Axumwe privacy policy

This Privacy Policy is a public-facing document for Axumwe’s website and services. It reflects our current data practices and the privacy commitments in Axumwe’s Terms of Service. We may update this Policy from time to time to keep up with changes in our services or legal requirements. If we make material changes, we will notify users through our website or by email.

Axumwe is committed to protecting your privacy. This Privacy Policy explains what personal data we collect from users of the Axumwe marketplace (including Vendors and Buyers), how we use and safeguard that data, with whom we share it, and your rights regarding your information. Axumwe is based in Kenya and operates globally, complying with Kenya’s Data Protection Act as well as international standards like the EU’s GDPR and California’s CCPA. By using Axumwe’s website or app, you agree to the practices described in this Policy. If you have any questions or wish to exercise any privacy rights, please contact us at our privacy email or the mailing address listed on our website.

Information We Collect

• Information You Provide: When you create an Axumwe account or use our platform, we collect personal details you give us. This includes your name, email address, phone number, shipping and billing addresses, and any profile information you add. If you make a purchase, you provide payment information (e.g. credit card details, though we do not store full card numbers on our servers). Vendors may provide additional information such as shop name, business contact details, and inventory listings.
• Vendor Verification Data: If you sign up as a Vendor, we may ask for extra information to verify your identity or business. For example, we might request your full name or business name, official ID or business registration documents, and bank account or mobile money details for payouts. We collect this to comply with laws (like marketplace seller verification requirements) and to maintain a trusted marketplace environment.
• Usage and Transaction Data: We record details of your transactions and activities on Axumwe. For instance, when you place or fulfill an order, we log information like the items purchased, dates and amounts, and the communications between Buyers and Vendors (e.g. order messages or reviews). We also keep track of your interactions on the platform, such as pages viewed, preferences, and feedback, to help us improve our services.
• Automated Information: Like most online services, Axumwe automatically collects certain data when you use our site or app. This includes technical information such as your device type, browser type, IP address, and cookie identifiers. We use cookies and similar technologies to remember your preferences, keep you logged in, combat fraud, and personalize your experience on Axumwe. You can manage cookie preferences through your browser, but some parts of our service might not function properly without them.
  

How We Use Your Information

We use personal data to provide and enhance Axumwe’s services in the following ways:

• To Facilitate Transactions: Your information is essential for us to process orders and enable purchases on the marketplace. For example, if you buy an item, we use your provided details to process the payment and share your delivery name and address with the Vendor and their shipping carrier so they can ship your order. If you are a Vendor, we use your bank or mobile payment details to send you your sales proceeds via our payment processor.
• Communication and Customer Service: We use contact information (like your email and phone number) to send you confirmations and updates related to your use of Axumwe. This includes order receipts, shipping notifications, and account alerts. We’ll also communicate with you to provide customer support or to notify you of important changes (such as updates to our terms or policies).
• Platform Improvement and Personalization: Axumwe uses data about how users interact with the platform to optimize and personalize the experience. This helps us fix technical issues, develop new features, and understand user preferences. For instance, we might use your browsing and purchase history to recommend relevant products or cultural stories. We also use aggregated data and analytics to improve our marketing and outreach, but this information is not personally identifying.
• Marketing (with Consent): If you opt in, we may use your email or contact info to send you Axumwe newsletters, promotional offers, or cultural story updates. You can always unsubscribe or opt out of marketing communications at any time. We do not spam; we’ll only send these updates with your permission, and opting out will not affect transactional communications (like order updates).
• Legal and Security Purposes: We may process your data as needed to enforce our Terms of Service, to prevent fraud, and to ensure the security of our platform. For example, we might use device/IP information to detect suspicious logins, or review communications on the platform if we suspect misuse. If necessary, we will use personal information to comply with legal obligations or respond to lawful requests (such as verifying your identity to help prevent money laundering or fraud).
  

How We Share Your Information

We treat your personal information with care and do not sell your data to third-party advertisers. However, we do share information in certain circumstances to run our marketplace effectively, as described below:

• With Vendors and Buyers (Transactional Sharing): When you make a transaction on Axumwe, some information must be exchanged between the Buyer and the Vendor to complete the sale. For example, if you are a Buyer, the Vendor will see your name and delivery address to fulfill your order, and possibly your contact details to communicate about the purchase. If you are a Vendor, the Buyer will see your shop name, the origin country of shipment, and any contact email or support number you have provided. Users are only allowed to use such information for order-related purposes – e.g. shipping an item or addressing a customer service issue. Using it for anything else (adding someone to marketing lists, etc.) without consent is strictly prohibited.
• With Service Providers: Axumwe relies on trusted third-party companies to help us operate the platform and provide our services to you. This includes payment processors, shipping facilitators, cloud hosting services, analytics providers, and customer support tools. For example, our payment partners (such as Stripe or Flutterwave) process your payment transactions, so they receive your payment details. Similarly, if we offer integrated shipping label printing, our shipping partner (e.g. Shippo or courier APIs) will receive the necessary info to generate a label (like your shipment address). We only share the data that these providers need to perform their functions, and they are contractually obligated to protect your information and use it only for our specified purposes.
• For Legal Compliance and Safety: We may disclose personal information when required by law, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Axumwe, our users, or others. For instance, if we receive a valid subpoena or court order, or a law enforcement request regarding a specific transaction (such as an investigation into fraud or an illegal item), we might be legally compelled to share the relevant data. We also might share information to enforce our agreements or to investigate potential violations (for example, investigating fraud or security issues).
• Business Transfers: If Axumwe undergoes a business transaction such as a merger, acquisition, corporate reorganization, or asset sale, your personal data may be transferred to the successor or new owner as part of that deal. If that happens, Axumwe will ensure your information remains protected and will notify you of any significant changes to how your data is used.
• With Your Consent: In situations where you explicitly consent to or request data sharing, we will honor that. For example, if Axumwe runs a special collaboration or feature that involves sharing data with a partner, we will only do so with your knowledge and consent. Outside of the cases listed above, Axumwe will not share your personal information without your permission.

Your Privacy Rights

Depending on your location, you have certain rights over your personal data. Axumwe is dedicated to respecting these rights and extending similar controls to all our users where possible. Key privacy rights include:

• Access and Correction: You have the right to access the personal data we hold about you and to request correction of any inaccuracies. This means you can ask us for a copy of the information in your account and order history, and you can correct or update your personal details (either through your account settings or by contacting us).
• Deletion (Right to be Forgotten): You can request that we delete your personal data. Upon request, Axumwe will delete or anonymize the personal information we hold about you, except for data we are required to keep by law or for legitimate business purposes (for example, records of transactions for financial reporting or fraud prevention). Do note that once your data is deleted, your Axumwe account will be deactivated, and you may lose access to past transaction history.
• Objection and Restriction: You have the right to object to certain processing of your data or ask us to restrict processing. For instance, you can object to processing that is based on our legitimate interests (such as certain types of analytics or direct marketing) if you believe it impacts your rights. In certain cases, you can also request that we temporarily limit the use of your data (for example, while we are correcting information or addressing a legal dispute).
• Withdrawal of Consent: Where we rely on your consent to use your data, you have the right to withdraw that consent at any time. For example, if you initially agreed to receive marketing emails or newsletters, you can opt out later (using the “unsubscribe” link in emails or through your account settings). Withdrawing consent will not affect the legality of any processing we did based on your consent before the withdrawal.
• Data Portability: In regions that recognize this right (such as the EU), you can request to receive your personal data in a commonly used, machine-readable format, and you have the right to have that data transmitted to another service where technically feasible. In practice, Axumwe may provide tools for you to download your data directly (e.g., downloading your account data as a file).
• Complaint to Authorities: If you have concerns about how Axumwe handles your data, you have the right to lodge a complaint with your national data protection authority. We encourage you to contact us first so we can address your concerns, but you are free to go to a regulator if you believe your rights have been violated. For example, EU users can reach out to their country’s data protection regulator, and Kenyan users can contact the Office of the Data Protection Commissioner (ODPC) in Kenya.

California Residents (CCPA): If you are a resident of California, the California Consumer Privacy Act provides you some additional rights regarding your personal information. In compliance with CCPA, Axumwe will upon request inform you of the categories of personal information we collect about you, the sources of that information, the business or commercial purposes for collecting it, and the third parties with whom we share it. You also have the right to request access to the specific personal information we have about you (a data portability request) and to request deletion of your personal information (with certain exceptions such as information needed to complete ongoing transactions or comply with legal obligations). Axumwe does not sell your personal information to third parties for their own marketing use (as “sell” is defined under CCPA). We also will not deny you goods or services, charge you different prices, or provide a lesser quality of service just because you exercise your CCPA rights. To make a CCPA request, you can contact us via the methods below. We may need to verify your identity before fulfilling your request for security purposes.

Kenya & Other Regions: Axumwe adheres to Kenya’s Data Protection Act, 2019, which grants individuals rights similar to GDPR – including the rights to be informed about how data is used, to access personal data, to request correction or deletion, and to object to processing. We apply these principles broadly. We also monitor and will comply with any emerging African Union data protection frameworks. Axumwe abides by Kenya’s data laws and strives to respect user privacy across all regions. If African Union member states adopt new unified privacy rules, we will adapt our practices to remain compliant. No matter where you are located, we aim to give you meaningful control over your information.

Data Security

We take the security of your personal data seriously. Axumwe implements industry-standard security measures to protect your information from unauthorized access or disclosure:

• Encryption: All communication with our website and app is encrypted using HTTPS, which helps protect data during transmission. Sensitive information (like passwords or payment details) is encrypted or hashed both in transit and at rest to prevent unauthorized use.
• Secure Infrastructure: We maintain our servers and databases in secure environments with up-to-date security patches and firewall protection. We limit access to personal data to authorized personnel who need it to operate our services, and those individuals are bound by confidentiality obligations.
• User Responsibility: We also encourage you to help keep your information safe. Choose a strong, unique password for your Axumwe account and keep it confidential. Be alert to phishing emails or suspicious links asking for personal information. Axumwe will never ask for your password via email. If you suspect any unauthorized access to your account, notify us immediately so we can help secure your account.
• Breach Notification: Despite our safeguards, no platform can be 100% secure. In the unlikely event of a data breach that affects your personal information, Axumwe will promptly inform you and the appropriate regulatory authorities as required by law. We have a process in place to respond to such incidents, mitigate any harm, and prevent future occurrences.
  

Data Retention

Axumwe retains personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by law. This means:

• We keep your account information and profile data while your account is active. If you choose to delete your account or if it becomes inactive for an extended period, we will initiate deletion of your personal data.
• We retain transaction records (orders, payments, communications related to sales) to comply with financial reporting, tax obligations, and to resolve any disputes or fraud prevention issues. For example, we may need to keep a record of sales and refunds for several years for tax and accounting regulations, or to handle chargeback disputes.
• If you delete your Axumwe account, we will remove or anonymize personal data associated with your account. However, we may keep certain information that we are legally required to maintain. For instance, we may retain records of transactions (without personal identifiers where possible) for auditing, legal compliance, or legitimate business purposes. Any data we retain will continue to be protected under the terms of this Privacy Policy.
• We periodically review the data we hold and erase or anonymize information that is no longer needed. If we rely on your consent to keep or use certain data, and you withdraw that consent, we will delete the data unless another legal basis for keeping it applies.

International Data Transfers

Axumwe’s user community and service providers are spread across multiple countries. By using Axumwe, you understand that your personal data may be transferred to and stored on servers outside your home country. For example, if you are located in the EU or UK, your data might be processed on servers in Kenya or the United States, and vice versa. We take steps to ensure that such international transfers comply with applicable data protection laws:

• When transferring personal data from the European Economic Area (EEA) or other regions with data transfer restrictions, we rely on appropriate safeguards. These may include executing European Commission-approved Standard Contractual Clauses with our service providers or ensuring they participate in frameworks that recognize adequate data protection.
• Axumwe abides by cross-border data transfer requirements under Kenya’s Data Protection Act and other applicable laws. If we transfer data out of Kenya or any country with specific data export rules, we will do so in accordance with the law’s requirements to ensure your data remains protected.
• Regardless of where your information is processed, we will protect it to the standard described in this Privacy Policy. We also continually monitor legal developments and will adjust our practices as needed if new data transfer mechanisms or requirements come into effect (for example, if the African Union introduces a new data governance framework, we will adapt accordingly).

Contact Us

If you have any questions about this Privacy Policy or want to exercise your privacy rights, please contact Axumwe’s support team or our Data Protection Officer at [email protected].