Effective Date: 14 September 2026
Last Updated: 14 September 2026

This GDPR Compliance page explains how AHEMFI BLISS ENTERPRISE (“AHEMFI BLISS,” “we,” “our,” or “us”) approaches the protection of personal information where the General Data Protection Regulation (GDPR) or UK GDPR applies to particular users, customers, or processing activities connected with https://ahemfibliss.africa/.

AHEMFI BLISS primarily serves customers in Ghana and Nigeria and offers bridal and Ataya wear, wedding gift sets, jewellery, accessories, occasion wear, and related products.

GDPR or UK GDPR does not necessarily apply to every customer or transaction. Where its territorial scope applies, we aim to process personal information in a lawful, fair, transparent, and proportionate manner.

1. Scope of GDPR Compliance

This page applies where AHEMFI BLISS processes personal information in circumstances that fall within the territorial scope of:

  • The EU General Data Protection Regulation
  • The UK GDPR
  • Related applicable European or UK data-protection legislation

For customers in Ghana and Nigeria, local data-protection laws may apply instead of, or alongside, GDPR requirements depending on the circumstances.

2. Applicable Data-Protection Laws

Depending on the customer, location, and processing activity, relevant privacy laws may include:

  • Ghana’s Data Protection Act, 2012 (Act 843)
  • The Nigeria Data Protection Act 2023
  • The EU GDPR, where applicable
  • The UK GDPR, where applicable
  • Other relevant national privacy or e-commerce requirements

We do not claim that all listed laws apply to every transaction.

3. Data Protection Principles

Where GDPR applies, we aim to follow core data-protection principles, including:

Lawfulness, Fairness and Transparency

Personal information should be processed using an appropriate legal basis and in a way users can reasonably understand.

Purpose Limitation

Personal information should be collected for specific, legitimate purposes and not used incompatibly without a valid legal basis.

Data Minimization

We aim to collect only information reasonably necessary for the intended purpose.

Accuracy

We take reasonable steps to keep personal information accurate and allow correction where appropriate.

Storage Limitation

Personal information should not be retained longer than reasonably necessary or legally required.

Integrity and Confidentiality

Appropriate security measures should be used to protect personal information.

Accountability

Where applicable, we aim to maintain appropriate records, policies, and procedures demonstrating responsible data handling.

4. Personal Information We May Process

Depending on how customers use AHEMFIBLISS.AFRICA, we may process:

  • Name
  • Email address
  • Billing details
  • Delivery address
  • Account information
  • Order history
  • Transaction information
  • Customer-support communications
  • Product reviews or user-submitted content
  • Technical and device information
  • Cookie and usage information
  • Marketing preferences

The exact information processed depends on the service used.

5. Lawful Bases for Processing

Where GDPR or UK GDPR applies, processing may rely on one or more lawful bases.

Contract

We may process personal data where necessary to:

  • Process an order
  • Arrange delivery
  • Manage an account
  • Provide customer support
  • Handle returns or refunds

Consent

Consent may be used for:

  • Optional marketing
  • Certain cookies
  • Specific communications
  • Other processing where consent is appropriate

Consent may be withdrawn where applicable.

Legal Obligation

We may process information where necessary to comply with tax, accounting, regulatory, legal, or other mandatory requirements.

Legitimate Interests

We may rely on legitimate interests where reasonably necessary for:

  • Website security
  • Fraud prevention
  • Service improvement
  • Business administration
  • Analytics
  • Customer-support operations

Such interests should not improperly override the individual’s rights and freedoms.

Vital or Public Interests

Where relevant and legally appropriate, processing may rely on vital interests or public-interest grounds.

6. Data Used for Orders and Fulfilment

Customer information may be used to:

  • Confirm orders
  • Verify payments
  • Arrange delivery
  • Provide order updates
  • Handle returns
  • Process refunds
  • Respond to support requests

Where necessary, relevant information may be shared with payment processors, courier providers, logistics providers, or other service providers involved in fulfilment.

7. Payment Data

Payment transactions may be processed through third-party payment service providers.

We do not intentionally store full payment-card numbers, CVV/security codes, banking passwords, PINs, or similar sensitive authentication details unless processing is lawfully required.

Payment providers may operate under their own security and privacy obligations.

8. Cookies and Tracking

AHEMFIBLISS.AFRICA may use cookies and similar technologies for:

  • Essential website functions
  • Shopping-cart functionality
  • Account management
  • Analytics
  • Website performance
  • Marketing, where applicable

Where GDPR or UK GDPR requires consent for non-essential cookies, such cookies should be used only after appropriate consent is obtained.

Users may manage preferences through available cookie controls or browser settings.

9. Data Subject Rights

Where GDPR or UK GDPR applies, eligible individuals may have the right to:

  • Access personal information
  • Correct inaccurate information
  • Request deletion
  • Restrict processing
  • Object to certain processing
  • Request data portability
  • Withdraw consent
  • Object to direct marketing
  • Lodge a complaint with a supervisory authority

These rights may be subject to legal conditions and exemptions.

10. Right of Access

Eligible individuals may request confirmation of whether their personal data is being processed and, where applicable, request access to that information.

We may require reasonable identity verification before fulfilling the request.

11. Right to Rectification

Customers may request correction of inaccurate or incomplete personal information.

This may include account, contact, or delivery information.

Historical transaction records may need to remain unchanged where alteration would conflict with legal, tax, accounting, or fraud-prevention requirements.

12. Right to Erasure

Eligible individuals may request deletion of personal information where the legal requirements are satisfied.

Deletion may not be available where retention is necessary for:

  • Legal obligations
  • Tax or accounting purposes
  • Fraud prevention
  • Legal claims
  • Payment disputes
  • Security investigations
  • Other lawful reasons

Further information is available in our Account & Data Deletion Policy.

13. Right to Restrict Processing

Where applicable, individuals may request restriction of certain processing where:

  • Data accuracy is disputed
  • Processing is challenged as unlawful
  • The information is required for legal claims
  • An objection is being reviewed

Restrictions are subject to applicable legal requirements.

14. Right to Object

Where processing is based on legitimate interests, eligible individuals may object in certain circumstances.

We will consider the request and determine whether compelling lawful grounds require continued processing.

Individuals may object to direct marketing at any time where applicable.

15. Right to Data Portability

Where legally available, individuals may request certain personal information in a structured, commonly used, and machine-readable format.

This right usually applies only to specific data processed by automated means on the basis of consent or contract.

16. Withdrawal of Consent

Where processing is based on consent, individuals may withdraw consent at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

It also does not prevent continued processing where another lawful basis applies.

17. Marketing Communications

Where permitted, we may send promotional communications relating to AHEMFI BLISS products, collections, or offers.

Customers may unsubscribe using the method provided in the communication or by contacting us.

Essential transactional messages, such as order confirmations, delivery updates, refund information, and security notices, may still be sent where necessary.

18. International Data Transfers

Some service providers may process personal information outside Ghana, Nigeria, the European Economic Area, or the United Kingdom.

Where GDPR or UK GDPR applies to such transfers, appropriate safeguards may be used where required, including:

  • Standard Contractual Clauses
  • Adequacy decisions
  • Contractual protections
  • Other recognized lawful mechanisms

The appropriate safeguard will depend on the specific transfer and legal requirements.

19. Third-Party Processors

We may use third-party providers for:

  • Hosting
  • Payment processing
  • Delivery
  • Analytics
  • Email communications
  • Customer support
  • Security
  • Fraud prevention
  • Technical services

Where required, processors handling personal data on our behalf should be subject to appropriate contractual and confidentiality obligations.

20. No Sale of Personal Information

AHEMFI BLISS does not sell or rent customers’ personal information to third parties for their independent commercial use.

Information may be shared only where necessary for legitimate business operations, legal requirements, customer transactions, security, or other lawful purposes.

21. Data Security

We apply reasonable administrative, technical, and organizational measures designed to protect personal information.

Depending on the systems used, measures may include:

  • SSL/TLS encryption
  • Access controls
  • Secure hosting
  • Authentication controls
  • Security updates
  • Monitoring
  • Backups
  • Restricted administrative access

No online system can be guaranteed to be completely secure.

22. Data Breaches

Where a personal-data breach occurs, we may:

  • Investigate the incident
  • Contain the breach
  • Secure affected systems
  • Assess risks
  • Take corrective action
  • Notify affected individuals where required
  • Notify regulators where required

Where GDPR or UK GDPR applies, notification obligations will be assessed according to the relevant legal requirements.

23. Data Retention

Personal information is retained only for as long as reasonably necessary for the relevant purpose or legal obligation.

Retention may depend on:

  • Account status
  • Orders
  • Transactions
  • Refunds
  • Customer support
  • Tax obligations
  • Fraud prevention
  • Legal claims
  • Regulatory requirements

Information may be deleted, anonymized, or otherwise restricted when no longer required.

24. Automated Decision-Making

Certain systems may use automated processing for:

  • Fraud detection
  • Security monitoring
  • Product recommendations
  • Analytics
  • Marketing personalization

We do not claim to make legally significant decisions solely through automated processing unless such functionality is actually used.

Where legally significant automated decision-making is used and GDPR applies, appropriate disclosures and rights will be provided.

25. Children’s Data

We do not intentionally seek to collect personal information directly from children who cannot lawfully provide their own consent.

Where parental or guardian authorization is required under applicable law, appropriate authorization should be obtained.

If a parent or guardian believes a child’s data has been provided improperly, they may contact us.

26. Complaints

Where GDPR or UK GDPR applies, eligible individuals may have the right to lodge a complaint with the relevant supervisory authority.

Before doing so, customers are encouraged to contact AHEMFI BLISS so we can review and attempt to resolve the concern.

Customers in Ghana or Nigeria may also have complaint rights under their applicable national data-protection laws.

27. Relationship With Ghana and Nigeria Privacy Laws

For customers in Ghana, personal-data processing may be subject to the Data Protection Act, 2012 (Act 843).

For customers in Nigeria, processing may be subject to the Nigeria Data Protection Act 2023.

GDPR or UK GDPR requirements may apply in addition to these laws only where their territorial scope is satisfied.

Nothing in this page is intended to replace mandatory rights granted under applicable Ghanaian or Nigerian law.

28. Changes to This GDPR Compliance Page

AHEMFI BLISS may update this page when:

  • Privacy laws change
  • Business operations change
  • Website functionality changes
  • Data-processing activities change
  • New service providers are introduced

The latest version will be published on AHEMFIBLISS.AFRICA with an updated Last Updated date.

29. Contact Us

For GDPR-related questions, privacy requests, data-rights requests, or general data-protection enquiries, please contact:

AHEMFI BLISS ENTERPRISE

Website: https://ahemfibliss.africa/
Information Email: info@ahemfibliss.africa
Support Email: support@ahemfibliss.africa

Ghana Address

GA-404-5291, House Number 154, Velvet Street, Near Banku Junction, Lartebiokorshie, Accra, Ablekuma Central, Greater Accra, Ghana

Nigeria Address

1, New Extension, Piwoyi, Near LFC, Lugbe, FCT, Nigeria