriate basis.
If information is necessary to fulfil your order and you do not provide it, we may be unable to complete the purchase. Optional marketing consent is not a condition of buying from us.
5. Your Rights
Where GDPR applies, you have the following rights, subject to the relevant legal conditions and exemptions.
Right of access
You may ask whether we process your personal information and request a copy, together with information about its use.
Right to rectification
You may request correction of inaccurate information or completion of incomplete information.
Right to erasure
You may request deletion where the conditions for erasure are met, including where information is no longer needed and there is no other lawful basis for retaining it.
Right to restrict processing
You may request that certain uses of your information be restricted, for example while an accuracy dispute is being resolved.
Right to data portability
Where processing is automated and based on consent or a contract, you may request qualifying information you provided in a structured, commonly used and machine-readable format. You may request direct transmission to another controller where technically feasible.
Right to object
You may object, on grounds relating to your situation, to processing based on legitimate interests. We must stop that processing unless an applicable justification permits it to continue.
You may object to direct marketing at any time. We must stop using your information for that purpose, including related profiling.
Right to withdraw consent
You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.
6. How to Exercise Your Rights
Send your request to support@trendvibefashion.com, preferably from the email address associated with your account or order.
Describe the right you wish to exercise and provide enough information for us to locate the relevant records. You do not need to use legal terminology.
Where we have reasonable doubts about your identity, we may request proportionate additional information. We will not request excessive identification where a less intrusive method is sufficient.
We will respond without undue delay and normally within one month of receiving your request. Where permitted because of the complexity or number of requests, we may extend the period by up to two further months. We will explain the extension and its reasons within the initial month.
Requests are generally free. Where a request is manifestly unfounded or excessive, GDPR permits a reasonable fee or refusal in limited circumstances. We will explain any such decision and your options for challenging it.
7. Marketing and Cookies
You can unsubscribe from promotional emails using the link in the email or by contacting us.
Unsubscribing does not prevent necessary communications about an existing purchase, refund, security issue or privacy request.
Where consent is required under applicable cookie rules, optional analytics and advertising technologies must remain inactive until you agree. Continuing to browse is not, by itself, valid consent.
You may withdraw consent through available website controls or contact us for assistance. Our Cookie Policy provides further information about cookie categories and how to manage them.
8. Sharing Personal Information
Information may be shared, where necessary and lawful, with:
- Payment providers and banks.
- Couriers and delivery partners.
- Hosting and technical service providers.
- Email and customer support providers.
- Analytics or marketing providers where enabled with an appropriate legal basis.
- Professional advisers and authorities where disclosure is justified.
Providers processing information on our behalf must be subject to appropriate contractual requirements, including applicable obligations under Article 28 of GDPR.
We limit disclosures to information relevant to the recipient’s task. We do not sell your personal information.
9. International Processing and Transfers
Trend Vibe Fashion operates in Nigeria, so information you provide may be processed there. Other processing locations depend on the providers involved.
Where an arrangement constitutes a restricted international transfer under GDPR, it must satisfy the applicable transfer requirements.
Depending on the circumstances, safeguards may include an applicable adequacy decision or appropriate contractual safeguards, such as European Commission Standard Contractual Clauses, together with necessary assessments and supplementary measures.
Any reliance on a statutory transfer exception must meet its specific conditions. We do not treat website use as blanket consent to international transfers.
You may contact us for information about relevant destinations, transfer arrangements and how to obtain details of applicable safeguards.
10. Retention and Deletion
We retain personal information only for a justified period based on its purpose and applicable requirements.
Relevant considerations include:
- Whether your account remains active.
- Whether an order, return or refund is outstanding.
- Applicable recordkeeping requirements.
- The need to establish, exercise or defend legal claims.
- Whether marketing consent remains valid.
- Proportionate security and fraud-prevention needs.
A retention requirement relating to some records does not justify keeping every part of your account indefinitely.
Where deletion is required, we remove or irreversibly anonymise eligible information. Protected backup copies may remain until removed through the relevant backup cycle.
Our Privacy Policy and Account & Data Deletion Policy explain these practices further.
11. Security and Personal Data Breaches
We must apply technical and organisational measures appropriate to the risks involved in processing personal information.
Relevant measures include access restrictions, protected communications, confidentiality controls and appropriate oversight of service providers.
Where GDPR applies, a personal data breach must be reported to the competent supervisory authority without undue delay and, where feasible, within 72 hours of awareness, unless it is unlikely to result in a risk to individuals’ rights and freedoms.
Affected individuals must also be informed without undue delay where a breach is likely to create a high risk, subject to the exceptions permitted by GDPR.
12. Automated Decisions
GDPR provides protections concerning decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.
If a proposed activity falls within this category, it must have a permitted basis and appropriate safeguards. Where applicable, these include the opportunity to obtain human intervention, express your views and contest the decision.
Ordinary product suggestions do not necessarily amount to decisions with legal or similarly significant effects. You may contact us to ask about automated processing relevant to your information.
13. Children’s Information
Our store is intended for adult customers and is not directed at children.
Where GDPR’s rules on children’s consent apply to an online service offered directly to a child, the relevant consent age depends on the applicable Member State law and may range from 13 to 16. This is separate from the legal capacity to enter a purchase agreement.
If we discover that children’s information has been collected without a required lawful basis or authorisation, we will investigate and take appropriate action.
Parents or guardians may contact us to raise a concern.
14. Complaints
If you believe we have mishandled personal information, you may contact us for a review.
Where GDPR applies, you may also complain to a competent supervisory authority, particularly in the EU/EEA country of your habitual residence, workplace or the alleged infringement.
You do not have to contact us before lodging a complaint, and doing so does not remove any other legal remedy available to you.
15. Changes to This Notice
We may revise this notice to reflect changes in relevant processing activities or legal requirements.
The Last Updated date identifies the latest revision. We will provide appropriate notice of material changes and seek fresh consent where required.
16. Contact Us
For questions about this notice or requests concerning your personal information, please contact:
Trend Vibe Fashion
Website: https://trendvibefashion.com/
Support Email: support@trendvibefashion.com
Info email: info@trendvibefashion.com
Address: 28, Galadima Village, Off Airport Road, Ilorin, Kwara State, Nigeria