Afrocart – Privacy Policy
Last Updated: 08 May 2026
1. Introduction
Afrocart (“Afrocart”, “we”, “our”, or “us”) is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you use our online marketplace at afrocart-zw.com or any Afrocart mobile application (the “Service”).
This policy complies with:
- UK General Data Protection Regulation (UK GDPR)
- UK Data Protection Act 2018
- Zimbabwe Cyber and Data Protection Act (2021)
Afrocart is the data controller responsible for your personal data.
2. Data Controller Information
Company Name: Afrocart
Email: contactus@afrocart-zw.com
Phone: +44 7925 120 764
Address: Kadoma, Zimbabwe
3. Information We Collect
3.1 Personal Information You Provide
Account Information:
- Full name
- Email address
- Phone number
Seller Business Information:
- Business name
- Business type
- Province, city/town
- WhatsApp number
- Shop address
- Bank or payment details
Transaction Information:
- Purchase history
- Delivery addresses
- Payment details (processed securely via Stripe; we do not store full card numbers)
Communication Data:
- Messages exchanged with sellers or buyers
- Reviews and ratings
- Support requests and correspondence
3.2 Information Collected Automatically
Usage Data:
- Pages visited
- Time spent on pages
- Products viewed
Device Information:
- IP address
- Browser type
- Device type
- Operating system
Location Data:
- Approximate location based on IP address
- We do not collect precise GPS location
Cookies & Tracking Technologies:
Used for analytics, security, and improving user experience.
See our Cookie Policy for details.
4. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract Performance: To operate the marketplace, process orders, and manage accounts
- Legitimate Interests: To improve the platform, prevent fraud, and ensure security
- Legal Obligation: To comply with tax, accounting, and regulatory requirements
- Consent: For marketing communications and optional features
5. How We Use Your Information
We use your information to:
- Create and manage your account
- Process and fulfil orders
- Facilitate communication between buyers and sellers
- Process payments securely via Stripe
- Send order confirmations, delivery updates, and notifications
- Provide customer support
- Prevent fraud and ensure platform safety
- Improve and personalise the Service
- Send marketing communications (with your consent)
- Comply with legal obligations
- Generate anonymised analytics and insights
6. How We Share Your Information
6.1 With Other Users
To complete transactions:
- Buyers’ names, contact details, and delivery addresses are shared with sellers
- Sellers’ business names, locations, and contact details are visible to buyers
6.2 With Service Providers
We share data with trusted third parties who help us operate the Service:
- Stripe – secure payment processing
- Ionos – hosting and data storage
- Email delivery providers
- Analytics and security tools
These providers are contractually required to protect your data.
6.3 Legal Requirements
We may disclose your information if required by:
- Law or regulation
- Court order
- Government authority
- To protect our rights, users, or property
6.4 Business Transfers
If Afrocart undergoes a merger, acquisition, or asset sale, your data may be transferred as part of that transaction.
7. International Data Transfers
Your data may be stored or processed outside the UK or EEA, including Zimbabwe.
When transferring data internationally, we ensure:
- Standard Contractual Clauses (SCCs) where required
- Service providers meet UK GDPR‑equivalent standards
- Strong technical and organisational security measures
8. Data Retention
We retain personal data only as long as necessary:
- Account Data: While your account is active + 7 years
- Transaction Records: 7 years (legal and financial compliance)
- Marketing Data: Until you withdraw consent
- Analytics Data: May be retained indefinitely in anonymised form
9. Your Data Protection Rights
Under UK GDPR and Zimbabwean law, you have the right to:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”)
Request deletion of your data (subject to legal obligations).
Right to Restrict Processing
Ask us to limit how your data is used.
Right to Data Portability
Receive your data in a machine‑readable format.
Right to Object
Object to processing based on legitimate interests or for marketing.
Automated Decision-Making Rights
We do not use automated decision-making that produces legal or significant effects.
To exercise your rights, contact: contactus@afrocart-zw.com
We respond within one month.
10. Data Security
We implement strong security measures, including:
- SSL/TLS encryption
- PCI‑DSS compliant payment processing (Stripe)
- Regular security audits
- Access controls and authentication
- Staff training on data protection
- Incident response procedures
No system is 100% secure, but we take all reasonable steps to protect your data.
11. Children’s Privacy
Afrocart is not intended for individuals under 18 years old.
We do not knowingly collect data from children.
If you believe a child has provided data, contact us immediately.
12. Marketing Communications
With your consent, we may send marketing emails about products, offers, and updates.
You can opt out by:
- Clicking “unsubscribe” in any marketing email
- Updating your account preferences
- Contacting us at contactus@afrocart-zw.com
Transactional emails (order updates, receipts, account alerts) cannot be opted out of.
13. Cookies and Tracking Technologies
We use cookies to:
- Improve user experience
- Analyse platform performance
- Personalise content
- Enhance security
See our Cookie Policy for full details.
14. Third‑Party Links
Our Service may contain links to third‑party websites.
We are not responsible for their privacy practices.
We encourage you to review their privacy policies.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Changes will be posted on this page with an updated “Last Updated” date.
Continued use of the Service means you accept the updated policy.
16. Complaints
If you have concerns about how we handle your data, you may contact:
UK Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
You may also contact Zimbabwe’s Data Protection Authority under the Cyber and Data Protection Act.
17. Contact Us
For questions about this Privacy Policy or your data rights:
Email: contactus@afrocart-zw.com
Phone: +44 7925 120 764
Address: Kadoma, Zimbabwe