The Modern Roots
Effective Date: 18 September 2026

Last Updated: 18 September 2026

This Account & Data Deletion Policy explains how customers of The Modern Roots may request account closure, deletion of personal information, correction of account details, or withdrawal of consent where applicable.

This policy should be read together with our Privacy Policy and Data Usage & Processing Policy.

1. Account Closure

If you have created an account on The Modern Roots website, you may request that the account be closed when you no longer wish to use it. A request may be submitted by contacting us using the details provided at the end of this policy. Before closing an account, we may request reasonable information to verify that the request is being made by the account owner.

Account closure may prevent access to:

  • Previous order information;
  • Saved addresses;
  • Account preferences;
  • Saved shopping information; and
  • Other account-based features.

2. Requesting Deletion of Personal Data

You may request deletion of personal information that we hold about you where applicable law gives you that right.

Deletion may be appropriate where:

  • The information is no longer required for the purpose for which it was collected;
  • You withdraw consent where consent was the legal basis for processing;
  • You validly object to certain processing;
  • Information was processed unlawfully; or
  • Deletion is otherwise required under applicable law.

The Nigeria Data Protection Commission recognises a right to be forgotten/right to erasure, subject to lawful exceptions.

3. How to Submit a Deletion Request

To request account or personal-data deletion, please contact us by email and provide sufficient information to identify the relevant account or records.

Your request should normally include:

  • Your full name;
  • Email address associated with the account;
  • Relevant order number where appropriate;
  • A clear statement that you want the account or personal data deleted; and
  • Details of any specific information the request relates to.

Please do not send passwords, CVV numbers, OTPs, payment PINs or complete payment card information with your request.

4. Identity Verification

To protect customer information, we may need to verify your identity before acting on a deletion request. Verification may involve asking you to confirm information already associated with your account or order. We will only request information reasonably necessary to confirm identity and prevent unauthorised deletion of another person’s data.

5. Information That May Be Deleted

Where appropriate, deletion may include information such as:

  • Customer account profile information;
  • Saved preferences;
  • Saved addresses;
  • Marketing preferences;
  • Certain customer-service information;
  • Website profile information; and
  • Other personal information that is no longer required.

Where practical, information may be permanently deleted, anonymised or otherwise made no longer identifiable.

6. Information We May Need to Retain

A deletion request does not always require immediate deletion of every record.

We may retain certain information where reasonably necessary for:

  • Tax and accounting obligations;
  • Order and transaction records;
  • Consumer protection requirements;
  • Payment disputes or chargebacks;
  • Fraud prevention;
  • Legal claims;
  • Regulatory requirements;
  • Enforcement of agreements; or
  • Compliance with another legal obligation.

For example, some order and payment records may need to remain in our records even after a customer account has been closed.

The NDPC’s guidance recognises that erasure rights may be limited where information remains necessary for contractual or legal purposes.

7. Order History and Financial Records

Closing an account does not automatically require us to erase all information connected with previous purchases.

We may need to retain records such as:

  • Order number;
  • Product purchased;
  • Transaction amount;
  • Payment status;
  • Refund information;
  • Delivery records; and
  • Relevant customer communications.

Such records will only be retained for as long as reasonably required for legitimate legal, accounting, fraud-prevention or dispute-resolution purposes.

8. Marketing Data

If you no longer wish to receive marketing communications, you may request removal from our marketing lists without closing your customer account.

You may do this by:

  • Using an unsubscribe option where available; or
  • Contacting us directly.

Withdrawal from marketing does not prevent us from sending necessary communications concerning:

  • Existing orders;
  • Refunds;
  • Returns;
  • Delivery;
  • Account security; or
  • Customer-service requests.

9. Cookies and Browser Data

Deleting a customer account does not automatically remove cookies already stored on your browser or device.

You may need to remove those cookies using:

  • Your browser settings; or
  • Any cookie preference tool available on our website.

Further information is available in our Cookie Policy.

10. Data Held by Third Parties

Some personal information may have been shared with independent service providers where necessary to complete a transaction.

These may include:

  • Payment processors;
  • Banks;
  • Courier companies;
  • Hosting providers; and
  • Other technology providers.

Where these organisations independently control certain information, their own legal obligations and retention policies may apply.

The Modern Roots cannot automatically delete information that an independent third party is legally required to retain.

11. Payment Information

Where payment transactions are handled directly by authorised payment providers, sensitive payment credentials are processed by those providers rather than being retained by The Modern Roots. We do not intend to store complete debit or credit card numbers, CVV codes, banking passwords, OTPs or payment PINs on our servers where the payment provider processes those credentials directly.

Limited transaction information may still need to be retained for financial, refund, fraud-prevention and legal purposes.

12. Backup and Archived Information

Personal information may temporarily remain in secure backups after deletion from active systems.

Backup copies may be retained for:

  • Security;
  • Disaster recovery;
  • System integrity; or
  • Legal requirements.

Where appropriate, deleted information remaining in backups will not normally be restored for ordinary business use and will be removed or overwritten according to applicable backup retention procedures.

13. Request Processing

We will review deletion and account-closure requests within a reasonable period and in accordance with applicable data-protection requirements.

The NDPC’s own data-subject request process recognises rights including erasure, rectification, restriction and withdrawal of consent, and notes a 30-day response framework for its own requests.

Where additional information is reasonably necessary to verify identity or understand a request, we may contact you before completing it.

14. When a Request May Be Refused or Limited

A deletion request may be refused or partially limited where applicable law permits continued processing.

Examples may include situations where information is required to:

  • Comply with a legal obligation;
  • Establish, exercise or defend legal claims;
  • Complete an existing transaction;
  • Resolve a dispute;
  • Detect or prevent fraud; or
  • Protect the rights of another individual.

If we cannot fully comply with a request, we may explain the reason where required by law.

15. Correction Instead of Deletion

If information is inaccurate but does not need to be deleted, you may request correction instead.

You may ask us to update information such as:

  • Name;
  • Contact details;
  • Delivery address;
  • Account information; or
  • Other inaccurate personal data.

This helps us maintain accurate customer records.

16. Changes to This Policy

We may update this Account & Data Deletion Policy to reflect changes in:

  • Our website;
  • Account functionality;
  • Internal data-handling practices;
  • Service providers; or
  • Applicable legal requirements.

The latest version will be published on our website with an updated effective date where appropriate.

17. Contact Us

To request account closure, personal-data deletion, correction of information or assistance with a privacy request, please contact:
Website: https://themodernroots.com
Email: support@themodernroots.com
Address: HOUSE 410A, 37 ROAD, PHASE 3, KUBWA, ABUJA, FCT, NIGERIA