Privacy policy

1. Introduction

Afrocart ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online marketplace platform at afrocart-zw.com (the "Service").

This policy is compliant with the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). We are the data controller responsible for your personal data.

2. Data Controller Information

Company Name: Afrocart
Contact Email: contactus@afrocart-zw.com
Contact Phone: +44 7925 120 764
Address: Harare, Zimbabwe

3. What Information We Collect

3.1 Personal Information You Provide

  • Account Information: Full name, email address, phone number
  • Business Information (Sellers): Business name, business type, province, city/town, WhatsApp number, shop address, bank/payment details
  • Transaction Information: Purchase history, payment information (processed securely via Stripe), delivery addresses
  • Communication Data: Messages, reviews, and correspondence with us or other users

3.2 Information Collected Automatically

  • Usage Data: Pages visited, time spent on pages, products viewed
  • Device Information: IP address, browser type, device type, operating system
  • Location Data: General location based on IP address (we do not collect precise GPS location)
  • Cookies and Similar Technologies: See our Cookie Policy for more details

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract Performance: To provide our marketplace services, process transactions, and fulfill orders
  • Legitimate Interests: To improve our services, prevent fraud, and ensure platform security
  • Legal Obligation: To comply with tax, accounting, and legal requirements
  • Consent: For marketing communications (where required) and optional features

5. How We Use Your Information

  • Process and fulfill your orders and transactions
  • Communicate with you about orders, account updates, and customer support
  • Enable communication between buyers and sellers
  • Process payments securely through our payment processor (Stripe)
  • Send order confirmations, delivery updates, and notifications
  • Prevent fraud, abuse, and ensure platform security
  • Improve our services and develop new features
  • Send marketing communications (only with your consent, and you can opt-out anytime)
  • Comply with legal obligations and resolve disputes
  • Generate anonymized analytics and statistics

6. How We Share Your Information

6.1 With Other Users

When you make a purchase, we share necessary information (name, contact details, delivery address) with the seller to fulfill your order. When you sell products, buyers can see your business name, location, and contact information.

6.2 With Service Providers

  • Payment Processing: Stripe (for secure payment processing)
  • Hosting: Base44 platform (for application hosting and data storage)
  • Email Services: For sending transactional and notification emails
  • Analytics: To understand how our service is used and improve it

6.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights, safety, or property.

6.4 Business Transfers

If Afrocart is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

7. International Data Transfers

Your personal data may be stored and processed in countries outside the UK and EEA, including Zimbabwe where our business operations are based. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the UK Information Commissioner's Office
  • Ensuring service providers comply with UK GDPR-equivalent standards
  • Adequate security measures to protect your data

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

  • Account Data: Retained while your account is active and for 7 years after account closure (for legal and tax purposes)
  • Transaction Records: Retained for 7 years to comply with financial regulations
  • Marketing Data: Retained until you withdraw consent or request deletion
  • Analytics Data: Anonymized and aggregated data may be retained indefinitely

9. Your Data Protection Rights

Under UK GDPR, you have the following rights:

Right to Access

Request a copy of the personal data we hold about you

Right to Rectification

Request correction of inaccurate or incomplete data

Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data (subject to legal obligations)

Right to Restrict Processing

Request that we limit how we use your data

Right to Data Portability

Request a copy of your data in a machine-readable format

Right to Object

Object to processing based on legitimate interests or for marketing purposes

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that significantly affects you

To exercise any of these rights, please contact us at contactus@afrocart-zw.com. We will respond to your request within one month.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit using SSL/TLS
  • Secure payment processing through PCI-DSS compliant providers (Stripe)
  • Regular security assessments and updates
  • Access controls and authentication measures
  • Employee training on data protection
  • Incident response procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal data from children under 18. If you believe we have collected data from a child, please contact us immediately.

12. Marketing Communications

With your consent, we may send you marketing emails about products, offers, and updates. You can opt out at any time by:

  • Clicking the "unsubscribe" link in any marketing email
  • Updating your communication preferences in your account settings
  • Contacting us at contactus@afrocart-zw.com

Note: You will still receive transactional emails (order confirmations, delivery updates, account notifications) as these are essential to the service.

13. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience, analyze usage, and personalize content. For detailed information, please see our Cookie Policy.

14. Third-Party Links

Our Service may contain links to third-party websites (e.g., social media, payment processors). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

16. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113

17. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: contactus@afrocart-zw.com
Phone: +44 7925 120 764
Address: Harare, Zimbabwe