Privacy Policy

This Privacy Policy explains how THREETWENTYONE ("we", "us", "our") collects, uses, and protects information when you use our storefront at threetwentyonegh.com (the "Storefront"), and how our internal staff use the THREETWENTYONE Admin app (the "Staff App") to manage orders, inventory, and products on our behalf.

This policy is written to be an honest, accurate description of what our systems actually do. It is not a substitute for professional legal advice.

Account information: If you create an account, we collect your name, email address, and phone number, and store your login credentials securely through our authentication provider (Better Auth).

Order, shipping, and payment information:When you place an order we collect shipping and billing addresses, order contents, and order history. Card and payment details are collected and processed directly by our payment partner, Paystack — we do not receive or store your full card number.

Guest checkout data:If you check out as a guest, we assign a temporary session ID (stored in your browser's local storage) so your cart persists across visits. This session ID is not tied to your identity unless you place an order or create an account.

Browsing and session data: We use session cookies (set by Better Auth) to keep you signed in, and we log basic technical data such as IP address, browser type, and device information to keep the site secure and functioning correctly.

Marketing and newsletter opt-in: If you subscribe to marketing emails or SMS updates, we collect your email address or phone number for that purpose only. You can unsubscribe at any time.

THREETWENTYONE Admin is an internal tool used only by our employees and authorized staff to manage orders, inventory, and products — it is not distributed to or used by customers.

Staff account credentials: Staff sign in with either a work email and password or Google Sign-In. We store the minimum account information needed to authenticate staff and control what they can access within the app.

Customer order data accessed by staff: To fulfil and support orders, authorized staff can view customer order details, shipping addresses, and contact information already collected through the Storefront. Access is limited to what staff need to do their jobs.

Product and inventory data: The Staff App is used to manage product listings, stock levels, and warehouse operations. This data relates to our catalogue and inventory, not to individual customers.

Microphone access:The Staff App requests microphone permission so staff can record voice notes attached to internal tasks (for example, notes on a fulfilment or inventory task). This is strictly an internal productivity feature for staff use — it has no consumer-facing purpose, and the microphone is never accessed without the staff member's explicit action.

• To process, fulfil, and deliver your orders
• To arrange shipping, including international shipping via DHL
• To send order confirmations and delivery updates by SMS and email
• To provide customer support and respond to enquiries
• To detect and prevent fraud, and to keep the Storefront and Staff App secure
• To send marketing communications, only if you have opted in
• To comply with applicable legal obligations

We do not sell your personal information. We share data with the following service providers, only as needed to run the business:

• Paystack— processes payments for orders placed on the Storefront
• DHL— ships and tracks international orders
• Cloudflare R2— stores product images, size guide images, and other files we upload
• Resend— sends transactional emails such as order confirmations
• Our SMS provider— sends order confirmation and delivery text messages

Each of these providers processes data only for the purpose we engage them for, and is not permitted to use your information for their own marketing.

The Storefront uses a session cookie set by our authentication provider (Better Auth) to keep signed-in users logged in. Guest shoppers are identified only by a temporary session ID stored in their browser's local storage, used solely to keep their cart consistent between visits.

We do not use third-party advertising trackers on the Storefront.

We retain order and account data for as long as needed to fulfil orders, meet accounting and legal requirements, and support customers who contact us about past orders. Guest session identifiers expire automatically after a short period of inactivity.

We use reasonable technical and organisational measures — including encrypted connections, access controls on the Staff App, and secure storage with our infrastructure providers — to protect your data. No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

You can ask us to access, correct, or delete the personal information we hold about you. To make a request, email [email protected] and we will respond as soon as we reasonably can. We may need to verify your identity before acting on a request, and some information (such as records needed for tax or legal purposes) may need to be retained even after a deletion request.

We may update this Privacy Policy from time to time to reflect changes to our practices. Updates will be posted on this page with a revised effective date.

Questions about this Privacy Policy or how we handle your data can be sent to [email protected].