This Privacy Policy explains what personal data Suuqa collects when you use suuqa.shop, why we collect it, who we share it with and the rights you have over it. It applies to the Site, to our order confirmation and other email we send you and to data handled on behalf of the Vendors selling through the Site.
1. Who is responsible for your data. Suuqa is the controller for account, order, payment and support data and for data needed to run the marketplace. The Vendor is a separate controller for the limited order and customer data it needs to fulfil and support the products it sells, and its own use of that data is governed by this Policy as it applies to products sold by that Vendor.
Questions about this Policy or a request to exercise your rights, can be sent to
[email protected].
2. What we collect.Data you give us
- Identity and contact: name, email address, phone number and the name, email and phone on your delivery address.
- Order data: the products you buy, order value and the delivery address on the order. We keep the address, country and phone number with the order so we can fulfil, return and support it.
- Account data: your encrypted password. We never store or see your password in plain text and cannot retrieve it.
- Payment status: the result of a payment attempt and a payment reference from Sifalo Pay. We do not store full mobile money account details — those stay with the payment provider.
- Communications: messages you send us and records of your support history.
Data we collect automatically
- Technical data: your IP address, device and browser type and the pages and products you view. This is used to operate the Site, prevent fraud and abuse and to keep the Site secure.
- Sign-in records: the date, time and IP address of your sign-ins.
Where required, we may also ask for information to verify your identity or address before completing a payment-sensitive request.
3. Why we use it, and on what basis.- To perform our contract with you — taking your order, taking payment, delivering it, handling returns and refunds and providing support.
- To meet legal obligations — keeping transaction and tax records for the period required by [statutory retention period].
- For our legitimate interests — securing the Site, preventing fraud, improving search and checkout, understanding which products and pages are used and supporting Vendors. We balance these against your interests and do not use your data in a way you would not reasonably expect.
- With your consent — for example, marketing email. Marketing is opt-in; you can withdraw consent at any time and it does not affect the processing carried out before you withdrew it.
4. Who we share it with. We do not sell your personal data. We share only what is necessary and only with:
- The Vendor who sold you the product — your delivery name, phone number and address, for that order only, so they can fulfil it. Vendors cannot see the full customer list of the Site or other Vendors' customers.
- Payment providers — Sifalo Pay and Sifalo e-Wallet, to process your payment and issue refunds.
- Delivery providers — your name, address and phone number, to hand over the parcel.
- Service providers — hosting, email delivery, storage and support tools, acting on our instructions.
- Authorities — where we are legally required to disclose.
5. Where your data is held. Your data is held on servers operated by us and our providers.
6. How long we keep it. We keep account and order data for as long as your account is open and for [period after which order records are deleted or anonymised] afterwards, for tax and legal reasons. Marketing preferences are kept until you unsubscribe. Security logs are kept for a limited period.
7. Your rights. Subject to the law that applies to you, you may:
- ask for a copy of the personal data we hold about you;
- ask us to correct data that is inaccurate or incomplete;
- ask us to delete your data, where we are not required to keep it;
- object to or restrict certain uses of your data, including marketing;
- ask us to send your data to another provider.
Send requests to
[email protected]. We will verify your identity before acting and we aim to respond within 30 days.
To delete your account, use the account deletion option in your account or email us. Note that order records required for tax purposes may be kept after the account is closed.
8. Security. Passwords are stored as one-way hashes and are never readable by us. Data is sent over HTTPS. Access to customer and order data inside Suuqa is limited to staff and Vendors who need it for the roles described above. Please choose a unique password and notify us immediately if you suspect unauthorised access.
9. Cookies. We use cookies and similar technologies that are necessary to run the Site — for example, to keep you signed in and to remember the contents of your cart. Where we use analytics or advertising cookies, they are subject to your consent .
10. Children. The Site is not intended for children under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Changes. We will update this Policy when our practices change; the "last updated" date above reflects the current version.
