Legal
Privacy Policy
What personal information we collect, why we need it, how long we keep it and who we share it with.
Privacy Policy
Drafted to address both the UK GDPR and the Data Protection Act 2018, and the Nigeria Data Protection Act 2023.
1. Who we are
Lord Taylor World, trading as Lord Taylor World, of 817 Dagenham Road, Dagenham RM10 7UP, is the controller of the personal data described in this policy.
Our data protection contact is admin@lordtaylor.ng
We are registered with the Information Commissioner’s Office in the United Kingdom under registration number [ICO NUMBER], and with the Nigeria Data Protection Commission under [NDPC REGISTRATION], where required.
2. What personal data we collect
Category | What it includes | Why we need it |
|---|---|---|
Identity and contact | Your name, telephone number, email address, and the name, telephone number and delivery address of your receiver | To carry out the contract of carriage and to contact the receiver |
Identification documents | A valid ID card presented when depositing cargo at our Lagos branches | To meet our identification requirements and to deter unlawful use of the service |
Cargo information | Description, declared value, weight, dimensions and photographs of your cargo | To price, carry, track and, where necessary, defend a claim relating to your cargo |
Transaction data | Amounts, currency, payment reference, invoice number. We do not store card details | To take payment, issue invoices and keep accounting records |
Account data | Login credentials and shipment history where you register an account | To operate your customer account |
Communications | Messages you send us by email, WhatsApp or through the website | To answer enquiries and handle claims |
Marketing preferences | Whether you have consented to receive updates by email or WhatsApp, and any withdrawal of that consent | To send marketing only to those who have asked for it |
Technical data | IP address, browser type and pages visited | To operate and secure the website |
3. Lawful basis for processing
Under the UK GDPR and the Nigeria Data Protection Act 2023 we must have a lawful basis for each purpose. Ours are:
Purpose | Lawful basis |
|---|---|
Carrying your cargo, taking payment, issuing invoices, tracking and delivery | Performance of a contract with you |
Keeping accounting, tax and customs records | Legal obligation |
Verifying identity at Lagos branches; photographing cargo; investigating claims; preventing fraud and unlawful shipments | Legitimate interests — protecting our business, our staff and other customers’ goods |
Sending marketing messages by email or WhatsApp | Consent, which you may withdraw at any time |
Responding to lawful requests from customs, police or regulators | Legal obligation |
4. Marketing and your consent
We will only send you marketing messages where you have given consent. Consent is recorded at the point you give it, together with the date and how it was given.
You can withdraw consent at any time — by using the unsubscribe link in any email, by replying STOP to a WhatsApp message, or by contacting us. Withdrawing consent does not affect messages about a shipment you have already booked, which we send in order to perform the contract.
5. Prices, currency and payment
- Airlines, shipping lines and handling agents, so that your cargo can be carried.
- Customs and border authorities in the United Kingdom and Nigeria, where we are required to provide information.
- Payment providers — [Stripe / Paystack] — who process your payment. They act as independent controllers for their own purposes and have their own privacy notices.
- Delivery agents engaged to complete door-to-door delivery.
- Our IT and hosting suppliers, who process data on our instructions under a written contract.
- Professional advisers, insurers and law enforcement, where necessary to establish, exercise or defend legal claims, or where required by law.
We do not sell your personal data, and we do not share it for anyone else’s marketing.
6. International transfers
Because we operate between the United Kingdom and Nigeria, your personal data will be transferred between the two countries as a normal part of carrying your cargo. Your receiver’s details, for example, must reach the destination branch.
Transfers out of the United Kingdom. Nigeria is not currently the subject of a UK adequacy decision. Where we transfer personal data from the United Kingdom to Nigeria we do so on the basis of [TRANSFER MECHANISM — e.g. the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses], together with a transfer risk assessment. [LAWYER: see Section D, question 10.]
Transfers out of Nigeria. Where we transfer personal data out of Nigeria we do so in accordance with the Nigeria Data Protection Act 2023, on the basis of [MECHANISM].
7. How long we keep your data
Data | Retention period | Reason |
|---|---|---|
Shipment and customer records | [6] years from the end of the relevant financial year | Accounting, tax and limitation periods |
Invoices and payment records | [6] years | Statutory accounting requirements |
Cargo photographs | [12] months from delivery | Long enough to handle a claim |
Identification documents | [SPECIFY — as short as possible] | Review carefully. Holding ID scans is high risk; consider recording that ID was checked rather than retaining a copy |
Marketing consents and withdrawals | [6] years after withdrawal | To evidence that consent was properly obtained |
Website technical data | [12] months | Security and analytics |
8. Your rights
Under both the UK GDPR and the Nigeria Data Protection Act 2023 you have rights over your personal data. You may ask us to:
- give you a copy of the personal data we hold about you;
- correct data that is inaccurate or incomplete;
- delete data, where we no longer need it and no legal duty requires us to keep it;
- restrict how we use your data while a concern is investigated;
- provide your data in a portable format, or transmit it to another controller;
- stop processing based on legitimate interests, where you object; and
- stop sending you marketing, at any time and without giving a reason.
To exercise any of these rights, contact hello@lordtaylor.ng We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
9. Security
The website is served over HTTPS. Access to shipment and customer records is restricted to staff who need it for their role, and general staff can view only the most recent three months of data. We never store card details — payments are handled entirely by our payment providers on their own systems
10. Cookies
[A separate cookie notice and consent banner are required. Under the UK Privacy and Electronic Communications Regulations, non-essential cookies need consent before they are set. See Section D, question 12.]
11. Complaints
If you are unhappy with how we have handled your personal data, please contact us first at [EMAIL] so that we can try to put it right.
You may also complain to a regulator. In the United Kingdom, the Information Commissioner’s Office (ico.org.uk). In Nigeria, the Nigeria Data Protection Commission.
Last updated: September 14th 2026
Questions about this?
Message us on WhatsApp and a person will answer. We would rather explain it than have you guess.