Company Details and How We Protect Your Data

Registered Name: Sana Pads Limited (company wey dem register for Federal Republic of Nigeria).

Registered Address: Robert Kennedy Rd. 26, Navy Estate, Karchi, FCT, Nigeria.

Company Registration: E dey registered with Corporate Affairs Commission (CAC) for Abuja, Nigeria, under Registration No. 7151140.

Tax Identification Number (TIN): 31740106-0001.

Person Wey Dey Responsible: Mary Azaki Sabo (Managing Director, Sana Pads Limited).

NAFDAC REG NO’s: A3-101503, A3-101504, A3-101505

Public Interest Status: Sana Pads Limited na social enterprise wey dedicate to public interest goal: to promote period hygiene wey go last and to reduce period poverty for Nigeria.

Email:sanapads.marketing@gmail.com

Telephone: +234 911 420 4930

For any question or letter, abeg use di contact details wey dey up. Di management of Sana Pads Limited dey responsible for wetin dey dis website, and you fit reach dem through di email or mailing address wey we give for official communication.

Last Updated: May 4, 2025

Sana Pads Limited (“we”, “us” or “our”) don commit to protect your personal data. Dis Privacy Policy explain how we dey collect, use and protect your information, according to Nigeria Data Protection Regulation (NDPR) and EU General Data Protection Regulation (GDPR). E apply to all visitors, customers, donors and users of our website and services. We wan dey open about how we dey handle data, and make sure say we respect di privacy rights of both Nigerian and international users.

Sana Pads Limited na Nigerian social enterprise wey focus on pads wey you fit wash use again and on teaching period hygiene. For data protection laws, Sana Pads Limited na di “data controller” of di personal information wey we collect for dis website. If you get any question about dis policy or how we dey handle your data, abeg contact us with di details wey dey di Contact section of dis policy.

We dey collect personal data wey you give us direct, and some data dey come automatically when you use our site. See overview of di types of information wey we dey collect and when we dey collect am:

When you buy pads wey you fit wash use again or other products (as client, as distributor, or for foundation), we dey collect di information wey we need to process your order and deliver di products. Dis fit include your name, delivery address, phone number and email address, plus order details (like which product and how many). We dey use dis information to complete your order, arrange delivery, and talk to you about di delivery.

If you join our period hygiene club or subscribe to our newsletters or updates, we dey collect your name and email address. We dey use am to send you regular email updates about period health, our products and news wey relate. You go don give us dis information when you fill subscription form, and you fit unsubscribe any time.

When you donate money through our site, we dey collect information to process di donation and to acknowledge wetin you give. Dis one usually include your name, contact information (like email address and/or phone number), and donation details (like how much you give and di date). If you agree, or as law allow, we fit also use your contact information to send you updates on how we use your donation and di impact of our programmes, plus future fundraising or project updates.

If you contact us through our website (for example, through contact form or email), we go collect your name, email address and wetin your message talk. Any extra information wey you choose to put for your message (like phone number or other details), we go collect am too. We dey use dis data to answer your questions, requests or feedback.

When you visit our website, some data dey come automatically from your device for security and analytics. Dis fit include IP address, browser type, device information, and how you dey browse our site (like di pages wey you view). We dey use cookies and similar technology to collect some of dis information (see di Cookies section below for more details). Dis usage data dey help us secure our website, stop fraud, and understand how users dey use our site so we fit improve our services. (We no dey get any information wey fit identify you personally for dis process apart from technical data, and where law require am, we go ask for your consent for any cookies wey no be essential.)

Our website fit use “cookies” (small text files wey dem put for your device) and similar technology to make your experience better and to analyse how pipo dey use di site. Where GDPR or NDPR require am, we go collect your consent before we use cookies wey no be essential. You fit change your browser settings to refuse cookies, but note say some site features fit no work well because of dat. For more details, you fit check our Cookies notice (if e dey) or contact us.

We dey use your personal data only for specific purposes and for ways wey you fit see clear. Di main reasons why we dey process your information na:

We dey use order and shipping information to process purchase of pads wey you fit wash use again and related products, arrange delivery to di address wey you give, and talk to you about your order (like order confirmation and shipping notice). We need dis one to perform our contract with you when you buy or request our products.

For pipo wey subscribe to our period hygiene club or newsletter, we dey use your name and email to send emails from time to time wey get updates, education content, offers or event information. We dey send dis messages only with your consent (like when you sign up for our website), and you fit stop am any time by clicking di unsubscribe link for our emails or by contacting us.

We dey use donor information to process your donations (including payment through secure payment providers) and to keep record of contributions. With your permission, or as di law wey apply allow, we fit also send thank-you messages, donation receipts and follow-up messages to tell you about di impact of your contribution or to invite you to support our cause more. We dey try to dey accountable to our donors by giving updates on how we use di money; but you fit choose to stop receiving our messages any time.

If you reach us with questions, feedback or requests, we go use di contact information and message details wey you give to answer you. Dis fit include to help you with product information, to solve any problem with order, or to give information about our programmes and projects when you ask.

We dey analyse website usage data (wey normally no dey identify you direct) to understand how users dey behave and wetin dem like. Dis one dey help us improve our website layout, content and services. For example, to know which pages pipo dey visit pass fit guide us to improve those sections. We fit also use technical data to find and fix problems for di site, keep am secure, and stop fraud or bad activities (like hacking or spam). Where we use cookies or similar tracking for analytics, we go do am according to consent rules under NDPR/GDPR

For some cases, law dey require us to process and keep personal data. For example, we fit need to keep records of sales and donations for tax, accounting or reporting. If authorities request information legally (like for investigation or audit), we fit process personal data to follow dat law. We go only give di data wey dem need, and we go tell you about am when law allow.

We dey process personal data only when we get valid legal basis under di data protection laws wey apply. Because we dey serve Nigerian users and others (including pipo wey fit dey live for EU), we dey process data according to both NDPR and GDPR. Di legal bases wey we dey use include:

We go collect your consent before we collect or use your personal data for cases where consent dey required. Under both NDPR and GDPR, your consent na di legal basis to send you marketing messages like our period club updates or newsletters. For example, when you subscribe with your email, you agree to receive our updates. You also give consent when you fill contact form, so we fit use di information to reply you. You get right to withdraw your consent any time (for example, you fit unsubscribe from emails or tell us make we stop to use data wey you give us by yourself). If you withdraw consent, e no go affect whether di processing wey we don do before you withdraw dey legal.

When we need to process your data to fulfil contract with you, or to take steps wey you ask for before we enter contract, dis na legal basis. Under GDPR, dis na Article 6(1)(b) – e dey necessary to perform contract. Under NDPR, to process data so we fit give you di service wey you request go count as legitimate purpose wey we don tell you. For example, when you buy products from us or donate to us, we dey process your name, address and payment details to complete di transaction and deliver di goods or services wey you request. Same way, if you ask for information or support, to use your data to answer you fit count as part of di service. Without dis data, we no go fit complete your order or donation well.

For situations where we must process or keep data to follow law or regulation, we dey use legal obligation as di basis. (GDPR Article 6(1)(c) allow processing wey dey necessary to follow legal obligation.) For example, Nigerian law or tax rules fit require us to keep some transaction records (including personal data of buyers or donors) for some fixed time. Same way, if EU law put any obligation (like to keep records for VAT or to inform authorities about some activities), we go process data as e need to follow am. For dis cases, we dey process only di data wey law specifically require.

Under GDPR, we fit process personal data if e dey necessary for our legitimate interests, as long as your data protection rights no dey above those interests (GDPR Article 6(1)(f)). For example, e fit be our legitimate interest to talk to our existing donors and customers about related causes or products wey fit interest dem, or to improve our services by analysing usage data. We go always consider your rights and wetin you expect; for example, any marketing to past donors go dey very limited, or with separate consent if e need. Important: Di NDPR (Nigeria) put strong focus on consent, and e no clearly recognise “legitimate interest” di same way as GDPR. Dis mean say for Nigerian data subjects, we go normally use your consent or another clear legal basis (contract or legal obligation) for dis kind processing. We no go use your data for any purpose wey you no go reasonably expect or wey we never tell you.

In short, we dey make sure say every personal data wey we collect get specific purpose and legal reason. If we ever need to process your personal data for new purpose wey dis Privacy Policy no cover, we go tell you and collect any consent wey dey required, or give di correct legal basis, before we continue.

We dey handle your personal information with care and we dey keep am confidential. We no dey sell your personal data to third parties. But to run our work and give our services, sometimes we need to share data with third parties wey we trust, under strict conditions:

We fit share di information wey dey necessary with third-party service providers wey dey do work for us. Dis include, for example:

• Shipping and Logistics Companies: to deliver your orders to you (dem go get your name and delivery address, and maybe phone number to arrange di delivery).

• Payment Processors and Banks: to handle donation payments or product purchase safe (dem go get your payment details and fit process your name and email for receipt or verification). We dey use payment gateways wey get good name and wey dey PCI-DSS compliant, to make sure say dem handle your payment information safe.

• Email and Newsletter Services: if we use email marketing service to send newsletters or club updates, your name and email address go dey stored with dat service provider so dem fit send you emails. We dey make sure say any provider like dat get correct data protection measures.

• IT and Hosting Providers: wey dey help us manage our website and data storage (dem fit process data like our website database or backup wey get your information, under secure and confidential conditions).

Dis service providers dey get only di information wey dem need to do dia specific service, and contract dey bind dem to process your data only for di purposes wey we instruct, and to protect am according to dis Privacy Policy and di law wey apply.

Inside Sana Pads Limited, na only staff wey get permission and wey need your information to do dia work fit access am – for example, di team wey dey handle orders, donor relations or customer service. All staff dey bound by confidentiality and data protection duties.

We fit disclose personal data if law or legal process require am, for example to answer court order, subpoena or regulator request. We fit also share information if we believe in good faith say e dey necessary to protect our rights, your safety or di safety of others, to investigate fraud, or to answer government request. For all dis cases, we go only give di data wey dey necessary, and we go object to request wey too wide when e dey appropriate. If law allow, we go tell you about dis kind request.

If e happen say Sana Pads Limited go through big business transaction like merger, acquisition or sale of assets (wey no too likely), personal data wey we hold fit move go di new owner or partner as part of dat deal. If dis happen, we go make sure say di new company continue to respect your personal data according to dis Privacy Policy, and we go tell you (for example, through notice for our website or email) about any change for how dem dey handle data. You go get chance to use your rights about your data for dat kind situation.

We dey require any third party wey get your personal data to protect am according to di data protection laws wey apply. Anytime we share personal data, we dey do am safe and only reach di level wey di purpose need.

Sana Pads Limited dey based for Nigeria and most of our work dey happen for Nigeria. But di personal data wey we collect fit dey stored or processed for other countries, for example if we use cloud services or service providers wey dey outside Nigeria, or if we need to talk with donors and partners for other countries. Especially, if you be person for European Union (EU) or European Economic Area (EEA), your data fit move go Nigeria (wey dey outside EEA) when you use our site or services.

We sabi our duties when we dey send personal data across national borders. Under NDPR: to send Nigerian residents’ data go other countries dey allowed only to countries wey get adequate data protection or wey get correct safeguards (or with di person consent, if other conditions no dey). Under GDPR: we must make sure say any personal data wey dey leave EEA get protection through some mechanisms (like to send am go countries wey EU see as get adequate level of data protection, or to use Standard Contractual Clauses, or to collect clear consent from you).

See di steps wey we dey take for international data transfers:

Adequacy and Equivalent Protection: Anytime e possible, we dey try to host and process data for places wey get strong data protection laws. For example, if our email newsletter provider or cloud backup service dey EU or for country wey EU see as “adequate” for data protection (like countries wey meet EU standards), those transfers dey automatically protected under GDPR. Same way, for Nigerian data, if di data dey stored for environment wey get similar protection, we see am as e follow di aim of NDPR.

Standard Contractual Clauses (SCCs): If we need to send EU personal data to service provider or partner for country wey EU no see as adequate (wey include Nigeria for EU data, because Nigeria never dey EU adequacy list), we go put EU Standard Contractual Clauses or other approved transfer mechanisms in place. Dis na legal contracts wey European Commission approve, wey bind di person wey receive di data to protect am according to EU privacy standards. Dis one dey make sure say your personal data wey come from EU still dey protected even after di transfer.

NDPR Safeguards: To send data comot Nigeria, we dey follow NDPR rules by making sure say di foreign receiver don agree to keep privacy protections. If, for example, we go store some Nigerian user data for US-based cloud server, we go make sure say di cloud provider get strong security and privacy commitments (and if e need, we go ask for your consent for dat transfer). Nigeria Data Protection Bureau/Commission fit bring guidelines on which destinations dey acceptable, and we go follow dem.

Your Consent for Cross-Border Transfer: For cases where adequacy decision no dey and formal safeguard like SCCs no dey, we go ask for your clear consent before we send your personal data go another country. For example, if you be Nigerian user and we wan use new service provider for country wey no get strong data law, we go tell you and we go only continue if you agree.

Abeg note say international transfers fit also happen when you yourself decide to use our services from outside Nigeria – for example, if EU donor submit dia information for our website wey dey based for Nigeria, dat one mean say dia data dey go Nigeria. When users use our site and give information, dem understand say we go handle dia data as dis policy describe. No matter where we process your data, we go take correct steps to protect am. We dey also follow new developments for international data transfer rules so we go dey compliant.

We go keep your personal data only for as long as e dey necessary for di purposes wey we collect am for, or to follow legal or regulatory requirements. We dey follow di data minimisation and storage limitation principles of NDPR and GDPR. Dis mean say we no dey keep data forever without reason. See our general practice for how long we dey keep different types of data:

Customers (Orders and Shipping): If you don buy products from us, we go keep your order information (including personal details wey join di purchase) for as long as we need am to complete di transaction and give customer service or after-sales support. After we complete your order, we dey usually keep di data for up to 6 years from di date of di transaction. Dis period dey allow us check transaction records for accounting, handle any dispute or refund, and follow record-keeping duties (for example, financial records for tax or audit). Six years na common period wey law dey set to keep business records. After dis period, or if we no need di data again, we go delete am safe or anonymise am. (If local law require different period, we go follow wetin di law talk.)

Subscription (Newsletter/Club) Data: If you don subscribe to our period hygiene club updates or newsletter, we go keep your name and email for our mailing list until you unsubscribe or ask make we delete am. If you still be active subscriber, we go continue to process your data for dis purpose. If we notice say your email address no dey active again or e dey bounce for long time, we fit remove am from our list. Also, under NDPR guidelines, when person no use digital service for some time (e.g., three years wey e no dey active), di data suppose dey deleted. Following dat one, if you no open or respond to our messages for long time (about 2-3 years), we fit remove your contact from our list to protect your privacy. Anyhow, every marketing email wey we send get easy way to opt out, and once you opt out, we go stop to send you emails and we go delete your subscription data from our active mailing list. (We fit keep small record of your email to make sure say we respect your opt-out and we no go add you back by mistake.)

Donor Information: We dey keep donation records (name, contact and donation details) to acknowledge and track contributions, issue receipts, and meet legal rules for financial records. We dey generally keep donation records for up to 6 years too, according to best practice for keeping financial records. Dis one dey help us follow any audit and anti-fraud rules, and to get history data on where our money dey come from. If you don agree to receive updates, we go keep your contact information to send those updates until you opt out. If you ask make we delete your data, we go remove or anonymise your contact information from our donor communications list. But we fit need to keep record of di donation itself (with your name) for our financial logs for di rest of di retention period, as law or accounting standards require. After di retention period finish, or once we confirm say we no need di data again, we go delete or anonymise donor personal data safe.

Contact Form and Inquiry Data: Messages and questions (like emails or contact form messages), we dey keep dem for as long as we need to answer your question and follow up. We fit keep dis messages for some time (usually up to 1-2 years) in case you get more questions, or so we fit check di old conversation if you contact us again. If di question lead to business relationship (e.g., you become customer or partner), we fit keep di messages wey relate as part of our business records under di customer or partner profile, according to di retention periods wey dey up. If e no lead to dat, once di conversation don finish and we no need am again, we go delete di messages. We dey check old questions from time to time and remove data wey we no need again.

Website Usage Data: Web analytics data wey we don join together or anonymise fit stay longer for trend analysis, because e no dey identify any person. But raw logs wey get IP addresses or information wey fit identify person, we dey usually rotate or delete dem within short time (normally within few months), unless we need dem for security investigation. For example, our server logs fit stay for 6-12 months for security monitoring, then dem go delete automatically. If we store cookies for your device, how long dem go last depend on di type of cookie – some fit last only for your session, others (like preference cookie) fit last few months or reach a year. You fit always clear cookies from your browser by yourself.

For all cases, when we no get legitimate need or legal obligation to keep your personal data again, we go make sure say we delete am safe, anonymise am, or destroy am. We dey also try make we no keep many extra copies of personal data. We dey check our data retention practices from time to time to make sure say we no dey keep data pass di time wey we need am. Remember say for some situations, we fit need to keep data longer if di law wey apply require am, or to establish, use or defend legal claims (for example, if case dey for court or investigation dey go on). We go always follow di maximum retention periods wey law allow, and we no go use your data for other purposes after your relationship with us don end, except as e dey required to follow law or for legitimate internal purposes (like internal audit).

We respect your right to control your personal data. Whether NDPR, GDPR or both dey protect you, our goal na to give you easy way to use di main data subject rights. Dis rights include:

Right to Access: You get right to ask us confirm whether we dey process your personal data, and if yes, to ask for copy of di data wey we get about you. We go give you di information wey relate, usually within reasonable time and for format wey pipo dey commonly use. (Under NDPR and GDPR, we go usually answer access requests within one month, and dis service dey generally free, unless di requests clearly no get basis or dem too much.)

Right to Rectification (Correction): If any personal data wey we get about you no correct or e no complete, you get right to ask make we correct or update am. For example, if you change your email address or you notice say we make mistake for your name, you fit ask us make we fix am, and we go do am quick.

Right to Erasure (Deletion): You fit ask make we delete your personal data for some situations. Sometimes pipo dey call dis one “right to be forgotten.” For example, if you subscribe to our newsletter and you no want make we get your information again, you fit ask us make we remove am. We go follow deletion requests as long as we no get strong reason to keep di data (like legal obligation or legitimate interest wey dey above). We go also tell third-party processors make dem delete your data if dem get am from us. Note say transaction records (like donation receipts) fit no dey deleted immediately if we need dem for legal record-keeping, but we go tell you if na so, and we go delete wetin we fit.

Right to Object: If we dey process your data based on legitimate interest (under GDPR) or for direct marketing, you get right to object to dat processing. For example, if you be donor and we dey send you updates sometimes because of our interest to engage supporters, you fit object any time, and we go stop to use your data for dat purpose. Under NDPR, since we mostly dey use consent for dis kind cases, to withdraw consent go give di same result. You fit also object to any profiling or automated decision-making (but for now, we no dey do automated decision-making on user data).

Right to Restrict Processing: You get right to ask make we limit how we dey process your data for some situations. For example, if you challenge whether your data correct, or you don object to processing, you fit ask make we pause to use your data while we dey handle your concern. During di restriction, we fit store your data but we no go process am further until di matter don settle (except for storage or as e dey necessary for legal claims, etc.).

Right to Data Portability: For data wey you give us and wey we dey process with automated means under consent or contract (dis one mostly apply under GDPR), you get right to ask for copy for structured format wey pipo dey commonly use and wey machine fit read (for example, CSV or JSON file), so you fit move am go another service. For practical terms, dis right fit apply if you wan carry di personal information wey you give us for one service go another provider. We go help with dis kind requests as far as e apply.

Right to Withdraw Consent: As we talk before, if we dey use your consent to process any of your personal data, you get right to withdraw dat consent any time. Dis one no go affect any processing wey we don already do while di consent dey, but e go stop us from continuing di processing wey base on consent. For example, you fit unsubscribe from our newsletter (you dey withdraw consent to receive emails), or ask us make we stop to process data wey you give through optional form. Once you withdraw consent, we go stop di processing wey relate and, if no other legal basis dey, we go delete or anonymise dat data.

Right to Lodge a Complaint: We dey try to handle all your questions and requests well. But if you believe say we don break your privacy rights or violate data protection laws, you get right to complain to di correct supervisory authority. Under NDPR, you fit contact Nigeria Data Protection Bureau (NDPB) or any Data Protection Commission wey come after am wey dey responsible to enforce data privacy for Nigeria. Under GDPR, you fit reach di data protection authority for di EU country where you dey live, where you dey work, or where di violation wey you dey complain about happen. For example, if you dey EU, you fit contact your national Data Protection Authority or di lead authority for di country of our EU representative (if we choose one for future). We go appreciate if you give us chance to handle your concern direct first, so we encourage you to contact us with any complaint, and we go do our best to solve am for fair and open way.

To use any of your rights, you fit contact us through di contact information wey dey dis policy. We fit need to confirm say na you before we handle some requests (to protect your data from pipo wey no get permission). Dis fit mean say we go ask for extra information or identification. We go answer legitimate requests as quick as possible, and at least within di time wey law require (usually within one month, and e fit extend for complex requests – if we need extension, we go tell you and explain why).

Abeg note say dis rights no be absolute; for some cases, legal exemptions fit apply. If we no fit handle request (because of legal requirement or exemption), we go explain di reason to you. For example, if you ask make we delete data wey law say we must keep (like for financial audit), we fit no fit delete am until di required retention period finish. But we go talk with you and find reasonable solution anytime e possible (like to restrict access to di data).

Overall, we don commit to respect your rights and make sure say you get control over your personal information. Your trust important to us, and we go always work to protect your privacy and handle your requests with respect and care.

We understand say e important to secure personal data, and we don put correct security measures to protect your information from access, disclosure, change or destruction wey no get permission. We dey take both technical and organisational steps to make sure say we handle data safe:

Our website dey encrypted with SSL/TLS technology, wey mean say any data wey dey move between your browser and our site (for example, when you fill form or buy something) dey encrypted as e dey travel. We dey store personal data for secure servers wey firewalls and access controls dey protect. Where e possible, we dey use measures like encryption of sensitive data wey dey stored, pseudonymisation of data (to replace fields wey fit identify person with codes), and regular backups to stop data loss. We dey also apply security patches and updates to our systems on time to guard against weaknesses wey pipo don know.

Inside our organisation, we dey limit access to personal data to employees and contractors wey need di information to process am (only if dem need to know). Those pipo dey get training on why confidentiality and privacy important. We get internal policies wey dey guide how to handle personal data. For example, staff must use strong passwords, and multi-factor authentication dey on for access to sensitive systems where e possible. We dey log access and actions on personal data to keep audit trail. Also, we dey avoid to print personal data when e no necessary, and any paper document wey get personal information dey stored safe and we dey shred am when we no need am again.

When we use third-party service providers (like payment processors or cloud services), we dey choose companies wey get good name and wey don prove say dem get good security. We dey check dia security practices (wey dem often explain for dia privacy policies or compliance certificates) to make sure say dem meet our standards. For example, our payment processing partners dey PCI-DSS compliant (security standard to handle payment card data), and our email service providers often get certificate for standards like ISO 27001 or SOC 2 for information security. We dey also sign data processing agreements with dis providers to require say dem protect your data and tell us quick if any security incident happen.

We dey monitor our systems for weaknesses and breaches wey fit happen. We dey use anti-malware tools and we fit use intrusion detection/prevention systems. From time to time, we dey check our security measures and we fit do tests (like vulnerability scans or penetration testing) to find and fix weaknesses. Also, we get procedures to find activity wey look like attack (like many failed login attempts) and respond as e suppose (like to block access for some time to stop intrusion).

Even with all dis measures, no method of sending or storing data dey 100% secure. For di rare case say data breach happen (for example, security incident wey lead to destruction, loss, change or disclosure of personal data by accident, against law, or without permission), we get response plan. We go contain and investigate di breach immediately. If di breach fit bring risk to your rights and freedoms (under GDPR) or e get big impact (under NDPR), we go notify di correct authorities within di time wey dem require (GDPR generally require make we report to di authority within 72 hours). If di breach bring high risk to you (for example, leak of sensitive information), we go also tell you without delay wey no necessary, plus di steps wey you suppose take to protect yourself. We go take all di actions wey dey necessary to reduce di breach and stop am from happening again.

Your responsibility: E important to know say you too get role to keep your data safe. When you dey use our site, make sure say you dey use secure connection, and keep your own login details (if any) secret. Watch out for common scams – for example, we no go ever ask you for your password through email, and any payment for our site go pass through our secure payment portal, so beware of any request to send money outside our official channels.

We dey always improve our security practices as new technology and threats dey come. We don commit to protect your personal data, and if you get any question about di security of your data, feel free to contact us.

We fit update dis Privacy Policy from time to time to show changes for how we dey work, legal requirements, or for other operational reasons. When we make changes, we go change di “Last Updated” date wey dey top of di policy. If di changes big, we fit also give notice wey pipo go see well (like banner for our website or email to tell you about di update). We encourage you to check dis page from time to time so you go sabi how we dey protect your information.

If you continue to use our website or services after any change to dis policy, e mean say you don see di changes and you agree to follow di updated policy. But if we wan use your personal data for new purpose wey need your consent, we go ask for your consent first.

If you get any question, worry or request about dis Privacy Policy or how we dey handle your personal data, abeg no hesitate to contact us:

Sana Pads Limited
Address: 2 Clement Akpamgbo Close, Guzape, Abuja 900110, F.C.T, Nigeria.
Email: sanapads.marketing@gmail.com
Telephone: +234 911 420 4930

Abeg send any data protection question to di attention of our Privacy Compliance team (you fit just mention am for your email subject or letter). We go gladly help you with information, access requests, or any matter wey you wan raise.

For requests to use your rights (like to access or delete your data), you fit email us with di details of your request. We fit ask you to confirm say na you, to make sure say we dey protect your information from pipo wey no get permission. We go answer as quick as possible, and no later than di time wey law require.

Your privacy important to us well well. We appreciate di trust wey you put for Sana Pads Limited, and we go continue to work hard to protect your personal information. Thank you for supporting our mission to improve period hygiene – we don commit to respect dat support by using your data in responsible and legal way.