Privacy Policy

1. Information We Collect

We collect the following categories of data (depending on your relationship with us):

• Identity: name, display name (vendor / rider / customer), business trading name.
• Contact: email, phone number, delivery addresses, billing address.
• Account & Authentication: hashed passwords, verification tokens, session tokens.
• Transaction: orders placed, wallet funding references, payment confirmations (we do not store full card details).
• Operational: inventory listings (vendors), delivery status updates (riders), bulk buying group membership.
• Device & Usage: browser type, IP address, time zone, pages viewed, app install source (iOS / Android), crash or performance logs.
• Location (Riders & Delivery Operations): approximate delivery area, routing confirmations, timestamped delivery events (we do not continuously track precise background location unless explicitly enabled in the rider flow).
• Support & Feedback: messages, complaints, product reviews, vendor ratings.
• Marketing Preferences: email opt‑in status, notification choices.

2. How We Use Your Information

• Account creation, onboarding and authentication.
• Processing orders, wallet funding, refunds and vendor payouts.
• Coordinating fulfilment among vendors, riders and customers.
• Improving product availability, quality assurance and sourcing strategies.
• Providing customer and vendor support.
• Sending service notifications (order confirmation, delivery updates, security alerts).
• Monitoring fraud, misuse or policy violations.
• Aggregating insights (non‑identifiable) for operational optimisation.
• Personalising recommendations (e.g. frequently requested African staples, ready‑to‑eat meal suggestions).

3. Lawful Bases for Processing

We rely on one or more of the following UK GDPR bases:

• Contract: to deliver marketplace, wallet and delivery services.
• Consent: marketing emails, optional cookies.
• Legitimate Interests: platform security, service optimisation, fraud prevention.
• Legal Obligation: tax, accounting and regulatory compliance.

4. Cookies & Tracking

We may use necessary cookies for authentication, performance measurement and optional analytics. You can adjust browser settings to refuse non-essential cookies without affecting core ordering functions.

5. Data Sharing & Disclosure

We share limited personal data with:

• Payment processors (for secure wallet funding and order checkout).
• Vendors (only details required to fulfil an order).
• Delivery partners/riders (drop‑off instructions, recipient name, contact number where required).
• Regulators or law enforcement (when legally compelled).
• Professional advisors (legal, accounting, compliance).
• IT infrastructure providers (hosting, analytics, email delivery).

We do not sell personal data. Any anonymised aggregation excludes identifiable characteristics.

6. International Transfers

Where data is processed outside the UK, we use appropriate safeguards such as UK Addendum SCCs, adequacy regulations or equivalent contractual protections.

7. Data Security

We implement layered security controls including encryption in transit (TLS), hashed passwords, scoped access controls, audit logging and anomaly detection. No method is 100% secure; you share responsibility for maintaining strong, unique credentials.

8. Data Retention

We retain data only as long as necessary for the purposes described or to meet legal/financial obligations. Redundant records are either anonymised or securely deleted.

9. Your Rights

Under UK data protection law you may request: access, rectification, erasure, restriction, portability, objection (including to marketing) and withdrawal of consent (where applicable). To exercise rights, email: support@afromarketsquare.com. You may lodge a complaint with the ICO (Information Commissioner’s Office).

10. Children’s Privacy

Our services are not directed to persons under 16. We do not knowingly collect data from minors. If you believe a child has provided us data, contact us for removal.

11. User Generated Content

Reviews, ratings or feedback you submit may become public or visible to other users (e.g. vendor ratings). Do not include personal or sensitive data in free‑text fields.

12. Marketing Communications

You can opt out of non‑transactional emails at any time via unsubscribe links or account settings. Service emails (order, security, delivery) are mandatory.

13. Automated Decisions

Limited automated logic may flag fraud, unusual activity or low‑risk delivery assignment heuristics. You may request manual review where legally required.

14. Third-Party Services

External links or payment gateways operate under their own policies. Review their terms before providing data.

15. Bulk Buying & Subscription Data

We process group participation details (e.g. membership status, aggregated order volume) to coordinate procurement and discount eligibility. Individual purchase specifics are not disclosed to other buyers.

16. Deliveries & Location Data

Rider operational data (route confirmations, delivery timestamps) is retained for dispute resolution, quality control and logistics optimisation. Continuous passive tracking is not performed without explicit OS/app permission.

17. Business Changes

In case of merger, restructuring or asset transfer, personal data may be transferred under equivalent safeguards.

18. Your Responsibilities

Keep credentials secure, update inaccurate information promptly and avoid sharing accounts. Notify us immediately of suspected compromise.

19. Contact Us

Email: support@afromarketsquare.com
Registered in England & Wales – Company No. 15391467