Privacy policy

Who we are

Teethmocure is a trading name of Lyffem Int. Ltd., a company registered under the laws of the Federal Republic of Nigeria. In this policy, "we", "us" and "our" refer to Lyffem Int. Ltd., and "you" and "your" refer to any person who visits our website, places an order, or otherwise interacts with us.

Our registered office is in Lagos, Nigeria. You can reach us at teethmocure@gmail.com or by calling or messaging +234 810 081 6174.

What we collect

We only collect personal information that is necessary to fulfil your orders, provide customer support, and improve our service. We collect the following categories of personal data:

• Identity information — your full name, as provided when placing an order or creating an account
• Contact information — your email address, phone number (including WhatsApp number), and delivery address
• Order information — the products you ordered, quantities, prices paid, delivery method selected, and order status history
• Payment information — we do not store your full card number or bank details; payment is processed by our third-party payment provider (Paystack), which handles your payment data under its own privacy policy
• Account information — your login credentials (password is stored in hashed form and is never readable by us), order history, and communication preferences
• Support correspondence — messages you send us via email, WhatsApp, the contact form, or any other channel, together with our replies
• Device and browsing information — your IP address, browser type, device type, operating system, pages visited, referring URL, and session duration, collected automatically through server logs and (only with your consent) through analytics and measurement tools
• Cookie and consent data — your consent choices and a session identifier stored in your browser

Why we collect it and our lawful basis

Under the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation 2019 (NDPR), we process your personal data only when we have a lawful basis. The table below explains each purpose and the basis we rely on:

• Fulfilling your order (processing, dispatch, delivery, and post-sale support) — Lawful basis: performance of a contract with you
• Creating and managing your customer account — Lawful basis: performance of a contract with you
• Communicating with you about your order (confirmations, dispatch updates, delivery notifications) — Lawful basis: performance of a contract with you
• Responding to enquiries and providing customer support — Lawful basis: legitimate interest in helping our customers
• Preventing fraud and verifying payment — Lawful basis: legitimate interest in protecting our business and customers
• Keeping records for tax, accounting and regulatory compliance — Lawful basis: legal obligation under Nigerian tax and company law
• Sending you marketing messages (product news, promotions, offers) — Lawful basis: your explicit consent, which you can withdraw at any time
• Measuring website performance and understanding how visitors use our site (analytics) — Lawful basis: your explicit consent via the cookie/consent banner
• Measuring advertising effectiveness — Lawful basis: your explicit consent via the cookie/consent banner
• Improving and securing our website — Lawful basis: legitimate interest in maintaining a safe, functional service

Marketing consent

Marketing consent is kept entirely separate from your account and order information. We only send marketing messages — including product news, promotions, and special offers — if you have explicitly opted in by checking the marketing consent box during checkout or account creation, or by subscribing through our website.

Every marketing message we send includes a clear and easy way to opt out. You can also withdraw your consent at any time by emailing us at teethmocure@gmail.com, messaging us on WhatsApp, or updating your preferences in your account settings. When you opt out, we stop sending marketing messages within 48 hours, but this does not affect messages about existing orders or account activity.

Who we share it with

We never sell, rent or trade your personal data. We share it only with the categories of service provider listed below, and only to the extent necessary for the stated purpose:

• Payment processor (Paystack) — to process your payment securely
• Delivery and logistics partners — to dispatch and deliver your order, and to provide you with tracking information
• Hosting and infrastructure provider (Vercel) — to serve the website and store order data securely
• Database provider — to store order records, customer accounts and site content
• Email and messaging services — to send you order confirmations, dispatch notifications and (with your consent) marketing messages
• Analytics and measurement tools (Google Analytics, Microsoft Clarity, Meta/Facebook Pixel) — only loaded with your explicit consent, to help us understand how the website is used and whether our adverts are effective
• Professional advisors — our accountants, auditors or legal counsel, where necessary for compliance or dispute resolution
• Law enforcement or regulators — only where required by law or a valid legal process

Measurement and advertising

We ask before we use any measurement tool that shares information with another company. Until you accept, none of them load at all, and declining keeps them switched off.

If you accept, we use Meta (Facebook and Instagram) to measure whether our adverts lead to orders, Google Analytics to see which pages people find useful, and Microsoft Clarity to see where a page is confusing. These receive information about your visit, such as the pages you viewed and what you bought.

When you place an order, we tell Meta that a sale happened so we can tell which advert paid for itself. Your email address and phone number are converted into an irreversible code before they are sent, so Meta can match the sale to an advert without ever receiving your actual contact details from us.

You can change your mind at any time. "Cookie settings" at the bottom of any page reopens these choices, and whatever you switch off stops loading straight away.

• Nothing third-party loads before you accept
• Your email and phone are hashed before they are shared
• We never sell your personal data

Cookies and similar technologies

A cookie is a small text file placed on your device by your browser. We use cookies as follows:

• Essential cookies — required for the website to function (e.g., session management, shopping cart, consent preferences). These are set without asking because the site cannot work without them.
• Analytics cookies — set only after you consent. Used by Google Analytics and Microsoft Clarity to help us understand traffic patterns and improve the site.
• Advertising cookies — set only after you consent. Used by Meta Pixel to measure the effectiveness of our social media advertising.

International data transfers

Some of our service providers operate outside Nigeria. Where your personal data is transferred outside Nigeria, we take steps to ensure it is protected to a standard consistent with the NDPA. This includes confirming that the receiving country provides an adequate level of data protection, or that the provider has appropriate contractual safeguards in place.

How long we keep it

We retain your personal data only as long as necessary for the purposes described in this policy, or as required by law:

• Order records — retained for six (6) years from the date of the order to comply with Nigerian tax and accounting requirements
• Customer account information — retained for as long as your account is active, and for twelve (12) months after you request account deletion, in case you change your mind
• Support correspondence — retained for two (2) years from the date of last contact, unless a longer period is needed for ongoing dispute resolution
• Analytics data — anonymised and aggregated data may be kept indefinitely; identifiable session data is deleted within twenty-six (26) months
• Marketing consent records — retained for as long as needed to demonstrate that consent was given, plus twelve (12) months after withdrawal

Data security

We use industry-standard technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. These include encrypted connections (HTTPS/TLS) for all data in transit, hashed storage of passwords, restricted access controls for staff, and regular review of our security practices.

Despite our efforts, no method of electronic storage or transmission is completely secure. If we become aware of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Nigeria Data Protection Commission without undue delay, as required by the NDPA.

Children's privacy

Our website and products are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will promptly delete it.

Your rights

Under the Nigeria Data Protection Act 2023, you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct any personal data that is inaccurate or incomplete
• Right to erasure — you can ask us to delete your personal data, subject to our legal retention obligations
• Right to restriction — you can ask us to limit how we process your data in certain circumstances
• Right to object — you can object to our processing of your data where we rely on legitimate interest
• Right to data portability — you can request your data in a structured, commonly used, machine-readable format
• Right to withdraw consent — where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal
• Right to lodge a complaint — you have the right to file a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data has been mishandled

How to exercise your rights

To exercise any of the rights listed above, please contact us at teethmocure@gmail.com or message us on WhatsApp at +234 810 081 6174. We will verify your identity and respond within thirty (30) days. There is no fee for exercising your rights unless your request is manifestly unfounded or excessive.

If you are not satisfied with our response, you may contact the Nigeria Data Protection Commission at https://ndpc.gov.ng.

Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If we make material changes that affect your rights, we will notify you by email or through a prominent notice on our website before the change takes effect. We encourage you to review this policy periodically.