Privacy Policy
Effective Date: October 25, 2026 | Last Updated: October 25, 2026
1. Our Commitment to Mothers and Families
At Milky Mommas, we understand that maternal health, postpartum recovery, and breastfeeding journeys encompass some of your most sensitive personal information. We treat your personal data with the highest degree of confidentiality, security, and care. This Privacy Policy governs our waitlist, community discussions, and membership services across Milky Mommas, compliant with the Nigeria Data Protection Act (NDPA) 2023, the General Data Protection Regulation (EU/UK GDPR), and global privacy benchmarks.
2. Information We Collect
We strictly adhere to data minimization principles. We only collect details that directly enable us to support your parenting journey:
- Waitlist & Account Details: Full name, verified email address, and WhatsApp/phone number to notify you of launch releases, webinars, and community milestones.
- Optional Milestone & Due Date Information: Expected delivery date or child age range submitted voluntarily to personalize guidance schedules and feeding stage articles.
- Billing & Transaction Logs: Subscription status, transaction reference numbers, and payment gateway receipts (Stripe, Paystack, Flutterwave). Sensitive debit/credit card numbers are processed directly by certified PCI-DSS Level 1 payment processors and are never stored on Milky Mommas servers.
- Community & Blog Interactions: Reactions, community forum comments, and referral program milestones.
- Technical Device Data: Screen width (for desktop/mobile template switching), IP address, session identifiers, and push notification tokens (OneSignal, when explicitly enabled).
3. Special Protections for Health & Infant Disclosures
Milky Mommas treats voluntary disclosures regarding lactation challenges, feeding schedules, or perinatal recovery under the special safeguards mandated by GDPR Article 9 and Section 34 of the NDPA 2023. We will never sell, rent, commercialize, or share your maternal or infant disclosures with advertisers, pharmaceutical brokers, or data aggregators.
4. Data Retention & Security Architecture
Your records are protected with industry-standard cryptographic transport encryption (TLS 1.3), scrypt/bcrypt password hashing, parameter-bound database querying, and strict access controls. Waitlist contacts who choose not to activate membership upon platform general availability may request immediate account deletion or remain in our milestone update register until unsubscription.
5. Your Statutory Rights (NDPA & GDPR)
As a data subject, you hold statutory rights enforceable at any time without fees:
Right of Access & Portability
Export your complete personal data and referral milestones in structured JSON format directly from your Settings dashboard.
Right to Erasure
Request the permanent deletion of your account, waitlist entries, and associated logs.
Right to Rectification
Correct any outdated contact details or infant milestone entries at any time.
Right to Withdraw Consent
Unsubscribe from marketing emails or push notifications instantly via one-click unsubscribe links.
6. Data Protection Officer & Inquiries
For inquiries regarding personal data processing or to exercise statutory privacy rights, contact our Data Protection Office:
Milky Mommas Data Protection Office
Email: privacy@milkymommas.com | dpo@milkymommas.com
You also retain the right to lodge inquiries with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng or your relevant national supervisory authority.