Effective Date: 22 September 2026
Last Updated: 22 September 2026
1. Our Approach to GDPR
Bright Style Outfitters is based in Nigeria and operates its online fashion store through brightstyleoutfitters.com.
The General Data Protection Regulation (“GDPR”) does not automatically govern every interaction with our website simply because the website can be accessed internationally.
Where Bright Style Outfitters carries out processing that falls within the GDPR’s territorial scope, we aim to process relevant personal data consistently with the obligations that apply to that activity.
This page should be read together with our Privacy Policy, Cookie Policy, Data Usage Policy, and Account & Data Deletion Policy.
2. When GDPR Requirements May Apply
GDPR protections may become relevant in circumstances covered by the Regulation, including certain processing connected with offering goods or services to individuals in the European Economic Area (“EEA”) or monitoring relevant behaviour there.
Whether GDPR applies depends on the actual circumstances and legal scope of the processing.
Where it does not apply, customer information remains subject to other privacy and data protection requirements applicable to Bright Style Outfitters.
3. Personal Data
Information capable of identifying or relating to an identifiable person may constitute personal data.
Depending on the customer interaction, we may process information such as:
- Name
- Email address
- Account information
- Billing details
- Delivery information
- Order history
- Customer correspondence
- Returns and refund records
- Marketing preferences
- IP address
- Device information
- Cookie or website interaction data
We aim to limit collection to information reasonably relevant to legitimate business and customer-service purposes.
4. Lawful Processing
Where GDPR applies, processing must have an appropriate legal basis.
Depending on the activity, Bright Style Outfitters may rely upon:
Contractual necessity where information is needed to process purchases, manage accounts, fulfil orders, arrange delivery, or handle eligible returns.
Consent where permission is appropriate or legally required, including certain marketing or optional cookie activities.
Legal obligations where information must be processed or retained to satisfy an applicable requirement.
Legitimate interests where processing is reasonably necessary for purposes such as website administration, security, fraud prevention, customer service, or business improvement and those interests are not overridden by individual rights.
Other lawful bases will be relied upon only where appropriate.
5. Fairness and Transparency
Where GDPR applies, we aim to handle personal data lawfully, fairly, and transparently.
Customers should be informed about relevant collection and processing practices through our privacy documentation and appropriate website notices.
We do not intend to collect information for one purpose and then use it for an unrelated incompatible purpose without an appropriate legal basis.
6. Data Minimisation
We aim to avoid collecting excessive personal information.
For example, completing a fashion order may require contact, transaction, and delivery information, but this does not mean unrelated personal details should be requested.
The amount of information collected should remain proportionate to the purpose for which it is needed.
7. Orders and Payment Processing
Customer information may be required to complete online purchases.
This can include information used for checkout, order administration, fulfilment, delivery, customer service, and eligible returns.
Independent payment processors may handle payment credentials.
Where customers enter sensitive payment information directly into such systems, Bright Style Outfitters does not intentionally retain complete card numbers, CVV/security codes, online banking passwords, or comparable credentials.
8. Cookies
Our website may use cookies and similar technologies for essential e-commerce functions and, where enabled, analytics, preferences, or marketing.
Where GDPR-related rules require prior permission for non-essential technologies, an appropriate consent mechanism should be used.
Visitors may also be able to manage stored cookies through their browser.
Further information is provided in our Cookie Policy.
9. Direct Marketing
Where required, marketing communications will be based on valid consent or another lawful basis permitted by applicable rules.
Customers may withdraw from promotional email communications using the available unsubscribe mechanism or by contacting us.
Stopping marketing does not prevent essential communications concerning an existing purchase, delivery, refund, account-security matter, or customer-service request.
10. Individual Rights Under GDPR
Where GDPR applies to the processing of your information, you may have rights including:
- Access – requesting eligible personal data held about you.
- Rectification – correcting inaccurate or incomplete information.
- Erasure – requesting deletion where the legal requirements for erasure are satisfied.
- Restriction – asking for qualifying processing to be limited.
- Objection – objecting to certain processing, including applicable direct marketing.
- Data portability – receiving qualifying information in an appropriate machine-readable format.
- Withdrawal of consent – withdrawing consent where processing depends upon it.
These rights are subject to the conditions and exceptions contained in applicable law.
11. Handling Privacy Requests
GDPR-related requests can be submitted using the contact information at the end of this page.
Before disclosing, correcting, transferring, or deleting personal information, we may take reasonable steps to verify the identity of the requester.
Requests will be addressed within applicable statutory requirements.
Where the law permits additional time for a particularly complex request, the requester may be informed accordingly.
12. Data Retention
Personal data should not be retained in identifiable form indefinitely without a legitimate reason.
Retention decisions may consider:
- Active customer accounts
- Orders and deliveries
- Returns and refunds
- Accounting requirements
- Customer service records
- Fraud prevention
- Disputes
- Legal obligations
- Establishment or defence of legal claims
When identifiable information is no longer reasonably required, it may be deleted or appropriately anonymised.
13. Data Security
Bright Style Outfitters takes reasonable measures intended to protect personal data from unauthorised access, accidental loss, alteration, misuse, or improper disclosure.
Measures may vary according to the information and systems involved and can include controlled access, secure website connections, authentication, infrastructure security, monitoring, and appropriate technical maintenance.
No internet-based service can guarantee absolute security.
14. Service Providers and Processors
External providers may assist us with services such as:
- Hosting
- Payments
- Delivery
- Website security
- Analytics
- Customer communications
- Technical functionality
Where GDPR applies and a provider processes personal information on our behalf, appropriate contractual and privacy safeguards will be used where legally required.
15. International Data Transfers
Bright Style Outfitters operates from Nigeria, while some technology or service providers may process information in other jurisdictions.
If personal data subject to GDPR is transferred internationally in circumstances requiring specific safeguards, an appropriate lawful mechanism will be considered.
Depending on the circumstances, this may include an adequacy mechanism, Standard Contractual Clauses, or another recognised safeguard.
16. Automated Decisions
Website and security technologies may use automated processes for routine functions such as fraud detection or transaction security.
Bright Style Outfitters does not claim to carry out solely automated decision-making producing legal or similarly significant effects unless such processing is actually implemented.
If such processing becomes relevant and GDPR requirements apply, appropriate information and safeguards will be provided.
17. Personal Data Breaches
If a security incident affects personal information, we will take reasonable steps to investigate, contain, and address the incident.
Where GDPR applies and its legal notification requirements are triggered, the relevant supervisory authority and affected individuals will be notified as required.
18. Children’s Data
Bright Style Outfitters is a general fashion e-commerce business and is not specifically designed to collect children’s personal information.
Where a person cannot lawfully provide valid consent or complete a relevant transaction independently, the involvement of a parent, guardian, or legally authorised person may be required.
If personal information relating to a child is identified as having been improperly collected, reasonable corrective action will be considered.
19. Complaints
Where GDPR applies, individuals may have the right to lodge a complaint with the competent data protection supervisory authority.
Customers may also contact Bright Style Outfitters directly so that we can review and respond to their privacy concerns.
Contacting us first does not remove any right to approach an appropriate authority.
20. Nigerian and Other Privacy Requirements
Bright Style Outfitters operates from Nigeria and must consider privacy and data protection requirements applicable to its Nigerian operations.
GDPR obligations described on this page apply only where the Regulation legally extends to the relevant activity.
This page does not represent that GDPR governs every customer, website visitor, order, or transaction processed by Bright Style Outfitters.
21. Changes to This GDPR Compliance Page
Privacy requirements and our website operations may change.
We may revise this page where necessary to reflect relevant developments in our data practices, technologies, or legal responsibilities.
The date displayed on the page will identify the current version.
22. Contact Us
For GDPR-related enquiries, applicable privacy rights requests, or questions regarding the processing of personal information, contact:
Bright Style Outfitters
Website: brightstyleoutfitters.com
Business Address: 41 Close, 313 Road, Federal Housing, Kubwa, FCT, Nigeria
Information Email: info@brightstyleoutfitters.com
Support Email: support@brightstyleoutfitters.com
Please provide sufficient information for us to understand your request. Reasonable identity verification may be required before personal information is disclosed, modified, transferred, or deleted.