Effective Date: 22 September 2026
Last Updated: 22 September 2026
1. Introduction
PrimeSkill Fashion Hub Ltd (“PrimeSkill Fashion Hub”, “we”, “us”, or “our”) respects the privacy and data protection rights of customers who interact with primeskillfashionhub.com.
PrimeSkill Fashion Hub operates from Nigeria. The European Union General Data Protection Regulation (“GDPR”) does not automatically apply to every customer, transaction, or processing activity simply because our website is accessible online.
Where the GDPR applies to a particular processing activity or individual, we aim to handle relevant personal information in accordance with the applicable GDPR requirements.
This GDPR Compliance page should be read together with our Privacy Policy, Cookie Policy, Data Usage Policy, and Account & Data Deletion Policy.
2. When the GDPR May Apply
The GDPR primarily protects individuals in the European Economic Area (“EEA”) in circumstances covered by the Regulation.
Depending on our activities, the GDPR may apply where PrimeSkill Fashion Hub processes personal information in connection with offering goods or services to individuals in the EEA or monitoring their behaviour within the EEA.
The applicability of GDPR is determined by the circumstances and relevant law rather than merely by a person’s ability to access our website.
Where GDPR does not apply, personal information will be handled according to other applicable privacy and data protection requirements.
3. Personal Data We May Process
Depending on how a customer interacts with our website, personal data may include:
- Name
- Email address
- Billing information
- Delivery address
- Customer account information
- Order and transaction information
- Purchase history
- Customer support communications
- Marketing preferences
- Reviews or other submitted content
- IP address
- Device and browser information
- Cookie and website usage information
We aim to process only personal data reasonably necessary for the relevant purpose.
4. Lawful Basis for Processing
Where GDPR applies, personal data must be processed under an appropriate lawful basis.
Depending on the circumstances, we may rely on:
Contract
Processing may be necessary to take steps requested by a customer or fulfil a contract, including processing orders, arranging delivery, managing accounts, and handling eligible returns or refunds.
Consent
We may rely on consent for certain marketing communications, non-essential cookies, or other activities where consent is appropriate or legally required.
Where processing relies on consent, individuals may withdraw that consent, subject to applicable law.
Legal Obligation
Certain information may need to be processed or retained to meet legal, regulatory, accounting, or other applicable obligations.
Legitimate Interests
We may process information where reasonably necessary for legitimate business interests such as website security, fraud prevention, customer service, service improvement, and business administration, provided those interests are not overridden by applicable individual rights and freedoms.
Other GDPR lawful bases will only be relied upon where relevant and legally appropriate.
5. Data Minimisation and Purpose Limitation
Where GDPR applies, we aim to collect personal data that is adequate, relevant, and reasonably necessary for the purposes for which it is processed.
We do not intend to use personal information for materially incompatible purposes unless there is an appropriate legal basis for doing so.
Where required, customers will be provided with additional information about a new processing purpose.
6. GDPR Data Protection Rights
Where the GDPR applies, individuals may have rights including:
Right of Access
You may request confirmation of whether relevant personal data is being processed and request access to eligible information.
Right to Rectification
You may request correction of inaccurate personal data or completion of incomplete information.
Right to Erasure
In certain circumstances, you may request deletion of personal data.
This right is subject to exceptions, including situations where information must be retained to meet legal obligations or establish, exercise, or defend legal claims.
Right to Restriction
You may have the right to request restriction of certain processing in circumstances provided by the GDPR.
Right to Object
You may have the right to object to certain processing based on legitimate interests or to processing for direct marketing.
Right to Data Portability
Where applicable, you may request eligible personal data in a structured, commonly used, machine-readable format or request transmission to another controller where technically feasible and legally required.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
7. Marketing Rights
Where GDPR requirements apply to marketing activities, promotional communications will be handled using an appropriate legal basis.
Customers may unsubscribe from promotional emails using the unsubscribe option provided in relevant communications or by contacting us.
Opting out of promotional marketing does not prevent essential transactional communications, including order confirmations, delivery information, refund updates, account-security notices, or responses to customer enquiries.
8. Cookies and Consent
PrimeSkill Fashion Hub may use essential and non-essential cookies or similar technologies.
Where GDPR and related electronic privacy requirements require consent before certain non-essential technologies are used, we will seek appropriate consent.
Customers may be able to manage their preferences through available cookie controls or browser settings.
More information is available in our Cookie Policy.
9. Data Security
We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
Depending on the systems involved, measures may include secure website connections, access controls, secure hosting practices, authentication procedures, monitoring, system maintenance, and appropriate payment-security measures.
No electronic system can be guaranteed to provide absolute security.
10. Payment Data
Payments may be handled by independent third-party payment processors.
PrimeSkill Fashion Hub does not intentionally store complete payment card numbers, CVV/security codes, online banking passwords, or similar sensitive payment credentials where these are processed directly by the relevant payment provider.
Payment processors may process personal information according to their own legal obligations and privacy practices.
11. Data Retention
Where GDPR applies, personal data will not be retained in identifiable form for longer than reasonably necessary for the purpose for which it was collected, subject to lawful retention requirements.
Relevant considerations may include:
- Customer account status
- Completed and active orders
- Returns and refunds
- Accounting requirements
- Fraud prevention
- Customer service
- Legal claims
- Regulatory requirements
When information is no longer required, it may be securely deleted or appropriately anonymised.
12. International Data Transfers
PrimeSkill Fashion Hub operates from Nigeria, and some service providers may also process personal information in other countries.
Where GDPR applies to an international transfer and requires specific safeguards, appropriate transfer mechanisms may be used where required.
Depending on the circumstances, these may include adequacy mechanisms, Standard Contractual Clauses (“SCCs”), or other legally recognised safeguards.
13. Third-Party Data Processors
We may use service providers for functions such as:
- Website hosting
- Payment processing
- Delivery and logistics
- Email communications
- Website analytics
- Customer support
- Security and fraud prevention
- Technical website functionality
Where a provider acts as a processor for personal data subject to GDPR, appropriate contractual and data-protection requirements will be applied where legally required.
14. Personal Data Breaches
If a personal data breach occurs, we will take reasonable steps to investigate, contain, and remediate the incident.
Where GDPR applies and its notification thresholds are met, the relevant supervisory authority and/or affected individuals will be notified within the applicable legal requirements.
15. Automated Processing
Certain website, payment, security, or fraud-prevention systems may use automated processes.
We do not claim to conduct solely automated decision-making producing legal or similarly significant effects unless such processing is actually implemented.
If such processing becomes applicable, appropriate information and safeguards will be provided where required by law.
16. Exercising GDPR Rights
Where GDPR applies to you, you may submit an eligible privacy request using the contact details below.
To protect personal information, we may request reasonable verification of your identity before responding to certain requests.
Requests will be handled within applicable legal timeframes. In some circumstances, the response period may be extended where legally permitted due to the complexity or number of requests.
17. Right to Lodge a Complaint
Where the GDPR applies, you may have the right to lodge a complaint with an appropriate data protection supervisory authority if you believe your personal data has been processed contrary to applicable data protection law.
We encourage customers to contact us first where appropriate so that we have an opportunity to understand and address the concern.
18. Nigerian Data Protection Requirements
As a business operating from Nigeria, PrimeSkill Fashion Hub also considers applicable Nigerian privacy and data protection requirements when handling personal information.
The GDPR provisions described on this page apply only where the GDPR is legally applicable to the relevant processing activity.
Nothing on this page should be interpreted as claiming that GDPR applies to every PrimeSkill Fashion Hub customer or transaction.
19. Updates to This Page
We may update this GDPR Compliance page to reflect changes in our data practices, website functionality, service providers, or applicable legal requirements.
Any revised version will display an updated “Last Updated” date.
20. Contact Us
For GDPR-related enquiries, privacy requests, account data questions, or other concerns regarding personal information, please contact:
PrimeSkill Fashion Hub Ltd
Website: primeskillfashionhub.com
Business Address: 5, Koso Crescent, Galadima Dutse Road, Dawaki, Abuja, FCT, Nigeria
Information Email: info@primeskillfashionhub.com
Support Email: support@primeskillfashionhub.com
Please provide sufficient information for us to identify and appropriately respond to your request. We may request reasonable identity verification where necessary to protect personal information.