Larai Luxury is the trading name of Larai Scents, a business operating at Amanfrom, Zongo Masjid Avenue, Kasoa, Ghana. We run this shop and are responsible for the personal information described here. To reach us about anything on this page, email admin@larailuxury.com or message us on WhatsApp at 055 236 2242 (7am – 7pm, daily).

Our gift-voucher site, vouchers.larailuxury.com, is a separate service with its own privacy policy. This one covers the shop and the Larai Admin staff app.

• Your phone number — this is your account. We use it to sign you in with a one-time code and to reach you about your orders.
• Your name — so we know who to greet, and who a parcel belongs to.
• Your email address, if you give one — receipts only.
• Measurements you choose to save — used to size a piece for you. You can leave them blank.
• A photograph of yourself, only if you add one under Your photo. It is used for one thing: showing you a piece on yourself. Nobody outside the shop can open it, we never publish it, and you can delete it from that screen at any time. The pictures it makes are kept for 30 days and then deleted.
• Delivery addresses you save — used to send your pieces, and shared with the rider who delivers them.
• Your orders and payments — what you ordered, in what size and colour, what you have paid, and the reference Paystack gives each payment.
• Messages you send us in an order thread, on WhatsApp, or through an enquiry form.
• Basic technical data — your IP address and request details, kept briefly to rate-limit abuse and to keep the shop up.

We do not collect or store your card number, your mobile-money PIN, or any other payment credential. Those go straight to Paystack and never reach us.

• Signing you in, and keeping you signed in.
• Taking your order, sourcing the piece, and telling you when it moves.
• Taking payment through Paystack, and applying voucher credit.
• Delivering to you, or handing your piece over when you collect.
• Showing you a piece on your own photograph, if you have added one.
• Answering your messages and settling refunds, swaps and disputes.
• Keeping our own books, and meeting legal and accounting obligations.

We do not sell, rent or trade your personal information, and we do not hand it to anyone for their own marketing.

We share only what a job needs, with the services that do that job:

• Paystack — our payment processor. Handles card and mobile-money payments and refunds under its own privacy policy.
• WhatsApp / Meta — carries our one-time codes and order notices, and any conversation you have with us there, under their own privacy policy.
• Our SMS provider — used as a fallback when WhatsApp cannot reach you.
• FASHN — the service that puts a piece on your photograph. It sees your photograph and the picture of the piece, and only when you ask for a try-on. It is not sent anything else about you: not your name, not your number, not your orders. If you never add a photograph, nothing of yours ever reaches them.
• Our hosting and storage providers — the servers this shop runs on and the storage that holds the photographs and films of the pieces.
• Riders and couriers — get the name, address and phone number needed to deliver a parcel, and nothing else.

We may also disclose information where the law requires it, or where we need to establish or defend a legal claim.

We set one cookie: a sign-in cookie that keeps your session. It is HTTP-only, so scripts on the page cannot read it, and it is required — the shop cannot keep you signed in without it.

Your browser also stores two harmless preferences on your own device: which theme you picked, and which pieces you saved. They stay on your device and are not sent to us as personal data.

We run no advertising trackers and no third-party analytics on this shop. Nobody is following you around the internet on our behalf.

Traffic is encrypted in transit. Sign-in tokens are stored hashed, never in the clear. Staff access is limited by role — an operator sees only what their job needs — and sensitive actions are written to an internal audit log so we can see who did what. Suppliers who help us source a piece see the piece, size and colour only, never your name or number.

Order, payment and refund records are kept for as long as we need them to honour the order, settle disputes and meet accounting and tax obligations. Your account details and saved measurements stay until you ask us to remove them. One-time codes expire within minutes.

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. We will do so unless we are required to keep a record — for example, the accounting trail behind an order you actually placed. Email admin@larailuxury.com or message us on WhatsApp, and we will come back to you.

You can also turn off WhatsApp and email notices in your account. Messages about an order you have money in — a payment, an arrival, a refund — will still reach you, because they are part of the sale rather than marketing.

This shop is not directed at children under 18, and we do not knowingly collect personal information from them.

Larai Admin is for authorised Larai Luxury staff. Staff sign in with their email, password and an authenticator code. Permissions control which shop records and actions each account can use. Sign-ins and sensitive staff actions are recorded in an audit log.

If you choose to import your phone contacts, the app sends the contacts’ names and phone numbers to the shop to match customer records. You can refuse Contacts permission and use an exported contact file instead. Importing contacts is optional. Staff should only import contacts they are authorised to use for the shop.

When you add photographs, videos, campaign pictures or receipts, those files are sent to the shop’s hosting and media-storage providers. Publishing a piece or campaign makes its selected catalogue content visible to customers. Private receipts remain permission-controlled. The app may keep local copies while an upload is waiting or completing, so it can continue after an interruption.

The app keeps sign-in tokens in the device’s secure storage. If you enable Remember me on this phone, it also keeps the email and password there; the authenticator code is still needed. The live shop and Demo shop use separate saved credentials, cached records and upload queues. Signing out clears the current shop’s session and cached records. Turning off Remember me and signing in removes that shop’s saved email and password.

The same support contact and data-access/deletion request process in this privacy policy applies to staff. Permission to access contacts, the camera, photos or a Bluetooth printer can be managed in device settings.

We may update this policy. The effective date at the top of the page always shows the current version.