Privacy Policy | AfricaMart

1. Who is responsible for your information

The legal business operating AfricaMart is the controller of personal information collected through this website and the grocery-delivery service.

Required before launch

Replace the placeholders below with the legal operator's full name and valid postal address. These details must match the organisation responsible for the website and customer data.

Controller: [LEGAL BUSINESS NAME], trading as AfricaMart
Postal address: [BUSINESS POSTAL ADDRESS]
Privacy email: support@africamart.co.uk

2. Personal information we collect

Identity and contact details, such as name, email address and mobile number.
Account information, sign-in records and account preferences.
Order and delivery information, including products, addresses, delivery instructions and order history.
Payment and transaction information supplied by payment providers. AfricaMart should not store full card numbers.
Support messages, complaints, photographs and refund information.
Marketing preferences and consent records.
Technical information such as IP address, browser, device, security logs and cookie choices.
Website activity and advertising information only where the required consent has been given.

We collect information directly from you, automatically from the website, from payment and authentication providers, and from people acting on your behalf.

3. How we use information and our lawful bases

Purpose	Typical information	Lawful basis
Create and manage an account	Identity, contact and security information	Contract and legitimate interests in secure account administration
Take payment, fulfil and deliver orders	Order, address, contact and transaction information	Contract
Handle support, refunds and complaints	Order history, messages, photographs and payment outcome	Contract, legal obligation and legitimate interests
Prevent fraud and protect the service	Account, device, IP and security records	Legitimate interests and legal obligation
Accounting, tax and legal compliance	Orders, payments, refunds and correspondence	Legal obligation
Send optional marketing	Email and marketing preference	Consent, or another lawful route where legally permitted
Analytics and advertising technologies	Cookie identifiers and website activity	Consent where required

Where we rely on legitimate interests, we assess the business need, necessity and impact on your rights. You can object in appropriate circumstances.

4. Who we share information with

We may share only the information reasonably needed with:

payment processors and fraud-prevention providers;
website hosting, database, authentication, email and support providers;
postcode and postal-address lookup providers used to help you select the correct delivery address;
AfricaMart staff, authorised warehouse personnel and delivery drivers;
analytics or advertising providers only when the relevant consent is active;
professional advisers, insurers, auditors and accountants;
regulators, courts, law enforcement or other authorities where required;
a buyer or successor if the business is reorganised or sold.

Service providers must use information only for agreed purposes and protect it appropriately.

International transfers

Some service providers may process information outside the UK. Where this happens, AfricaMart must use a lawful transfer mechanism and appropriate safeguards, such as an adequacy regulation or approved contractual terms.

5. How long we keep information

We keep personal information only for as long as needed for the purpose collected, legal obligations, security and possible legal claims.

Order, payment and accounting records are normally kept for up to six years where required for tax, accounting or claims.
Account information is kept while the account remains active and for a limited period afterwards.
Support records are kept for as long as needed to resolve the request and manage related claims.
Marketing records are kept until consent is withdrawn, together with a minimal suppression record where needed to respect the choice.
Cookie-consent records are refreshed periodically as described in the Cookie Policy.

The final backend retention schedule must be reviewed against the actual providers and legal obligations used at launch.

6. Your data-protection rights

Depending on the circumstances, you may have the right to:

request access to your personal information;
correct inaccurate or incomplete information;
request deletion;
restrict how information is used;
object to processing, including direct marketing;
receive certain information in a portable format;
withdraw consent at any time where processing relies on consent.

These rights are not absolute. We may need to verify identity and may retain information where the law requires it. Send requests through Help & Support.

7. Marketing, cookies and similar technologies

Marketing emails are optional and can be turned off using the unsubscribe link or Account Details. Essential order and service messages are not marketing.

Non-essential analytics and marketing technologies must remain blocked until the appropriate consent is given. See the Cookie Policy and use to review choices.

8. Security, children, changes and complaints

We use administrative, technical and organisational measures intended to protect information. No online service is completely risk-free, and customers should use a strong unique password and protect access to their email account.

AfricaMart accounts and ordering are intended for adults. We do not knowingly invite children to create accounts or place orders.

We may update this notice when services, providers or legal requirements change. The latest version and update date will be shown here.

Contact AfricaMart first when you have a privacy concern. You also have the right to complain to the Information Commissioner's Office.