Effective date: 21 August 2025

1. Data We Collect

• Information you provide: account details (name, email, phone), order/shipping details, support messages, and any content you upload.
• Facebook‑provided data (when you use Facebook Login or our app on Facebook): basic profile info (name, profile picture), email, user ID, and any permissions you grant to our app. We do not receive your password.
• Usage & device data: IP address, device type, browser, language, referring/exit pages, timestamps, pages viewed, and other diagnostic data.
• Cookies & similar: small files to remember settings, improve performance, measure traffic, and personalize content. See Section 10.

2. How We Use Data

• Operate, maintain, and improve the Services.
• Authenticate users, including via Facebook Login, and personalize your experience.
• Process orders, payments, fulfillment, and customer support.
• Prevent fraud, secure accounts, and enforce policies.
• Send service communications and, when permitted, marketing communications (you can opt out at any time).
• Comply with legal obligations and resolve disputes.

3. Legal Bases (EEA/UK)

Where GDPR/UK GDPR applies, we process personal data under one or more of these bases: (a) performance of a contract; (b) legitimate interests (e.g., security, analytics, product improvement); (c) consent (e.g., certain marketing/cookies); and (d) legal obligation.

4. Sharing of Data

• Service providers who help us run the Services (hosting, analytics, customer support, payments, logistics), bound by confidentiality.
• Legal & safety when required by law or to protect rights, property, or safety.
• Business transfers in connection with a merger, acquisition, or asset sale.

5. International Transfers

Your data may be processed in countries outside your own. Where required, we implement safeguards such as standard contractual clauses.

6. Retention

We retain personal data only as long as necessary for the purposes described or as required by law (e.g., tax, accounting), then delete or anonymize it.

7. Your Rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your data, and to object to certain processing. To exercise these rights, contact privacy@redotafrica.com. You can also withdraw consent where processing is based on consent.

8. Facebook‑Specific Information

• Use of Facebook Data: We use Facebook‑provided data solely to deliver and improve the Services, consistent with the permissions you grant. We do not sell Facebook data.
• Data Deletion Instructions: If you used Facebook Login or our Facebook app and want to request deletion of your data, please email privacy@redotafrica.com with subject “Facebook Data Deletion” and include your full name and the email linked to your Facebook account. We will confirm and process the request in accordance with applicable law.

9. Children’s Privacy

The Services are not directed to children under 13 (or 16 where applicable). We do not knowingly collect data from such children. If you believe a child has provided personal data, contact us to delete it.

10. Cookies

We use strictly necessary, performance/analytics, and functional cookies. You can manage cookies in your browser settings. Disabling some cookies may affect functionality.

11. Changes to This Policy

We may update this Policy from time to time. We will post the new version with an updated effective date. Material changes will be highlighted for a reasonable period.

12. Contact Us

Email: privacy@redotafrica.com