Privacy Policy

1 Who We Are

Brute Vitality Ltd (trading as Brute Wellness) is a Nigerian wellness company focused on developing and distributing premium natural supplements. We are committed to building health products that are honest, effective, and made for real people.

This Privacy Policy applies to all users of our website at brutewellness.com, our WhatsApp Business service, and anyone who places an order or contacts us through any channel.

2 Information We Collect

Information You Provide Directly

• Identity data: Full name
• Contact data: Phone number, WhatsApp number, email address
• Delivery data: Delivery address, state, city, landmark
• Order data: Products ordered, quantities, bundle selection, payment confirmation
• Communication data: Messages you send us via WhatsApp, phone, or email
• Health context (optional): Any health information you voluntarily share when discussing our products (e.g. existing conditions or health goals)

Information Collected Automatically

• Usage data: Pages visited, time on site, referring URL
• Device data: IP address, browser type, operating system
• Cookie data: Session identifiers and preference cookies (see Section 9)

3 How We Use Your Information

Brute Vitality Ltd uses your personal information for the following purposes:

• Order fulfilment: Processing, packaging, and delivering your orders across Nigeria
• Order communication: Sending order confirmations, dispatch notifications, and delivery updates via WhatsApp or SMS
• Customer support: Responding to enquiries, complaints, and return requests
• Sales follow-up: Contacting you about incomplete or abandoned orders (pay-on-delivery confirmation)
• Marketing (with consent): Sending promotional messages, product updates, or wellness content — you may opt out at any time
• Business operations: Internal analytics, inventory management, and service improvement
• Legal compliance: Meeting our obligations under Nigerian law

We will never use your information for purposes incompatible with those listed above without your prior consent.

4 WhatsApp Business & Messaging

Brute Vitality Ltd uses the WhatsApp Business API (provided by Meta Platforms Inc.) to communicate with customers about orders, provide support, and send transactional notifications.

What This Means For You

• When you place an order and provide your phone number, you consent to receiving WhatsApp messages related to your order.
• We may send order confirmations, payment reminders, shipping updates, and post-purchase follow-ups via WhatsApp.
• Our WhatsApp conversations may be handled by our sales team or automated message templates.
• Message content is processed through Meta's WhatsApp Business Platform. Meta's own privacy policy applies to how they handle message data on their infrastructure.

Your Messaging Rights

• You can opt out of WhatsApp marketing messages at any time by replying "STOP" to any message.
• Transactional messages (order confirmation, delivery) cannot be fully opted out while your order is active.
• You may request deletion of your messaging data — see our Data Deletion page for instructions.

5 Information Sharing

We do not sell your personal data. We may share your information with the following parties only as necessary:

• Delivery partners: Courier and logistics companies require your name, phone number, and delivery address to fulfil your order.
• State agents/representatives: Our regional distribution agents in your state may receive your delivery details for local order fulfilment.
• Technology providers: Our website host, WhatsApp Business API provider (Meta), and any payment tools may process your data as data processors on our behalf.
• Legal authorities: We may disclose your information if required by Nigerian law, court order, or government regulation.

All third parties who process your data on our behalf are required to handle it securely and in accordance with applicable law.

6 Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:

• Order records: Retained for 7 years for accounting and legal compliance under Nigerian law.
• Customer support records: Retained for 2 years after your last interaction.
• Marketing data: Retained until you opt out or request deletion.
• WhatsApp messaging data: Conversation logs retained for up to 12 months.

You may request early deletion of your data at any time, subject to legal retention obligations. Visit our Data Deletion page to submit a request.

7 Your Rights

Under the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR), you have the following rights:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete data.
• Right to deletion: Request that we delete your personal data, subject to legal retention obligations.
• Right to object: Object to processing of your data for marketing purposes.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at support@brutewellness.com or visit our Data Deletion page. We will respond within 30 days.

8 Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• Secure HTTPS encryption on all web pages
• Role-based access controls — only authorised staff can access customer data
• Password protection and access logging on our order management system
• Regular review of our data handling practices

While we take all reasonable precautions, no internet transmission or electronic storage system is 100% secure. Contact us immediately at support@brutewellness.com if you believe your data has been compromised.

9 Cookies

Our website uses cookies — small text files stored on your device — to improve your browsing experience. We use:

• Essential cookies: Required for the website to function (session management, cart data).
• Analytics cookies: Help us understand how visitors use our site. We may use tools like Google Analytics.
• Marketing cookies: Used with our Facebook/Meta ad campaigns to measure conversion and retarget visitors.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect your experience on our website.

10 Third-Party Links

Our website may contain links to third-party websites (for example, blog references or social media pages). This Privacy Policy applies only to brutewellness.com. We are not responsible for the privacy practices of any third-party websites and encourage you to read their privacy policies before providing any personal information.

11 Children's Privacy

Our products and website are not intended for individuals under the age of 18. Brute Vitality Ltd does not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us at support@brutewellness.com and we will promptly delete it.

12 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify customers via WhatsApp or email where required by law

Your continued use of our website or services after any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

13 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a concern, please contact Brute Vitality Ltd:

We are committed to resolving any privacy concerns fairly and transparently.