Last Updated: February 13, 2026
Company: The Fort Brand Limited (RC 7423500)
Head Office: 48 Gbenga Alao crescent, off Yetkem road, Ajasa command road, Abuleegba Alagbado, Lagos, Nigeria
UK Branch: Unit 24/25 Royal Star Arcade, High Street, Maidstone, UK

1. Introduction

Welcome to Extensionbyfort.com. At The Fort Brand Limited (“Company,” “we,” “us,” or “our”), your privacy is our “Fort”—our symbol of strength and security.

We are a Data Controller registered under the laws of the Federal Republic of Nigeria. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our e-commerce website, in compliance with the Nigeria Data Protection Act (NDPA) 2023 and the General Application and Implementation Directive (GAID) 2025 .

By using our site to purchase hair extensions, organic skincare, or haircare products, you agree to the terms of this policy.

2. Information We Collect

To serve you better (e.g., processing your order for French Curls or Nu-Locs), we collect the following personal data:

• Identity Data: Full name, username, or social media handle.
• Contact Data: Billing address, shipping address (in Lagos or globally), email address, and phone numbers.
• Transaction Data: Details about payments to and from you (specifically payment via Flutterwave/Paystack) and other details of products you have purchased from us .
• Technical Data: IP address, browser type, and interaction with our site (via cookies).
• Marketing Data: Your preferences in receiving marketing from us and your communication preferences.

3. Legal Basis for Processing (NDPA Compliance)

Under the NDPA 2023, we process your data only when we have a specific legal justification .

• Performance of a Contract: To deliver your “Passion Twist” or “Gypsy Locs” to your doorstep, we must use your address and phone number.
• Consent: For sending you promotional emails or SMS about new hair collections or discounts. Note: You have the right to withdraw this consent at any time.
• Legal Obligation: To retain records for tax and regulatory compliance (e.g., FIRS).

4. Marketing and Direct Communications (CRITICAL NOTICE)

We respect your inbox.
Following the precedent set by the Nigerian courts in Araka v. Ecart Internet Services (2025), Extensionbyfort will not send you direct marketing messages (SMS or Email) unless you have given us explicit, affirmative consent (an “opt-in”) .

• Order Updates: Transactional messages regarding your order status (e.g., “Your order has shipped from Alagbado”) are not marketing. You will receive these to fulfill your contract.
• Promotions: If you sign up for our newsletter or tick a box for “Exclusive Offers,” you are opting in.
• Opt-Out: Every marketing message we send will contain a clear “Unsubscribe” or “Stop” mechanism.

5. Data Sharing and Third Parties

We do not sell your data. However, to run our e-commerce empire, we share data with specific processors:

• Delivery Partners: We share your Name, Address, and Phone number with local logistics providers (e.g., GIG Logistics, UPS) to deliver your hair.
• Payment Processors: We use secure gateways (Flutterwave/Paystack). We do not store your full card details on our servers.
• Service Providers: We use platforms like Shopify (or similar) to host our site.

Data Transfer Abroad: As we ship to the USA and have a UK branch, your data may be transferred out of Nigeria. Under GAID 2025, we ensure any receiving country has adequate data protection laws or we execute standard contractual clauses with them .

6. Data Security and Retention

• Security: We implement organizational and technical measures to prevent unauthorized access. Your data is protected like our “Fortorganics” Shea Butter—carefully and deliberately.
• Retention: We keep your personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying legal, accounting, or reporting requirements.
  • Specifically: We retain customer records for six (6) months after the purpose is achieved (post-delivery), unless the law requires a longer period .

7. Your Rights (Data Subject Rights)

Under the NDPA 2023, you have the following rights:

1. Right to Access: Ask what data we hold about you.
2. Right to Rectification: Correct your address if we are shipping to the wrong place.
3. Right to Erasure (Right to be Forgotten): Request we delete your data (unless we need it for legal compliance).
4. Right to Withdraw Consent: Stop us from emailing you about “Hair Tinsel” deals.
5. Right to Lodge a Complaint: You may file a grievance with us directly or with the Nigeria Data Protection Commission (NDPC) .

8. Cookies and Digital Footprints

Our website uses cookies to remember your cart items (so you don’t lose your braiding hair). You can disable cookies in your browser, but this may slow down your shopping experience.

9. Children’s Privacy

Our services are directed at adults (specifically, African women aged 18+). We do not knowingly collect data from children under 13 without parental consent.

10. Changes to this Policy

We will update this policy occasionally (e.g., when we launch the Fort Beauty Academy ). The “Last Updated” date at the top will change. Please check back when you place an order.

11. Contact Us (Data Protection Officer)

For questions about this privacy policy or to exercise your rights (e.g., request deletion of your data), please contact our Data Protection Officer (DPO) :

• Email: info@extensionbyfort.com
• Address: 48 Gbenga Alao crescent, off Yetkem road, Ajasa command road, Abuleegba Alagbado, Lagos, Nigeria
• Phone: +2349077867238
• .

To lodge a formal grievance:
You may send a “Standard Notice to Address Grievance” to the above email. If unsatisfied with our response, you may contact the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng.

© 2026 The Fort Brand Limited. All rights reserved.