Privacy Policy

1. Who we are

Cresta Dry Cleaning and Laundry Services (“Cresta”, “we”, “us”, “our”) operates crestalaundry.com and provides laundry, dry cleaning and related pickup and delivery services in Jos, Plateau State, Nigeria. This Privacy Policy explains what personal data we collect when you use our website or services, why we collect it, and the choices you have.

This Policy is written to be consistent with the Nigeria Data Protection Act 2023 (“NDPA”) and the general principles of the Nigeria Data Protection Commission.

2. Information we collect

Information you give us directly

• Contact and account details: your name, phone number, WhatsApp number, email address and delivery/billing address, when you book a pickup, place an order, subscribe to a plan, create an account, or contact us.
• Order details: the services and items you order, your chosen service level (wash, starch and iron, or ironing only), pickup date and time window, and any notes you leave for us (for example, starch preference or gate instructions).
• Payment information: we do not collect or store your card details. Payments are made by bank transfer to our account, or cash/POS on delivery. If we ever add card payments, they will be processed by a licensed third-party payment processor, not stored on our servers.
• Communications: messages you send us on WhatsApp, by phone, or through our website’s contact and booking forms.

Information collected automatically

• Website usage data: pages visited, time on site, device and browser type, and approximate location (from IP address), collected through standard website analytics.
• Cookies: small files stored on your device to help our website function correctly and to understand how visitors use our site. You can control cookies through your browser settings; see Section 8.

3. How we use your information

• To schedule and fulfil pickups, cleaning, and deliveries.
• To confirm orders, send status updates, and communicate about your account or subscription plan.
• To process payments and maintain accurate records for accounting purposes.
• To track order history so we can recognise returning customers, resolve issues, and, where offered, apply loyalty benefits.
• To respond to enquiries sent by WhatsApp, phone, email or our website forms.
• To improve our website, services and customer experience.
• To meet legal, regulatory and tax obligations.

We do not sell your personal data to third parties, and we do not use your data for purposes unrelated to running and improving Cresta’s services without asking you first.

4. Legal basis for processing

We process your personal data because it is necessary to perform our contract with you (fulfilling your laundry orders), because you have given consent (for example, when submitting a booking form or subscribing to updates), or because we have a legitimate interest in running and improving our business in a way that does not override your rights.

5. Who we share information with

We do not sell or rent your personal data. We share information only with:

• Our staff and riders, to the extent needed to collect, process and deliver your order.
• Service providers who help us run our website and business — for example, our website hosting provider, WooCommerce/WordPress infrastructure, email and SMS/WhatsApp messaging providers, and our bank for processing transfers. These providers only access the data needed to perform their function for us.
• Legal or regulatory authorities, where we are required to disclose information by law.

6. Data retention

We keep your order and account information for as long as your account is active, and for a reasonable period afterward to meet accounting, tax and legal obligations, and to maintain accurate service history (including for subscription plans and any future loyalty benefits). You may ask us to delete your account data at any time, subject to Section 7 and our legal retention obligations.

7. Your rights

Under the NDPA, you have the right to:

• Ask us what personal data we hold about you and request a copy of it.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data, subject to legal retention requirements (for example, financial records we must keep).
• Withdraw consent to marketing communications at any time.
• Object to certain uses of your data, or ask us to restrict processing.

To exercise any of these rights, contact us using the details in Section 10. We will respond within a reasonable time and in line with applicable law.

8. Cookies

Our website uses cookies to remember your preferences, keep your cart and account session working correctly, and understand how visitors use the site so we can improve it. You can disable cookies in your browser settings, though some parts of the website (such as checkout) may not work correctly without them.

9. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse, including secure website hosting and restricted access to customer records. No method of transmission or storage is completely secure, but we work to protect your information appropriately.

10. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us:

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “last updated” date at the top of this page shows when it was last revised. We encourage you to review this page periodically.