PRIVACY POLICY for HMF (Herbal Medical Farm)

Last updated: June 12, 2026

At HMF, we respect your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit [hmforg.vercel.app] and order herbal wellness products.

By using our website, you agree to this policy.

1. Information We Collect

We only collect data needed to serve you better:

1. Personal info: Full name, phone number, email address, delivery address
2. Order info: Products ordered, order history, order notes
3. Payment info: We accept Paystack, Flutterwave, and Bank Transfer. Card/bank details are processed directly by Paystack/Flutterwave. HMF does NOT store your card number or CVV.
4. Website data: IP address, browser type, device info, and cookies to improve site performance

2. How We Collect Your Information

1. You provide it: When you place an order, create an account, or contact support
2. Automatically: When you browse our site, we collect IP address and use cookies
3. From payment partners: Paystack/Flutterwave send us payment confirmation only

3. Why We Use Your Information - Purpose

Under Nigeria’s NDPR 2019, we use your data only to:

1. Process and deliver your herbal orders
2. Send order updates, delivery tracking, and customer support
3. Process payments securely through Paystack/Flutterwave
4. Improve our website and products
5. Comply with Nigerian tax and legal requirements
6. Send promotional offers only if you opt-in. You can unsubscribe anytime

We will NEVER sell, rent, or share your personal info for marketing without your consent.

4. How We Store + Protect Your Information

1. SSL Encryption: Our site uses HTTPS/SSL. Look for the padlock 🔒
2. Secure Payments: All payments go through PCI-DSS compliant Paystack or Flutterwave
3. Limited Access: Only authorized HMF staff can view order details
4. Data Retention: We keep order records for 7 years for tax/legal compliance. Marketing data is deleted if you unsubscribe or after 2 years of inactivity

No website can be 100% secure, but we use industry-standard protection.

5. Who We Share Data With - Third Parties

We only share info with partners needed to fulfill your order:

1. Paystack / Flutterwave: To process payments securely
2. Paystack Delivery / GIG Logistics: We share your name, phone, and delivery address only for shipping
3. Email/SMS service: To send order confirmations if used

Each partner complies with NDPR and has their own privacy policy.

6. Cookies

1. Remember items in your cart
2. Keep you logged in
3. Analyze site traffic to improve user experience

You can disable cookies in your browser, but checkout may not work.

7. Your Rights Under NDPR 2019

As a Nigerian user, you can:

1. Access: Request a copy of all data we have about you
2. Correct: Ask us to fix any wrong personal info
3. Delete: Request deletion of your data after legal retention period
4. Object: Opt out of marketing messages anytime
5. Withdraw consent: Stop us from processing your data

Email [paul.g.ameh@gmail.com] with subject “Data Request”. We’ll respond within 7 business days.

9. Changes to This Policy

We may update this policy if our services or Nigerian law changes. The “Last updated” date at the top will change. Please check back occasionally.