Effective Date: 14 September 2026
Last Updated: 14 September 2026

This GDPR Compliance page explains how VIBE THEORY ENTERPRISE (“Vibe Theory,” “we,” “our,” or “us”) approaches personal-data protection through https://vibetheory.africa/ where the EU General Data Protection Regulation (GDPR) or UK GDPR applies.

Vibe Theory primarily serves customers in Ghana and Nigeria. GDPR or UK GDPR does not automatically apply to every customer or transaction. Where its territorial scope applies, we aim to process personal information lawfully, fairly, transparently, and securely.

1. Scope

This page applies to personal-data processing that falls within the territorial scope of:

  • EU GDPR
  • UK GDPR
  • Related applicable European or UK data-protection requirements

Customers in Ghana and Nigeria may primarily be protected by their respective national privacy laws.

2. Data Protection Principles

Where GDPR applies, we aim to follow principles of:

  • Lawfulness, fairness, and transparency
  • Purpose limitation
  • Data minimization
  • Accuracy
  • Storage limitation
  • Security and confidentiality
  • Accountability

Personal information should only be used for legitimate and clearly defined purposes.

3. Information We May Process

Depending on how customers interact with VIBETHEORY.AFRICA, we may process:

  • Name
  • Email address
  • Billing and delivery information
  • Account details
  • Order history
  • Transaction information
  • Customer-support communications
  • Marketing preferences
  • Reviews and feedback
  • Device and browser information
  • Cookie and website-usage data

4. Lawful Bases

Where GDPR requires a lawful basis, processing may rely on:

Contract

To process orders, arrange delivery, manage accounts, and provide customer support.

Consent

For certain marketing activities, optional cookies, or other consent-based processing.

Legal Obligation

Where information must be processed for tax, accounting, regulatory, or other legal requirements.

Legitimate Interests

For activities such as website security, fraud prevention, analytics, and reasonable business administration.

Other lawful grounds may apply where legally appropriate.

5. Order and Delivery Data

Customer information may be processed to:

  • Confirm purchases
  • Prepare orders
  • Arrange delivery
  • Communicate order status
  • Handle returns
  • Process eligible refunds
  • Resolve customer enquiries

Relevant information may be shared with service providers where necessary to complete these activities.

6. Payment Processing

Payments may be processed by independent payment providers.

Vibe Theory does not intentionally store full payment-card numbers, CVV/security codes, banking passwords, or PINs.

Payment providers may process information under their own legal, privacy, and security obligations.

7. Cookies and Consent

VIBETHEORY.AFRICA may use essential and optional cookies.

Where GDPR or UK GDPR requires consent for non-essential cookies, appropriate consent choices should be provided before those cookies are activated.

Users may also manage cookies through available website or browser controls.

8. Marketing

Where legally permitted, we may communicate information about:

  • New fashion collections
  • Product launches
  • Promotions
  • Special offers
  • Brand updates

Where marketing depends on consent, customers may withdraw that consent.

Customers may also opt out of direct marketing using the available unsubscribe method or by contacting us.

9. Right of Access

Where GDPR applies, eligible individuals may request confirmation of whether their personal information is being processed and request access to relevant data.

Reasonable identity verification may be required before information is released.

10. Right to Correction

Individuals may request correction of inaccurate or incomplete personal information.

Certain historical transaction information may need to remain unchanged where alteration would conflict with accounting, tax, fraud-prevention, or legal requirements.

11. Right to Erasure

Eligible individuals may request deletion of personal information where GDPR conditions for erasure are satisfied.

Deletion may be limited where information must be retained for:

  • Legal obligations
  • Tax or accounting
  • Fraud prevention
  • Legal claims
  • Payment disputes
  • Security purposes

Further information is available in our Account & Data Deletion Policy.

12. Restriction and Objection

Where applicable, individuals may have the right to:

  • Restrict certain processing
  • Object to processing based on legitimate interests
  • Object to direct marketing

Requests will be assessed according to applicable legal requirements.

13. Data Portability

Where legally applicable, individuals may request certain personal information in a structured, commonly used, and machine-readable format.

This right generally applies only to qualifying automated processing based on consent or contract.

14. Withdrawal of Consent

Where processing relies on consent, that consent may be withdrawn.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

We may continue processing information where another lawful basis applies.

15. Third-Party Processors

We may use providers supporting:

  • Website hosting
  • Payment processing
  • Delivery
  • Communications
  • Analytics
  • Security
  • Customer support
  • Fraud prevention

Where required, providers processing personal data on our behalf should be subject to appropriate data-protection obligations.

16. International Data Transfers

Some service providers may process information outside the European Economic Area, United Kingdom, Ghana, or Nigeria.

Where GDPR or UK GDPR regulates such transfers, appropriate safeguards may be used where required, including:

  • Adequacy mechanisms
  • Standard Contractual Clauses
  • Contractual safeguards
  • Other legally recognized mechanisms

17. Data Retention

Personal information is retained only for as long as reasonably necessary for the relevant purpose or legal requirement.

Retention may depend on:

  • Orders
  • Transactions
  • Customer accounts
  • Returns and refunds
  • Customer support
  • Tax and accounting
  • Fraud prevention
  • Legal claims

Information may be deleted or anonymized when it is no longer required.

18. Data Security

We use reasonable technical and organizational measures designed to protect personal information.

Depending on the systems used, measures may include:

  • Encryption
  • Access controls
  • Authentication
  • Secure hosting
  • Software updates
  • Monitoring
  • Restricted administrative access

No online system can be guaranteed to be completely secure.

19. Personal Data Breaches

If a personal-data breach occurs, we may:

  • Investigate the incident
  • Contain the issue
  • Assess potential risks
  • Secure affected systems
  • Take corrective action

Where required by applicable law, affected individuals and relevant authorities will be notified.

20. Ghana and Nigeria Data Protection

For customers in Ghana, relevant processing may be governed by the Data Protection Act, 2012 (Act 843).

For customers in Nigeria, relevant processing may be governed by the Nigeria Data Protection Act 2023.

These local requirements may apply independently of, or in certain circumstances alongside, GDPR or UK GDPR.

21. Complaints

Where GDPR or UK GDPR applies, eligible individuals may have the right to lodge a complaint with the relevant data-protection supervisory authority.

Customers may contact Vibe Theory first so that we can review and attempt to resolve the concern.

Customers in Ghana or Nigeria may also have rights to raise concerns with the relevant national data-protection authority where applicable.

22. Changes to This Page

We may update this GDPR Compliance page when our data practices, website functionality, service providers, business operations, or legal requirements change.

The latest version will be published on VIBETHEORY.AFRICA with an updated Last Updated date.

23. Contact Us

For GDPR enquiries, privacy concerns, data-rights requests, or questions about how we process personal information, please contact:

VIBE THEORY ENTERPRISE

Website: https://vibetheory.africa/
Information Email: info@vibetheory.africa
Support Email: support@vibetheory.africa

Ghana Address

G7-313-4057, House Number PHC 202/1023/0005, Naa Adokailey Road, Near Oklahoma Hotel, Banana Inn, Accra, Ablekuma Central, Greater Accra, Ghana

Nigeria Address

House 4, Kirfi Close, Federal Housing, Kubwa, FCT, Nigeria