This policy explains which personal data Androria processes when you use the Platform, why, who it is shared with, how long it is kept and how to exercise your rights. It applies Law No. 2024/017 of 23 December 2024 on the protection of personal data in Cameroon and Law No. 2010/012 of 21 December 2010 on cybersecurity and cybercrime.
1. Data controller
Androria, Yaoundé, Cameroun – [email protected]. For any question about your data: [to be completed].
For the data needed to fulfil your order (name, phone, delivery address), each Seller you order from acts as controller of its own processing: it may only use it to process your order.
2. Data we process
- Account: name, email, phone, password (stored with irreversible encryption), profile photo, language, country, notification preferences, withdrawal PIN (encrypted).
- Delivery addresses you save.
- Orders and payments: products, amounts, status, delivery history, payment method used and transaction references. Card numbers are not stored by Androria: they are entered with the payment provider.
- Wallet and loyalty: balance, transactions, withdrawals, points, coupons, referrals.
- Exchanges: messages with shops and customer service, attachments, disputes, reviews and photos you publish.
- Browsing and activity: products, shops and reels viewed, searches, cart and wishlist additions — used for personalised recommendations, only if you accept it (see section 4).
- Technical data: IP address, device and browser type, connection and security logs, push notification identifier if you enable them.
3. Why we use it (purposes and legal bases)
- Create and manage your account, process your orders, payments, deliveries, returns and refunds — performance of the contract.
- Protect payments (escrow), prevent fraud, secure accounts — legitimate interest and legal obligations.
- Handle your customer service requests and disputes, including mediation — performance of the contract.
- Keep accounts, retain evidence of transactions and respond to authorities — legal obligation.
- Personalise the products and content offered (recommendations) — your consent, withdrawable at any time.
- Send you the newsletter and offers — your consent (double email confirmation), withdrawable via the link in each message.
- Measure the effectiveness of our advertising campaigns (Meta pixel) — your consent to "marketing" cookies.
4. Personalised recommendations and profiling
When you accept the "Personalisation" category in the cookie panel, Androria records your activity on the Platform to suggest products and reels likely to interest you. This profiling has no legal effect on you and does not influence the prices or terms offered to you. You can object at any time from "Manage cookies": personalisation is then switched off. You can also clear your browsing history from your account.
5. Who we share your data with
- The Sellers whose products you buy: name, phone, delivery address and order content.
- Our payment provider (Fapshi) and Mobile Money operators or banks, to execute payments, refunds and withdrawals.
- Our technical processors: hosting and file storage, sending emails and push notifications, audience measurement and advertising when you have consented. They only act on our instructions.
- Authorities, administrative or judicial, when the law requires it.
Androria does not sell your personal data.
6. Transfers outside Cameroon
Some providers (hosting, storage, email, advertising) may process data outside Cameroon. These transfers are governed in accordance with Law No. 2024/017 (authorisation or appropriate safeguards) and limited to what is strictly necessary.
7. Retention periods
- Account and related data: as long as your account is active. When it is deleted, data is deleted or anonymised, except what the law requires us to keep.
- Orders, payments, invoices and supporting documents: for the period required by accounting, tax and payment traceability obligations.
- Connection and security logs: for the period set by applicable regulations.
- Browsing history used for recommendations: linked to your account; you can clear it at any time.
- Newsletter: until you unsubscribe.
- Proof of your cookie choices: for as long as they are valid.
8. Your rights
You have the rights of access, rectification, erasure, objection (in particular to profiling and direct marketing), portability and to withdraw your consent at any time. Much of this can be done directly from your account (profile, addresses, notification preferences, history, account deletion) and from "Manage cookies". For the rest, write to [to be completed] or [email protected]; we answer as soon as possible and may ask you to prove your identity.
You may also lodge a complaint with the Personal Data Protection Authority.
9. Security
Encrypted connections (HTTPS), passwords and PINs stored with irreversible encryption, technical secrets encrypted, limited and logged internal access, two-factor authentication for the administration team. In the event of a data breach presenting a risk to you, we inform you and the competent authority, as required by law.
10. Minors
The Platform is not intended for children. We do not knowingly collect a minor's data without the consent of their legal guardian.
11. Changes
This policy may change. The version in force is dated; a significant change is shown to you at your next login.