AfriCarrt

Privacy Policy

PIPEDA-Aligned Privacy Practices

Effective Date: August 21, 2026

This is a draft prepared for founder review — not a substitute for independent legal advice.

1. Our Commitment to Your Privacy

AfriCarrt is committed to protecting your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). This policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights regarding it.

2. What We Collect

Account information: name, email address, phone number, password (stored securely, never in plain text).

Order information: delivery address, order history, items purchased.

Payment information: processed directly by our payment processor (Stripe); AfriCarrt does not store your full card number.

Store owner information: business name, business address, business registration/licence details, banking details for payouts (processed via Stripe Connect).

Technical information: device type, browser, and usage data collected automatically to help us maintain and improve the Platform.

3. Why We Collect It

To create and manage your account.

To process and fulfill your orders, including coordinating payment and delivery.

To verify Store owners' business legitimacy before allowing them to list products.

To communicate with you about your orders, account, or customer support requests.

To improve the Platform and understand how it's used.

To meet legal and regulatory obligations (e.g., tax reporting).

4. How We Share Your Information

We share limited information only as necessary to provide the service:

With the Store you order from, to fulfill your order (e.g., items ordered, delivery address).

With our payment processor (Stripe), to process payment and, for Store owners, payouts.

With our delivery partner (Uber Direct), to coordinate and track delivery.

With service providers who help us operate the Platform (e.g., hosting, email delivery), under confidentiality obligations.

Where required by law, such as in response to a valid legal request.

We do not sell your personal information to third parties.

5. How We Protect Your Information

We use industry-standard security practices, including encrypted connections, access controls, and secure third-party payment processing, to protect your personal information from unauthorized access, loss, or misuse.

6. Your Rights

Under PIPEDA, you have the right to:

Access the personal information we hold about you.

Request correction of inaccurate information.

Withdraw consent for certain uses of your information, subject to legal or contractual restrictions.

Request deletion of your account and associated personal information, subject to our legal obligation to retain certain records (e.g., transaction records for tax purposes).

To exercise these rights, contact us at privacy@africarrt.com.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy, or as required by law (for example, financial records related to HST/GST obligations).

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date.

9. Contact & Complaints

Questions or concerns about our privacy practices can be directed to privacy@africarrt.com. If you believe your privacy rights have been violated, you may also contact the Office of the Privacy Commissioner of Canada.