Privacy policy

When you buy, we collect your name, email address, phone number and delivery address. We need all four to take payment and get a cap to you.

We store the number you bought, your order reference, the amount paid and the payment reference returned by Paystack.

When you browse, your device is given an anonymous identifier in a cookie. Its only job is to remember which number you are holding, so that a reservation belongs to you and not to somebody else on the same network.

If you join the mailing list, we store your email address and nothing else.

We never see or store card numbers, CVVs, bank details or payment credentials. Those go directly to Paystack.

We do not sell, rent or share your details with anyone for marketing.

We process your order details because they are necessary to perform the contract you entered when you bought a cap.

We process mailing list details on the basis of your consent, which you can withdraw at any time by replying to any email or writing to us.

We process a limited amount of analytics data on the basis of our legitimate interest in understanding how the store is used. Analytics only run when the relevant identifiers are configured.

Paystack, to take payment. Our email provider, to send your confirmation. Our hosting provider, which stores the database. The courier, which receives your name, address and phone number so it can deliver.

That is the full list.

Order records are kept for six years, because a numbered edition needs a permanent record of who owns which number and because tax rules require it.

Mailing list entries are kept until you unsubscribe.

Under the Nigeria Data Protection Act you can ask us for a copy of what we hold, ask us to correct it, or ask us to delete it where we are not required to keep it.

Write to hello@y2kstore.com and we will answer within thirty days.