Cookie Policy (EU)

How Bojamiley uses cookies and similar tracking technologies, and what your rights are under EU and UK privacy law.

1. About Bojamiley

Bojamiley is a luxury Nigerian fashion house specialising in bespoke bridal wear, cultural couture, and ready-to-wear collections, with international shipping to clients across the United States, the United Kingdom, the European Union, Canada, and beyond.

For the purposes of EU GDPR and the UK Data Protection Act 2018, Bojamiley is the data controller for personal data collected through this website.

2. What Are Cookies

Cookies are small text files that a website places on your device (computer, tablet, or mobile phone) when you visit. They allow the website to recognise your device, remember your preferences, and improve your experience on subsequent visits.

This Cookie Policy also covers similar technologies that perform comparable functions, including:

• Web beacons and pixels (small graphic images embedded in webpages or emails that track user behaviour)
• Local storage and session storage (browser-based storage used to retain information across visits)
• Tracking scripts (such as Google Tag Manager, Facebook Pixel, and similar)
• Server logs (basic technical information automatically recorded when you access the site)

For simplicity, this policy uses the term cookies to refer to all of these technologies.

Types of Cookies by Origin

• First-party cookies are set directly by Bojamiley.com.
• Third-party cookies are set by external services we use (such as Google, Meta, and payment processors).

Types of Cookies by Duration

• Session cookies are temporary and are deleted when you close your browser.
• Persistent cookies remain on your device for a set period, ranging from minutes to several years, depending on the cookie’s purpose.

3. Why We Use Cookies

We use cookies for the following primary purposes:

• To make the website function correctly (for example, keeping items in your shopping cart, remembering your login state, and processing checkout)
• To remember your preferences (such as language, currency, and items in your wishlist)
• To understand how visitors use the site so we can improve it
• To deliver and measure the effectiveness of advertising on platforms like Meta (Facebook and Instagram) and Google
• To detect and prevent fraud, security incidents, and abuse
• To comply with our legal obligations

4. Categories of Cookies We Use

We classify the cookies we use into four categories. Strictly necessary cookies are always active because the website cannot function without them. All other categories require your consent before they are activated.

5. Specific Cookies Used on Bojamiley.com

The table below lists the specific cookies and tracking technologies currently active on bojamiley.com, organised by category. The exact cookies present at any given time may vary based on third-party service updates and the features active on your visit.

Strictly Necessary Cookies

Cookie / Token	Provider	Purpose	Duration
wordpress_logged_in_*	Bojamiley.com	Maintains your login state when you sign in to your account	Session or up to 14 days
wp-settings-*	Bojamiley.com	Stores your administrative interface preferences	1 year
woocommerce_cart_hash	Bojamiley.com	Tracks contents of your shopping cart so items remain when you navigate	Session
woocommerce_items_in_cart	Bojamiley.com	Indicates whether your cart contains items	Session
wp_woocommerce_session_*	Bojamiley.com	Holds your unique session token to enable checkout	2 days
tk_or, tk_lr	Bojamiley.com	Records that you have arrived on the site (referral attribution)	5 years (where applicable)
cookie_consent (or similar)	Bojamiley.com	Records your cookie consent preferences for this site	1 year

Functional and Preferences Cookies

Cookie / Token	Provider	Purpose	Duration
flatsome_wishlist	Flatsome theme	Stores items you have added to your wishlist	1 year
recently_viewed_products	Bojamiley.com	Remembers products you recently looked at	30 days
currency, language (where applicable)	Bojamiley.com	Remembers your selected currency and language preferences	1 year

Analytics and Performance Cookies

Cookie / Token	Provider	Purpose	Duration
_ga	Google Analytics	Distinguishes unique users by assigning a randomly generated identifier	2 years
_ga_*	Google Analytics 4	Stores session and campaign attribution data	2 years
_gid	Google Analytics	Distinguishes unique users for 24-hour windows	24 hours
_gat	Google Analytics	Throttles request rate to manage data collection volume	1 minute
Google Tag Manager (GTM-WDDSK4HH)	Google	Container script that loads other tracking and analytics scripts	Session

Marketing and Advertising Cookies

Cookie / Token	Provider	Purpose	Duration
_fbp	Meta (Facebook Pixel)	Tracks visits across websites to deliver targeted advertising on Facebook and Instagram	3 months
fr	Meta (Facebook)	Used for advertising delivery and measurement on Meta platforms	3 months
Facebook Pixel events	Meta	Records actions taken on the site (page views, add-to-cart, purchase) for advertising attribution	Session and persistent
PixelYourSite tracking	PixelYourSite plugin	Manages Meta and other advertising pixel events for WooCommerce	Session and persistent
_gcl_au	Google Ads	Used by Google AdSense for experimenting with advertisement efficiency	3 months

6. Third-Party Services and Cookies

Some cookies on our website are set by third-party services we integrate with. These third parties have their own privacy and cookie policies, which we encourage you to read.

Meta (Facebook and Instagram)

We use the Facebook Pixel to measure the effectiveness of our advertising on Meta platforms, to retarget visitors with relevant advertising, and to find audiences similar to our existing clients. Meta is a joint controller for the data collected through the Pixel.

Privacy policy: facebook.com/privacy/policy

Google (Analytics, Tag Manager, Ads)

We use Google Analytics to understand how visitors use our site, Google Tag Manager to manage tracking scripts efficiently, and Google Ads for advertising and remarketing.

Privacy policy: policies.google.com/privacy

Payment Processors

When you make a purchase, our payment processors (which may include Stripe, PayPal, Visa, Mastercard, American Express, Apple Pay, Alipay, and bank transfer providers) set their own cookies to process payments securely. These cookies are strictly necessary for the transaction.

Social Media Embeds

Where we embed Instagram posts, YouTube videos, or other social media content, those platforms may set their own cookies when the content loads.

WordPress and WooCommerce

The site is built on WordPress with WooCommerce for e-commerce. Both platforms set strictly necessary cookies to enable core functionality.

7. Legal Basis for Processing

Under EU GDPR and UK GDPR, we rely on the following legal bases for processing personal data through cookies:

• Consent (Article 6(1)(a)): for all non-essential cookies (functional, analytics, and marketing). You provide consent through the cookie banner that appears on your first visit, and you can withdraw it at any time through our cookie preferences tool.
• Legitimate interest (Article 6(1)(f)): for strictly necessary cookies required to deliver the service you have requested (such as adding items to your cart and completing a purchase).
• Contract performance (Article 6(1)(b)): for cookies required to fulfil orders, process payments, and deliver products and services you have purchased.
• Legal obligation (Article 6(1)(c)): for cookies necessary to comply with applicable law (such as fraud prevention and tax record-keeping).

8. Your Rights Under GDPR

If you are located in the European Union, the European Economic Area, or the United Kingdom, you have the following rights regarding your personal data:

• Right to be informed about how your data is collected and used (this policy is part of how we fulfil that right)
• Right of access to the personal data we hold about you
• Right to rectification if your data is inaccurate or incomplete
• Right to erasure (the “right to be forgotten”) in certain circumstances
• Right to restrict processing in certain circumstances
• Right to data portability, allowing you to receive your data in a structured, commonly used format
• Right to object to processing, including for direct marketing purposes
• Right to withdraw consent at any time, where processing is based on consent
• Right not to be subject to automated decision-making, including profiling, that produces legal or similarly significant effects
• Right to lodge a complaint with a data protection authority in your country of residence

To exercise any of these rights, please contact us. We will respond to your request within one month, in line with GDPR requirements.

9. How to Manage Cookies

Cookie Consent Banner

When you first visit bojamiley.com from an EU, EEA, or UK location, a cookie consent banner appears. You can:

• Accept all cookies to allow all categories
• Reject non-essential cookies to allow only strictly necessary cookies
• Customise your preferences to allow specific categories of your choice

You can revisit your cookie preferences at any time through the link below.

Browser Controls

You can also manage cookies directly through your web browser. Most browsers let you view, delete, and block cookies. The exact steps depend on your browser:

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge
• Opera

Please note: blocking strictly necessary cookies will prevent core features of the site from working, including the ability to place orders.

Opt Out of Specific Tracking Services

• Google Analytics: install the Google Analytics opt-out browser add-on
• Google Ads personalisation: visit adssettings.google.com
• Meta (Facebook and Instagram) advertising: visit facebook.com/settings/?tab=ads
• EU-wide advertising opt-out: visit youronlinechoices.com
• UK-wide advertising opt-out: visit youronlinechoices.com/uk

10. International Data Transfers

Bojamiley is based in Lagos, Nigeria. When you use our website from the European Union, the European Economic Area, or the United Kingdom, your personal data may be transferred to and processed in Nigeria, the United States (where some of our service providers are based), and other countries outside the EU and UK.

For these international transfers, we rely on the following safeguards in line with GDPR Articles 44 to 49:

• Standard Contractual Clauses approved by the European Commission, where applicable
• Service providers that have certified compliance with recognised international privacy frameworks (such as the EU-US Data Privacy Framework)
• Where strictly necessary, your explicit consent to the transfer

If you would like more information about the safeguards we apply to international transfers, please contact us using the details at the end of this policy.

11. Data Retention

We retain personal data collected through cookies only for as long as necessary for the purposes described in this policy, or as required by law. Specific retention periods vary by cookie and are noted in the tables in section 5.

Additional retention rules apply to non-cookie data:

• Order and transaction records: retained for at least seven years to comply with tax and accounting obligations
• Customer accounts: retained for as long as your account is active. You may request deletion at any time.
• Marketing data: retained until you withdraw consent or for a maximum of 24 months after your last interaction
• Analytics data: typically retained for 14 to 26 months depending on the analytics platform settings

12. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use, changes in applicable law, or improvements to our practices. When we make material changes, we will:

• Update the “Last Updated” date at the top of this policy
• Where appropriate, notify you through the website or by email if you have provided one
• For significant changes affecting non-essential cookies, request your renewed consent

We encourage you to review this policy periodically to stay informed about how we use cookies.

13. Contact Us

If you have any questions about this Cookie Policy, want to exercise any of your rights under GDPR, or wish to make a complaint, please contact us:

Right to Lodge a Complaint with a Supervisory Authority

If you are located in the European Union or the European Economic Area and you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the data protection authority in the country where you live, work, or where the alleged infringement took place. A list of EU data protection authorities is available at edpb.europa.eu/about-edpb/about-edpb/members_en.

If you are located in the United Kingdom, the supervisory authority is the Information Commissioner’s Office (ICO), which can be contacted at ico.org.uk.

If you are located in Ireland, the supervisory authority is the Data Protection Commission, which can be contacted at dataprotection.ie.