WeShopAfrica respects your privacy and is committed to protecting your personal data.

This Privacy and Cookie Policy explains how WeShopAfrica collects, uses, stores, shares, transfers, protects and deletes personal data when you:

• visit the WeShopAfrica website;
• use the WeShopAfrica mobile application;
• create a Buyer or Seller Account;
• browse, search for or save Products;
• place or fulfil an Order;
• submit or respond to a Request for Quotation;
• make or receive a payment;
• use payment-protection or escrow services;
• arrange inspection, delivery or logistics services;
• submit a return, refund, claim or complaint;
• communicate with another User;
• contact customer support;
• participate in promotions, surveys or live-commerce activities;
• use subscriptions, bookings, donations or other WeShopAfrica services;
• otherwise interact with WeShopAfrica.

This Policy also explains your privacy rights and how you may exercise them.

To request a copy of your data or ask us to erase your account, go to Privacy & Data in your account, or email support@weshopafrica.com.

WeShopAfrica is an African e-commerce and digital marketplace connecting Buyers with African Sellers, manufacturers, wholesalers, retailers, artisans, factories, service providers and other approved merchants.

The organization responsible for the personal data described in this Policy is:

WeShopAfrica Ltd
Old Ashongman, Accra, Ghana
GhanaPost GPS: GE-109-2944
Website: www.weshopafrica.com
General Email: info@weshopafrica.com
Support Email: support@weshopafrica.com
Privacy Email: [Insert dedicated privacy email]

In this Policy, “WeShopAfrica,” “we,” “us” and “our” refer to WeShopAfrica Ltd and, where appropriate, its affiliates.

WeShopAfrica ordinarily acts as the data controller for personal data processed to operate and administer the Platform.

In limited circumstances, WeShopAfrica may process data on behalf of another organization or jointly with an approved provider. Where that occurs, the applicable notice or agreement may provide additional information.

This Policy applies to personal data processed through:

• the public website;
• Buyer accounts;
• Seller accounts and Seller portals;
• mobile applications;
• administrative systems;
• marketplace operations systems;
• payment and settlement systems;
• support and complaint systems;
• inspection systems;
• logistics and delivery systems;
• marketing and analytics systems;
• approved APIs and integrations;
• authorized offline operational processes.

This Policy does not govern an independent third party’s processing where that party acts as a separate controller under its own privacy policy.

This Policy should be read together with:

• the WeShopAfrica Terms and Conditions;
• the Seller Policy;
• the Cookie Settings interface;
• the Returns and Refund Policy;
• the Inspection Policy;
• the Logistics and Delivery Policy;
• any promotion, subscription, booking or service-specific notice;
• any privacy notice presented when particular information is collected.

Where a specific notice provides additional information about a particular processing activity, both documents shall apply.

For this Policy:

• “Personal Data” means information relating to an identified or identifiable individual.
• “Sensitive Personal Data” means personal data requiring enhanced protection under applicable law, which may include information concerning health, biometric identifiers, race or ethnic origin, religion, political opinions, trade-union membership, sexual life or alleged criminal conduct.
• “Processing” includes collecting, recording, organizing, storing, using, sharing, transferring, analyzing, restricting, deleting or otherwise handling personal data.
• “Buyer” means a person or authorized business representative purchasing or seeking to purchase through WeShopAfrica.
• “Seller” means a merchant, manufacturer, supplier, wholesaler, retailer, artisan, service provider or other person approved to sell through WeShopAfrica.
• “User” means any individual accessing or using the Platform.
• “Platform” means WeShopAfrica’s websites, applications, portals, APIs, marketplace tools and related services.
• “Service Provider” means a third party processing information to provide services to or on behalf of WeShopAfrica.
• “Cookie” means a small text file or similar technology placed on a browser or device.

WeShopAfrica shall seek to process personal data according to the following principles:

• accountability;
• lawfulness, fairness and transparency;
• collection for specific and legitimate purposes;
• compatibility of further processing;
• data minimization;
• accuracy;
• limited retention;
• integrity and confidentiality;
• respect for data-subject rights.

WeShopAfrica shall not intentionally collect more personal data than is reasonably required for the relevant purpose.

The personal data collected depends on:

• whether you are a Buyer, Seller, visitor or business representative;
• the services you use;
• your country;
• the Products involved;
• the payment method;
• the verification requirements;
• the nature of a claim, inspection or support request.

We may collect the categories described below.

Identity data may include:

• full name;
• username;
• title;
• date of birth;
• age or age range;
• gender where voluntarily provided or operationally required;
• nationality;
• profile photograph;
• signature;
• government-issued identification details;
• identification-document images;
• customer or Seller reference number;
• business role;
• authorized-representative status.

We collect identity data to create accounts, verify Users, prevent fraud, process transactions and satisfy legal requirements.

Contact data may include:

• email address;
• telephone number;
• billing address;
• residential address;
• business address;
• delivery address;
• pickup address;
• GhanaPost GPS or equivalent location code;
• social-media contact where voluntarily provided;
• preferred communication channel;
• emergency or alternative contact where required.

Account and profile data may include:

• account identifier;
• username;
• encrypted password;
• account type;
• registration date;
• account status;
• profile preferences;
• language;
• currency;
• country;
• saved addresses;
• saved Products;
• shopping cart;
• subscription package;
• communication preferences;
• account-health status;
• login and security settings;
• authorized team members;
• roles and permissions.

We do not store passwords in readable plain-text form.

For Sellers and business Users, we may collect:

• legal business name;
• trading name;
• registration number;
• tax identification number;
• registered office;
• operating address;
• business category;
• beneficial ownership information;
• directors or partners;
• authorized representatives;
• licences and permits;
• product registrations;
• manufacturing information;
• export documentation;
• certifications;
• bank or payout information;
• Seller performance data;
• Product-origin evidence;
• inspection and compliance records;
• insurance information;
• warehouse or pickup locations.

Where you act as a Seller, we may process:

• Product descriptions;
• Product images and videos;
• brand information;
• country of origin;
• materials and ingredients;
• Product dimensions and weight;
• pricing;
• stock;
• production capacity;
• regulatory numbers;
• safety information;
• warranty details;
• Product-performance information;
• Listing approval history;
• Product moderation records.

Product information may identify an individual where the Seller is a sole trader, artisan or individual producer.

Transaction data may include:

• Order number;
• Buyer and Seller identifiers;
• Products ordered;
• quantities;
• price;
• discounts;
• taxes;
• fees;
• currency;
• Order status;
• payment status;
• shipment status;
• delivery status;
• cancellation reason;
• return status;
• refund status;
• claim status;
• settlement status;
• Order timeline;
• transaction communications;
• invoices and receipts;
• transaction source and channel.

Where you use RFQ or wholesale services, we may process:

• RFQ description;
• requested specifications;
• quantities;
• target price;
• intended destination;
• quotation submissions;
• negotiation history;
• samples;
• manufacturing capacity;
• production dates;
• inspection requirements;
• payment milestones;
• commercial terms;
• Buyer and Seller communications;
• accepted quotation records.

Some RFQ information may be commercially confidential.

Payment and financial data may include:

• payment method;
• masked payment-card details;
• payment-provider token;
• mobile-money number;
• bank name;
• bank-account information;
• payout-account information;
• transaction reference;
• payment amount;
• currency;
• payment status;
• refund details;
• chargeback information;
• settlement details;
• Seller balance;
• fees and commissions;
• tax information;
• fraud-review result.

Full card details are ordinarily collected and processed directly by an authorized payment provider rather than stored by WeShopAfrica.

We may receive masked or tokenized payment information and transaction results from the provider.

Where payment protection or escrow arrangements apply, we may process:

• payment-hold amount;
• release conditions;
• release date;
• milestone status;
• inspection result;
• delivery confirmation;
• claim status;
• reserve or settlement hold;
• refund allocation;
• dispute decision;
• transaction-risk information.

Logistics data may include:

• pickup address;
• delivery address;
• contact person;
• telephone number;
• shipping label;
• parcel dimensions;
• parcel weight;
• Product category;
• tracking number;
• carrier;
• dispatch time;
• delivery route;
• delivery attempts;
• delivery timestamp;
• recipient name;
• signature;
• proof-of-delivery image;
• pickup-point information;
• delivery notes;
• delivery exceptions;
• customs information.

Where location functionality is enabled, we may process approximate or precise device location with applicable permission.

Inspection data may include:

• inspection request;
• Buyer and Seller details;
• inspection location;
• inspector identity;
• inspection date;
• Product specifications;
• photographs;
• videos;
• measurements;
• quantity checks;
• packaging checks;
• visible-condition findings;
• documents;
• inspection result;
• corrective actions;
• reinspection records.

Inspection media may incidentally include individuals or premises. Inspectors and Sellers should avoid capturing unnecessary personal information.

We may process:

• return request;
• refund request;
• claim allegations;
• dispute category;
• requested remedy;
• photographs;
• videos;
• correspondence;
• inspection findings;
• delivery evidence;
• payment evidence;
• decision;
• appeal;
• refund amount;
• return-shipment information;
• account adjustments.

Claims may include sensitive or confidential information. Users should provide only information relevant to the dispute.

We may collect:

• support requests;
• complaint details;
• chat messages;
• email correspondence;
• call records;
• call recordings where notice is given;
• support notes;
• attachments;
• escalation records;
• satisfaction ratings;
• resolution details;
• communications between Buyers and Sellers through the Platform.

We may review marketplace communications where reasonably necessary for:

• support;
• fraud prevention;
• dispute resolution;
• policy enforcement;
• safety;
• legal compliance.

Where you submit content, we may process:

• reviews;
• ratings;
• comments;
• Product questions;
• photographs;
• videos;
• public profile information;
• live-commerce comments;
• survey answers;
• promotion entries;
• testimonials;
• reports of inappropriate content.

Public content may be visible to other Users and search engines.

Do not publish personal data that you do not wish to make public.

We may automatically collect:

• IP address;
• browser type;
• operating system;
• device type;
• device identifier;
• application version;
• language;
• timezone;
• screen resolution;
• mobile network;
• referring page;
• session identifier;
• login time;
• device-security signals;
• crash data;
• diagnostic records;
• API-request metadata.

We may collect information about how you use the Platform, including:

• searches;
• Product views;
• clicks;
• downloads;
• saved Products;
• cart activity;
• purchases;
• pages visited;
• session duration;
• navigation;
• feature usage;
• promotion responses;
• notification interactions;
• support interactions;
• Seller-dashboard activity.

We may use this information to operate, secure and improve the Platform.

We may process information used to detect and prevent:

• account takeover;
• identity fraud;
• payment fraud;
• Seller fraud;
• promotion abuse;
• chargeback abuse;
• counterfeit sales;
• money laundering;
• sanctions violations;
• unauthorized access;
• automated attacks.

Risk data may include:

• device signals;
• IP reputation;
• failed login attempts;
• transaction patterns;
• related-account indicators;
• identity-verification results;
• payment-provider risk scores;
• policy-violation history;
• unusual behavior;
• internal risk classifications.

When an authorized administrator accesses or changes Platform records, we may collect:

• administrator identity;
• role;
• permission;
• login and session details;
• action performed;
• record accessed;
• previous and new values;
• approval decision;
• reason;
• IP address;
• timestamp;
• export activity;
• configuration changes;
• security events.

Audit data is used for accountability, security, investigation and compliance.

Marketing data may include:

• communication preferences;
• email-subscription status;
• SMS-subscription status;
• interests;
• Product preferences;
• campaign engagement;
• coupon usage;
• advertising audience category;
• referral source;
• affiliate information;
• survey responses;
• promotion participation.

Where applicable, we may collect information relating to:

• bookings;
• appointments;
• service-provider availability;
• event participation;
• live-commerce sessions;
• bids or purchases during live sessions;
• donation transactions;
• selected causes;
• subscription services;
• Learning Center activity.

A specific service may present an additional privacy notice.

WeShopAfrica does not ordinarily require sensitive personal data for standard shopping activity.

We may process sensitive data where necessary, lawful and proportionate, including:

• identity-verification biometrics where an approved provider uses them;
• health or allergy information voluntarily supplied in a Product complaint;
• disability-related delivery or accessibility needs;
• information relating to alleged fraud or criminal conduct;
• other sensitive information required by law.

We shall seek to apply enhanced access controls and security to sensitive data.

You should not submit sensitive information unless it is genuinely required.

WeShopAfrica is not intended for independent use by children who are not legally capable of entering a binding transaction.

A person below eighteen should use the Platform only with the involvement and authorization of a parent or legal guardian, subject to applicable law.

We do not knowingly seek to create independent commercial accounts for children.

Where we discover that personal data has been collected from a child without appropriate authorization, we may:

• restrict the account;
• request guardian verification;
• delete the information where appropriate;
• take other protective action.

A parent or guardian who believes that a child has provided personal data without authorization should contact us.

We collect personal data:

Directly from you

For example, when you:

• register;
• update your profile;
• list a Product;
• place an Order;
• submit an RFQ;
• upload identification;
• contact support;
• submit a claim;
• enter a promotion;
• communicate with another User.

Automatically

For example, through:

• cookies;
• software-development kits;
• server logs;
• application logs;
• security systems;
• analytics tools;
• device permissions.

From other Users

For example:

• a Buyer providing a recipient’s delivery details;
• a business adding an authorized team member;
• a Seller responding to a claim;
• a User reporting another User.

You must have lawful authority to provide another person’s information.

From third parties

These may include:

• payment providers;
• banks;
• mobile-money providers;
• logistics providers;
• inspection providers;
• identity-verification providers;
• fraud-prevention services;
• marketing partners;
• affiliates;
• publicly available sources;
• regulators and authorities.

We may process personal data for the following purposes.

Account creation and administration

To:

• register Users;
• create profiles;
• manage authentication;
• maintain preferences;
• administer Seller teams;
• manage subscriptions;
• respond to account requests.

Identity and business verification

To:

• confirm identity;
• verify Sellers;
• validate business registrations;
• confirm payout-account ownership;
• satisfy compliance requirements;
• prevent impersonation.

Marketplace operation

To:

• display Products;
• enable search;
• manage carts;
• process Orders;
• administer wholesale transactions;
• operate RFQs;
• facilitate Buyer–Seller communications.

Payment and settlement

To:

• collect payments;
• verify bank transfers;
• administer payment protection;
• process refunds;
• calculate fees;
• calculate Seller settlements;
• manage payout accounts;
• reconcile transactions;
• handle chargebacks.

Inspection, logistics and delivery

To:

• arrange inspection;
• generate shipping labels;
• calculate delivery charges;
• coordinate pickup;
• provide tracking;
• confirm delivery;
• investigate logistics exceptions.

Returns, claims and support

To:

• administer returns;
• process refund requests;
• resolve claims;
• investigate disputes;
• manage complaints;
• provide customer support.

Security and fraud prevention

To:

• authenticate Users;
• detect suspicious activity;
• prevent unauthorized access;
• investigate abuse;
• enforce Seller and Buyer policies;
• protect funds and data.

Compliance and legal obligations

To:

• keep required records;
• respond to lawful requests;
• manage taxes;
• comply with sanctions and financial-crime requirements;
• protect legal rights;
• support regulatory audits.

Platform improvement

To:

• measure performance;
• diagnose errors;
• analyze use;
• develop features;
• improve recommendations;
• improve usability and accessibility;
• conduct research and testing.

Marketing and engagement

To:

• send offers where permitted;
• personalize communications;
• administer promotions;
• measure campaigns;
• recommend Products;
• manage affiliate and referral programs.

Depending on the activity and applicable law, WeShopAfrica may process personal data because:

• processing is necessary to enter or perform a contract;
• processing is required by law;
• processing is necessary to protect legitimate interests and does not improperly override individual rights;
• the individual has given consent;
• processing is necessary to protect a vital interest;
• another lawful basis applies.

Where processing is based on consent, you may withdraw consent, subject to legal and operational limitations.

Withdrawal does not invalidate processing lawfully completed before withdrawal.

We process personal data to provide services requested by you, including:

• creating an account;
• processing an Order;
• facilitating an RFQ;
• arranging delivery;
• conducting an agreed inspection;
• administering payment protection;
• providing support;
• processing an eligible refund;
• paying a Seller settlement.

If required information is not supplied, we may be unable to provide the relevant service.

Where permitted, WeShopAfrica may process data for legitimate interests such as:

• protecting the Platform;
• detecting fraud;
• improving services;
• enforcing policies;
• measuring performance;
• maintaining audit records;
• understanding marketplace activity;
• communicating service information;
• defending legal claims.

We shall seek to balance these interests against the rights and reasonable expectations of affected individuals.

We may request consent for activities such as:

• non-essential cookies;
• certain marketing communications;
• precise device location;
• optional surveys;
• selected sensitive-data processing;
• optional personalization;
• call recording where required.

You may manage available consent choices through:

• Cookie Settings;
• account settings;
• device settings;
• unsubscribe links;
• communication preferences;
• contacting us.

Some essential processing cannot be disabled while you continue using the relevant Service.

We may send marketing messages where:

• you have consented;
• the communication is otherwise permitted by law;
• you have not opted out.

Marketing may include:

• Product recommendations;
• Seller opportunities;
• promotions;
• events;
• Platform updates;
• newsletters;
• surveys.

You may opt out using:

• the unsubscribe link;
• communication settings;
• the instruction in an SMS;
• the privacy contact information in this Policy.

Opting out of marketing does not stop necessary transactional or security communications.

We may use:

• purchase history;
• browsing activity;
• searches;
• saved Products;
• language;
• country;
• campaign engagement;

to personalize:

• Product recommendations;
• search results;
• promotions;
• notifications;
• marketplace content.

You may be able to limit certain personalization through Cookie Settings or account preferences.

WeShopAfrica may use automated tools to:

• identify suspicious transactions;
• prioritize support cases;
• recommend Products;
• rank search results;
• detect policy violations;
• estimate delivery risk;
• support identity verification;
• assess Seller performance.

Automated tools may generate recommendations or risk indicators for human review.

Where a decision has a significant adverse effect, WeShopAfrica shall seek to provide appropriate safeguards where required, which may include:

• human review;
• an explanation of the relevant issue;
• an opportunity to provide additional information;
• an appeal or complaint process.

We do not authorize an artificial-intelligence system to make unlawful discriminatory decisions.

We may share personal data only where reasonably necessary for an authorized purpose.

Recipients may include the categories below.

To complete a transaction, we may share information between the Buyer and Seller, including:

• name or business name;
• Order information;
• delivery or pickup information;
• relevant contact details;
• Product requirements;
• transaction communications;
• claim evidence where appropriate.

A Seller may use Buyer data only for:

• fulfilment;
• delivery;
• support;
• returns;
• claims;
• legal compliance.

Sellers must not use Buyer data for unrelated marketing or disclose it without lawful authority.

We may share information with:

• payment processors;
• card networks;
• banks;
• mobile-money providers;
• payout providers;
• fraud-prevention providers;
• settlement providers.

This may be necessary to:

• authorize payment;
• verify bank transfers;
• prevent fraud;
• process refunds;
• manage chargebacks;
• settle Seller proceeds;
• comply with financial requirements.

A provider may act as an independent controller for activities governed by financial-services law and its own terms.

We may share:

• sender and recipient names;
• telephone numbers;
• addresses;
• package information;
• delivery instructions;
• tracking references;
• customs documentation;
• other information required for delivery.

Logistics providers must use the information only for authorized logistics purposes, subject to their applicable legal responsibilities.

We may share information required to:

• schedule an inspection;
• locate the Product;
• contact the Seller;
• understand Product specifications;
• report findings;
• verify corrective actions.

Inspection reports may be shared with affected Buyers, Sellers, authorized personnel and providers where necessary.

We may share or receive information from providers that assist with:

• identity verification;
• document verification;
• device intelligence;
• sanctions screening;
• fraud detection;
• cybersecurity;
• access control;
• risk monitoring.

We may use providers for:

• cloud hosting;
• databases;
• file storage;
• content delivery;
• email;
• SMS;
• push notifications;
• analytics;
• monitoring;
• customer support;
• document management;
• software development;
• backup and disaster recovery.

Providers shall receive only information reasonably required for their approved function.

Where permitted and subject to available controls, we may share identifiers or usage information with:

• analytics providers;
• advertising platforms;
• social-media platforms;
• affiliate partners;
• campaign-measurement providers.

We do not authorize these partners to use restricted transaction or financial data for unrelated purposes.

Non-essential advertising and analytics technologies shall be managed through applicable consent choices.

We may share information with:

• lawyers;
• auditors;
• accountants;
• insurers;
• consultants;
• investigators;
• other professional advisers;

where necessary for advice, assurance, dispute resolution, risk management or legal compliance.

We may disclose personal data where reasonably required to:

• comply with law;
• respond to a court order;
• respond to a regulator;
• investigate criminal conduct;
• protect Users;
• enforce agreements;
• recover debts;
• defend legal claims;
• protect public safety.

Where legally permitted, we shall seek to ensure that a request is valid and appropriately limited.

If WeShopAfrica participates in:

• a merger;
• acquisition;
• restructuring;
• financing;
• sale of assets;
• transfer of business;
• insolvency process;

personal data may be disclosed to advisers, potential counterparties and successor organizations subject to appropriate confidentiality and legal safeguards.

Where a third party processes personal data on behalf of WeShopAfrica, we shall seek to require the provider to:

• act only for authorized purposes;
• follow documented instructions;
• protect confidentiality;
• apply appropriate security;
• limit access;
• assist with data-subject rights where required;
• report security incidents;
• delete or return data at the end of service;
• control subcontractors;
• comply with applicable law.

Some third parties act independently and determine their own processing purposes. Their own privacy notices may apply.

WeShopAfrica operates a marketplace that may support cross-border commerce and use service providers located outside Ghana.

Personal data may therefore be transferred to or accessed from another country for purposes such as:

• cloud hosting;
• payment processing;
• international delivery;
• fraud prevention;
• customer support;
• analytics;
• inspection;
• Seller settlement;
• legal compliance.

Where required, WeShopAfrica shall seek to apply appropriate safeguards, which may include:

• contractual data-protection terms;
• security assessments;
• provider due diligence;
• transfer-risk reviews;
• access restrictions;
• encryption;
• data minimization;
• consent where legally required;
• another recognized legal mechanism.

International transfers may be subject to the laws of the recipient country.

WeShopAfrica may store or process data:

• in Ghana;
• in the country where a User or transaction is located;
• in another country where an approved provider operates.

Operational records may be replicated across locations for:

• service availability;
• backup;
• disaster recovery;
• security;
• performance.

WeShopAfrica uses administrative, organizational and technical safeguards designed to protect personal data.

Depending on the system and risk, safeguards may include:

• encryption in transit;
• encryption at rest;
• access controls;
• role-based permissions;
• multi-factor authentication;
• session controls;
• password hashing;
• network security;
• logging and monitoring;
• malware scanning;
• secure development;
• vulnerability management;
• backup and recovery;
• incident-response procedures;
• staff confidentiality obligations;
• vendor due diligence;
• security training.

No internet-based service can guarantee absolute security.

Users must also protect their credentials and devices.

Access to personal data shall be limited according to:

• business need;
• role;
• permission;
• country;
• module;
• record;
• field sensitivity;
• transaction threshold;
• environment.

Privileged access may require:

• enhanced authentication;
• approval;
• time limitation;
• reason capture;
• session monitoring;
• periodic review.

WeShopAfrica maintains procedures to identify, contain, investigate and respond to suspected personal-data breaches.

Where a breach occurs, we may:

• secure affected systems;
• assess the data involved;
• determine the likely impact;
• notify providers;
• preserve evidence;
• take corrective action;
• notify affected individuals;
• notify the appropriate regulator;
• cooperate with authorities.

Notification shall be made where and within the period required by applicable law.

A User who suspects a security or privacy incident should immediately contact us.

We take reasonable steps to keep personal data accurate and current.

You are responsible for updating:

• your name;
• contact information;
• addresses;
• business information;
• regulatory documents;
• payment information;
• payout information;
• authorized users.

We may request reverification where information appears inaccurate, inconsistent or expired.

We retain personal data only for as long as reasonably necessary for:

• providing Services;
• completing transactions;
• maintaining financial records;
• resolving claims;
• preventing fraud;
• maintaining security;
• complying with law;
• enforcing agreements;
• defending legal claims;
• satisfying audit requirements.

Retention periods may differ according to data category, legal requirements and operational risk.

Unless a longer or shorter period is required, retention may generally follow this framework:

Account and profile data

Retained while the account is active and for an appropriate period after closure to manage disputes, fraud and legal obligations.

Order and transaction data

Retained for the period required for financial, tax, audit, consumer-protection, dispute and legal purposes.

Payment data

Transaction references and accounting records may be retained as required. Full payment credentials are ordinarily controlled by the payment provider.

Seller verification data

Retained while the Seller operates and for an appropriate compliance and limitation period afterward.

Support and claim data

Retained until the matter is resolved and for an appropriate period afterward for quality, enforcement and legal purposes.

Security and audit logs

Retained according to security, investigation and compliance requirements.

Marketing data

Retained until consent is withdrawn, an objection is received, the data becomes unnecessary or the applicable retention period expires.

Cookie data

Retained according to the duration specified in Cookie Settings or the cookie schedule.

You may request account closure.

Before closing or deleting account data, WeShopAfrica may need to:

• complete active Orders;
• process returns or refunds;
• resolve claims;
• settle outstanding balances;
• preserve financial records;
• prevent fraud;
• satisfy legal obligations;
• enforce a legal hold;
• retain audit history.

Account closure does not automatically require immediate deletion of every record.

Where data must be retained, access shall be restricted to the relevant purpose.

We may create data that no longer identifies an individual for purposes such as:

• business intelligence;
• marketplace trends;
• capacity planning;
• Product performance;
• research;
• fraud analysis;
• service improvement.

We may retain and use properly anonymized data without applying account-based retention periods, provided it cannot reasonably be used to reidentify an individual.

Subject to applicable law and relevant exceptions, you may have the right to:

• be informed about processing;
• request access to your personal data;
• request correction of inaccurate data;
• request completion of incomplete data;
• object to certain processing;
• request restriction of certain processing;
• request deletion where applicable;
• withdraw consent;
• object to direct marketing;
• complain about processing;
• request review of certain automated decisions;
• receive another remedy available under applicable law.

Not every right applies in every circumstance.

You may request confirmation of whether WeShopAfrica processes your personal data and request access to applicable information.

We may ask you to verify your identity before releasing data.

We may restrict or redact information where necessary to protect:

• another person’s privacy;
• confidential commercial information;
• security;
• fraud investigations;
• legal privilege;
• rights protected by law.

You may request correction of inaccurate personal data.

Some information can be updated directly through account settings.

We may request supporting evidence before changing verified identity, business, payment or payout information.

You may object to or request restriction of certain processing, particularly where:

• you dispute accuracy;
• you believe processing is unlawful;
• processing is based on an interest that you believe is overridden by your rights;
• you object to direct marketing.

We may continue processing where there is a compelling lawful basis or where processing is required for legal claims or obligations.

You may request deletion of personal data where applicable.

We may refuse or limit deletion where retention is necessary for:

• an active transaction;
• financial or tax obligations;
• fraud prevention;
• legal compliance;
• public-interest obligations;
• a legal claim;
• security;
• audit integrity;
• another lawful purpose.

Where full deletion is not available, we may restrict the data’s use.

Where processing is based on consent, you may withdraw that consent.

Withdrawal may be completed through:

• account preferences;
• Cookie Settings;
• device settings;
• unsubscribe tools;
• contacting us.

Withdrawal shall not affect processing completed lawfully before withdrawal.

You may object to direct marketing at any time.

After opting out, you may still receive:

• Order confirmations;
• security alerts;
• payment notices;
• delivery updates;
• claim communications;
• legal notices;
• other essential service communications.

Where an automated decision has a significant effect and applicable law provides a right of review, you may request:

• human review;
• additional information;
• correction of inaccurate inputs;
• an opportunity to explain your position.

Security controls may limit the detail we can disclose about fraud-detection methods.

To exercise a privacy right, contact:

Privacy Email: [Insert dedicated privacy email]
General Email: info@weshopafrica.com
Postal Address: WeShopAfrica Ltd, Old Ashongman, Accra, Ghana
GhanaPost GPS: GE-109-2944

Please provide:

• your name;
• account email or telephone number;
• the right you wish to exercise;
• relevant transaction or account reference;
• information needed to locate the data;
• proof of identity where requested.

Do not send unnecessary sensitive documents by insecure channels.

To protect personal data, we may verify the requester’s identity before responding.

Verification may include:

• confirming account access;
• email or telephone verification;
• requesting identification;
• asking transaction-related questions;
• confirming authority to act for another person.

An authorized representative may be required to provide written authorization and proof of identity.

We shall seek to respond within the time required by applicable law.

A complex or repeated request may require:

• clarification;
• additional verification;
• additional processing time where lawful.

We may refuse a request that is:

• manifestly unfounded;
• fraudulent;
• excessive;
• impossible to verify;
• prohibited by law.

Where a request is refused or restricted, we shall provide an explanation where permitted.

You may submit a complaint directly to WeShopAfrica using the privacy contact information above.

Your complaint should include:

• description of the issue;
• relevant dates;
• account or transaction reference;
• supporting information;
• preferred resolution.

You may also have the right to complain to the Data Protection Commission of Ghana or another competent authority.

Cookies are small files stored on a browser or device.

WeShopAfrica may also use similar technologies, including:

• local storage;
• software-development kits;
• pixels;
• tags;
• device identifiers;
• web beacons.

In this Policy, these technologies are collectively referred to as “Cookies.”

We may use Cookies to:

• keep Users signed in;
• maintain shopping carts;
• remember preferences;
• secure accounts;
• prevent fraud;
• measure Platform performance;
• identify errors;
• understand how Users navigate;
• personalize content;
• measure advertising;
• support social-media functions;
• improve Products and Services.

Essential Cookies are required for the Platform to operate safely and correctly.

They may support:

• authentication;
• session management;
• security;
• fraud prevention;
• shopping carts;
• checkout;
• load balancing;
• network management;
• consent preferences;
• accessibility settings.

Essential Cookies cannot ordinarily be disabled through WeShopAfrica Cookie Settings because the relevant Service may not function without them.

You may block them through your browser, but parts of the Platform may stop working.

Functional Cookies may remember:

• language;
• currency;
• country;
• delivery location;
• saved preferences;
• recently viewed Products;
• interface choices.

Disabling these Cookies may reduce personalization or convenience.

Analytics Cookies help us understand:

• visitor numbers;
• page use;
• navigation;
• errors;
• conversion;
• loading performance;
• feature engagement.

We use this information to improve the Platform.

Where required, these Cookies shall be used only after consent.

Advertising Cookies may help:

• measure campaigns;
• limit repeated advertisements;
• personalize promotions;
• create advertising audiences;
• understand campaign effectiveness.

Approved advertising partners may place or read these Cookies where you have provided any required permission.

WeShopAfrica shall not intentionally use highly restricted financial or identity-verification data for behavioral advertising.

Social-media functions may allow you to:

• share Products;
• view embedded content;
• interact with social platforms;
• use social login where available.

The social-media provider may collect information according to its own privacy policy.

First-party Cookies are set by WeShopAfrica.

Third-party Cookies are set by approved external providers, which may include:

• analytics providers;
• advertising platforms;
• social networks;
• payment providers;
• customer-support providers;
• fraud-prevention providers.

Third-party providers may process data independently according to their own notices.

Cookies may be:

Session Cookies

Deleted when the browser session ends.

Persistent Cookies

Stored until:

• their expiry date;
• you delete them;
• they are replaced;
• consent is withdrawn where applicable.

Cookie duration should be displayed in the Cookie Settings interface or detailed cookie schedule.

You may manage non-essential Cookies through:

• the Cookie banner;
• Cookie Settings;
• browser settings;
• device settings;
• applicable provider opt-out controls.

Withdrawing consent shall not affect processing completed before withdrawal.

Cookie preferences may need to be reset if:

• you clear browser data;
• you use another browser;
• you use another device;
• you use private browsing;
• the Cookie system changes materially.

Most browsers allow you to:

• block Cookies;
• delete Cookies;
• restrict third-party Cookies;
• receive Cookie alerts;
• limit tracking.

Blocking all Cookies may prevent:

• login;
• cart storage;
• checkout;
• preference retention;
• other essential functions.

Mobile applications may use:

• application identifiers;
• device identifiers;
• push-notification tokens;
• analytics SDKs;
• crash-reporting SDKs;
• fraud-prevention SDKs;
• location permissions;
• camera or media permissions.

You may manage certain permissions through your device settings.

Disabling a required permission may prevent the related feature from functioning.

Some browsers provide “Do Not Track” or similar signals.

Because there is not always a consistent technical standard for interpreting these signals, the Platform may not respond uniformly to every signal.

We shall honor legally required browser or device controls where applicable.

WeShopAfrica should maintain a current Cookie Schedule identifying:

• Cookie name;
• provider;
• purpose;
• category;
• duration;
• first- or third-party status;
• applicable consent basis.

The Cookie Schedule may be published through the Cookie Settings interface and updated as providers change.

Where a business creates an account for an employee, representative or contractor:

• the business must have authority to provide the person’s information;
• WeShopAfrica may communicate with that person regarding the business account;
• the business may control the person’s role and access;
• account activity may be visible to authorized business administrators.

An individual should contact their organization regarding internal use of their account information.

Sellers receive only Buyer data reasonably required to fulfil transactions.

Sellers must:

• use the data only for authorized purposes;
• apply appropriate security;
• restrict staff access;
• avoid unrelated marketing;
• avoid exporting unnecessary data;
• delete or restrict data when no longer required;
• report suspected breaches.

A Seller may act as an independent controller for its legally required transaction records.

Authorized WeShopAfrica personnel may access records to:

• provide support;
• approve Sellers or Products;
• verify payments;
• administer refunds;
• review claims;
• monitor logistics;
• prevent fraud;
• perform audits;
• enforce policies;
• maintain systems.

Administrative access shall be subject to role, permission and audit controls.

Where permitted and after appropriate notice, WeShopAfrica may record:

• customer-support calls;
• inspection calls;
• Seller-support sessions;
• training sessions;
• selected live-commerce sessions;
• administrative support sessions.

Recordings may be used for:

• quality assurance;
• training;
• dispute resolution;
• security;
• compliance.

Users shall be informed where recording is legally required to be disclosed.

We may process location information where necessary to:

• verify pickup addresses;
• calculate shipping;
• support delivery;
• identify service availability;
• prevent fraud;
• locate nearby providers.

Precise device location shall ordinarily require applicable device permission.

You may disable location access, but you may then need to enter an address manually or lose access to location-dependent features.

Images may be collected for:

• Product Listings;
• inspection;
• proof of pickup;
• proof of delivery;
• claims;
• returns;
• identity verification.

Users and providers should avoid capturing unrelated individuals or sensitive information.

WeShopAfrica may restrict or remove media that is excessive, unlawful or irrelevant.

We may suspend deletion or ordinary retention expiry where information is needed for:

• litigation;
• regulatory inquiry;
• fraud investigation;
• law-enforcement request;
• internal investigation;
• insurance claim;
• financial reconciliation.

Information subject to legal hold shall be restricted to the relevant purpose.

WeShopAfrica may update this Policy to reflect:

• changes in law;
• new Services;
• new providers;
• security improvements;
• business changes;
• regulatory guidance;
• changes in processing.

The updated Policy shall display a revised “Last Updated” date.

Where a change materially affects your privacy, we may provide additional notice through:

• email;
• the Platform;
• account notification;
• Cookie banner;
• another appropriate channel.

Where new consent is required, we shall request it.

Questions, complaints and privacy requests may be directed to:

WeShopAfrica Ltd
Old Ashongman, Accra, Ghana
GhanaPost GPS: GE-109-2944
Website: www.weshopafrica.com
General Email: info@weshopafrica.com
Support Email: support@weshopafrica.com
Privacy Email: [Insert dedicated privacy email]

Data Protection Contact or Supervisor: [Insert name or role]

You may have the right to contact the Data Protection Commission of Ghana regarding concerns about the processing of personal data.

We encourage you to contact WeShopAfrica first so that we have an opportunity to investigate and address your concern.

By using the Platform, you acknowledge that you have been provided with this Privacy and Cookie Policy.

Where consent is required for a particular processing activity, use of the Platform alone shall not replace a specific consent mechanism.

Your continued use of Services that necessarily require personal-data processing is subject to this Policy, the Terms and Conditions, and applicable law.