Privacy Policy

1. Who we are

AfriFabric, a subsidiary of YiwSAMA Technologies is the data controller for personal data collected through afrifabric.com. Our office is at Madina, Accra, Greater Accra Region, Ghana. We process personal data in line with Ghana's Data Protection Act, 2012 (Act 843) and, where it applies to customers abroad, equivalent laws such as the EU/UK GDPR and Nigeria's Data Protection Act, 2023. Contact our data protection lead at support@afrifabric.com or +233 55 712 1498.

2. Data we collect

• Account data: name, email, encrypted password (or Google sign-in identifier), role, phone, country and profile photo.
• Order data: delivery and billing addresses, phone number, body measurements for made-to-order pieces, target dates, order history and tracking.
• Designer data: business name and details, registration and tax numbers, pickup address and contact, verification documents and team members.
• Usage data: products viewed, cart and checkout events, a random session identifier, device and browser information, and error logs.
• Communications: messages you send to support and your email preferences.

Card and mobile money details are entered directly with Paystack; we never see or store full card numbers. We do not knowingly collect sensitive data beyond the measurements you choose to provide.

3. Why we use it and our legal basis

• To create and secure your account and process, deliver and support orders (contract).
• To verify designers, prevent fraud and keep the platform secure (legitimate interests).
• To keep tax, payment and accounting records (legal obligation).
• To give designers sales and product analytics, and improve the platform (legitimate interests).
• To send marketing emails, only where you have agreed; you can opt out any time (consent).

We do not use your data for automated decisions that have legal or similar effects on you.

4. Who we share it with

• The designer fulfilling your order receives your name, contact, address and measurements.
• Paystack — payment processing.
• Terminal Africa and its courier partners (e.g. DHL, GIG Logistics) — delivery rates, waybills and tracking.
• Our hosting, database and email delivery providers, who act only on our instructions.
• Google — only if you choose to sign in with Google.
• AI assistants you personally connect to your account — they can only see your own orders, and only after you approve them.
• Authorities, where required by law or to protect rights and safety.

We do not sell or rent personal data.

5. International transfers

Some providers store or process data outside Ghana (for example in the EU or US). Where this happens we rely on providers with appropriate safeguards such as contractual protections and encryption.

6. How long we keep it

• Account and profile data: while your account is active.
• Order, payment and commission records: up to six years, for tax and accounting.
• Verification documents: while you sell on AfriFabric, plus up to two years.
• Analytics and logs: up to 24 months, then deleted or anonymised.

7. Security

We use encryption in transit, row-level database access controls so each designer only sees their own data, private storage for verification documents, signed payment confirmations and leaked-password protection. If a breach affects your data we will notify you and the Data Protection Commission as required by law.

8. Your rights

You may request access to, correction, deletion or a portable copy of your data, object to or restrict processing, and withdraw consent to marketing. Email support@afrifabric.com; we respond within 30 days. To delete your account see Account & Data Deletion. You may also complain to Ghana's Data Protection Commission (dataprotection.org.gh) or your local regulator.

9. Cookies and local storage

We use essential cookies and local storage for sign-in, your bag, theme preference and a random session identifier used for product analytics. We do not use third-party advertising cookies. Clearing your browser storage removes them.

10. Children

AfriFabric is not intended for anyone under 18. We do not knowingly collect children's data and will delete it if we learn we have.

11. Changes

We will post updates here and change the date above. Significant changes will be notified by email or on the site before they take effect.