Privacy Policy
What we collect, why we collect it, and what you can ask us to do with it.
AA Polo Equipment ("we", "us") is the data controller for personal data collected through aapolo.ng. This policy explains how we handle that data, and applies to our website, our WhatsApp ordering channel and our customer service.
We process personal data in line with the Nigeria Data Protection Act 2023 and the guidance of the Nigeria Data Protection Commission.
What We Collect
Information you give us
- Your name, email address and phone number
- Delivery and billing addresses
- Your account password, stored only in encrypted form
- Order history, and any sizing or fitting details you send us
- Messages you send us by email, phone, WhatsApp or contact form
- Product reviews, ratings and newsletter preferences
Information collected automatically
- Your IP address, browser type, device type and operating system
- Pages you visit, items you view, and what you add to your cart or wishlist
- The site or search that referred you to us
- Cookie identifiers and session data
What we do not collect
We do not collect or store your full card number, CVV, PIN or bank password. Payment details go directly to Paystack and never reach our systems.
Why We Use It
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order, and handling returns | Performance of a contract |
| Managing your account and order history | Performance of a contract |
| Answering your questions and providing support | Legitimate interest |
| Preventing fraud and securing the site | Legitimate interest |
| Improving our catalogue, site and service | Legitimate interest |
| Marketing emails and newsletters | Your consent |
| Keeping tax and accounting records | Legal obligation |
Who We Share It With
We do not sell your personal data, and we never have. We share it only with parties who need it to deliver your order or run the service:
- Paystack — to process your payment securely
- Delivery partners and riders — your name, address and phone number, so they can deliver to you
- Email and hosting providers — to send order confirmations and host the site
- Professional advisers and auditors — where we are required to provide records
- Law enforcement and regulators — where we are legally obliged to disclose
Where a provider processes data outside Nigeria, we take reasonable steps to ensure an adequate level of protection as required by the Nigeria Data Protection Act 2023.
Cookies
We use cookies to keep you signed in, remember your cart between visits, apply your preferences, and understand how the site is used so we can improve it.
You can block or delete cookies in your browser settings. Note that essential cookies are what keep your cart and your session working — disabling them will prevent you from completing an order.
How Long We Keep It
- Account data: for as long as your account is open, and up to 12 months after you close it
- Order and transaction records: at least 6 years, to meet tax and accounting obligations
- Marketing preferences: until you withdraw consent
- Support messages: up to 24 months after the matter is resolved
- Website analytics: up to 26 months
How We Protect It
The site runs over HTTPS, passwords are stored hashed rather than in plain text, and access to customer data is limited to staff who need it for their work. Payment data is handled entirely by Paystack under PCI-DSS.
No system is completely secure. If a breach occurs that is likely to affect your rights, we will notify you and the Nigeria Data Protection Commission as required by law.
Your Rights
Under the Nigeria Data Protection Act 2023 you have the right to:
- Ask what personal data we hold about you and receive a copy
- Have inaccurate or incomplete data corrected
- Ask us to delete your data, where we have no legal reason to keep it
- Object to processing based on our legitimate interests
- Ask us to restrict processing while a concern is being resolved
- Receive your data in a portable, machine-readable format
- Withdraw consent to marketing at any time
- Complain to the Nigeria Data Protection Commission
To exercise any of these, email hello@aapolo.ng. We will respond within 30 days. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.
Marketing
We only send marketing emails to people who have asked for them. Every one carries an unsubscribe link, and you can also change your preferences in your account or reply asking us to stop. Unsubscribing from marketing does not stop order confirmations and delivery updates, which are part of fulfilling your order.
Children
Our site is not directed at children under 18, and we do not knowingly collect their data. Young players' equipment is bought through a parent or guardian's account. If you believe a child has given us personal data, contact us and we will delete it.
Changes to This Policy
We may update this policy as our service or the law changes. The current version is always on this page, with the date it was last updated shown below. Material changes will be notified by email or a notice on the site.
Contact Us
For any question about this policy or about your data:
AA Polo Equipment
Guards Polo Club, AMAC, Abuja, Federal Capital Territory, Nigeria
Email: hello@aapolo.ng
Phone: +234 809 922 2747
Last updated: 13 September 2026