Privacy policy

This Privacy Policy explains how Storequode collects, uses, discloses, stores and protects personal data when you visit the Storequode website, create an account, shop, apply to sell, manage a store, contact us or otherwise use our services (together, the “Platform”).

Storequode processes personal data in accordance with Ghana’s Data Protection Act, 2012 (Act 843) and other applicable laws. The Storequode marketplace operator identified below is the data controller for the Platform. An independent seller may also be a data controller for information it receives to fulfil your order or comply with its own legal duties.

1. Personal data we collect

Depending on how you use Storequode, we may collect:

• Account and identity data: name, email address, telephone number, password hash, account status and sign-in records.
• Delivery and contact data: recipient name, delivery or pickup details, address, city, region, postal code, country and delivery instructions.
• Order and transaction data: basket contents, products, sellers, prices, discounts, order history, returns, refunds, gift-card or store-credit activity, payment status and transaction references.
• Payment-method data: payment type, provider, account holder, masked or tokenised reference and expiry details where a saved method is offered. Storequode does not ask you to provide a mobile-money PIN or card security code to a seller or courier.
• Shopping and content data: wishlist items, product reviews, ratings, preferences and notification choices.
• Seller data: store name, business description, business and contact details, product listings, sales, commission, warehouse or pickup information, payout provider and payout-account details.
• Communications: messages sent through support or contact forms, complaint details and our correspondence with you.
• Technical and usage data: IP address, device and browser information, session identifiers, security logs, pages or features used, and diagnostic data generated when you access the Platform.
• Marketing data: newsletter subscription, campaign engagement and communication preferences where you choose to receive marketing.

Please do not send sensitive personal data that we have not requested. If we need additional information to investigate fraud, confirm identity or meet a legal obligation, we will explain why it is required.

2. How we collect personal data

We collect data directly from you when you register, place an order, save an address, submit a review, contact us or manage a seller account. We also collect data automatically through sessions, cookies, logs and similar technologies. We may receive data from sellers, delivery partners, payment providers, fraud-prevention services or another person placing an order for you.

3. Why we use personal data

We use personal data only for specific, lawful purposes, including to:

• create and secure accounts, authenticate users and provide account features;
• process baskets, orders, payments, pickup, delivery, returns and refunds;
• send order, account, security and service communications;
• connect customers with the seller responsible for an order;
• review seller applications, manage listings, calculate commission and process seller payouts;
• provide support, resolve complaints and enforce our Terms and Conditions;
• prevent fraud, abuse, unsafe products, unauthorised access and other security incidents;
• maintain, troubleshoot, analyse and improve the Platform and customer experience;
• keep financial, tax, accounting, audit and transaction records and comply with legal requests; and
• send newsletters or promotions where you have consented, and record or honour your communication choices.

Our lawful grounds may include your consent, steps taken at your request before a contract, performance of a contract, compliance with a legal obligation, protection of a legitimate interest that does not override your rights, or another ground permitted by Act 843. Where processing depends on consent, you may withdraw that consent without affecting earlier lawful processing.

4. When we share personal data

We do not sell your personal data. We may disclose only the information reasonably necessary to:

• Sellers: fulfil orders, arrange delivery or pickup, handle returns and provide support. A seller should not use customer data for unrelated marketing without valid consent.
• Delivery and fulfilment providers: deliver or collect an order, contact the recipient and confirm delivery.
• Payment and payout providers: authorise, collect, reconcile or refund payments and pay seller earnings.
• Technology and professional providers: host data, send email or messages, maintain systems, prevent fraud, provide analytics used to operate the service, or provide legal, audit and accounting support.
• Authorities and affected parties: comply with law, a lawful request or court order; protect safety, rights and property; investigate fraud; or establish, exercise or defend legal claims.
• Business successors: assess or complete a merger, financing, reorganisation, acquisition or sale, subject to appropriate confidentiality and data-protection safeguards.

Service providers that process data for Storequode must act under appropriate instructions and confidentiality and security obligations. Some recipients, such as independent sellers or payment providers, may process data under their own privacy notices and legal responsibilities.

5. International processing

Some technology or service providers may process or store data outside Ghana. Where personal data is transferred internationally, we take reasonable steps to require protection consistent with Act 843, including appropriate contractual, confidentiality and security safeguards.

6. Cookies and similar technologies

Storequode uses session cookies and similar technologies that are necessary to keep you signed in, remember your basket and preferences, protect forms and maintain Platform security. We may also use functional or measurement technologies to understand performance and improve the service. Where consent is legally required for a non-essential technology, we will request it before use.

You can control cookies through your browser. Blocking essential cookies may prevent account, basket, checkout or security features from working correctly.

7. Data retention

We keep personal data only for as long as it is reasonably needed for the purpose collected, including to provide an active account, complete orders, handle disputes and returns, detect fraud, maintain business and financial records, and satisfy tax, accounting or legal obligations.

Retention periods vary by record. When data is no longer authorised or required, we delete, anonymise or securely isolate it. Deleting an account does not require us to erase transaction, fraud-prevention, dispute or compliance records that applicable law requires or permits us to retain.

8. Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal data against accidental loss, unlawful access, alteration or disclosure. These include access controls, password hashing, logging, confidentiality requirements and secure system practices appropriate to the information involved.

No internet service is completely secure. You should use a strong, unique password, keep your device and sign-in details secure, and contact us promptly if you suspect misuse. Where Act 843 requires notification of a personal-data security compromise, we will notify the Data Protection Commission and affected individuals as soon as reasonably practicable.

9. Your rights

Subject to Act 843 and lawful limitations, you may have the right to:

• be informed whether and how we process your personal data;
• request access to personal data we hold about you and information about its source, purpose and recipients;
• correct data that is inaccurate, incomplete, excessive, out of date or misleading;
• request deletion of data that was unlawfully obtained or that we are no longer authorised to retain;
• object to or require us to stop processing likely to cause unwarranted damage or distress;
• withdraw consent and stop direct marketing at any time; and
• request reconsideration of a qualifying decision based solely on automated processing.

You can update common account and address details in your account area and unsubscribe using the option in a marketing message. For another request, use the Contact page. We may ask for reasonable proof of identity and enough detail to locate the data. We will respond within the period required by law; access requests under Act 843 are generally handled promptly and within 40 days.

10. Marketing choices

We send direct marketing only where we have the consent or other permission required by law. You can unsubscribe at any time through the link in a message or by contacting us. Opting out of marketing does not stop necessary order, account, security or service communications.

11. Children’s privacy

The Platform is intended for adults who can enter into a binding contract. We do not knowingly invite a child to create an account or provide personal data without the authorisation required by law. If you believe a child’s data has been provided improperly, please contact us so we can investigate and take appropriate action.

12. Third-party links and seller pages

The Platform may link to services or pages controlled by sellers or other third parties. Their privacy practices are governed by their own notices. Storequode is not responsible for a third party’s independent processing, but we require sellers to protect customer information received through Storequode and to use it only for lawful purposes.

13. Complaints

Please contact us first so we can investigate a privacy concern. You also have the right to complain to Ghana’s Data Protection Commission. Information about the Commission is available at dpc.gov.gh.

14. Changes to this Policy

We may update this Policy when our services, legal duties or data practices change. The updated date appears at the top of this page. If a change materially affects your rights or how we use personal data, we will provide additional notice where reasonably practicable.

15. Contact

To ask a privacy question, exercise a right or contact Storequode’s data controller, use our Contact page. Current operator contact details are also shown in the site footer. If a data-protection registration number is configured for Storequode, it appears in the operator details on this page.