Afroko Privacy Policy
Last updated: 10/10/2025
Effective date: 10/10/2025
Afroko Ltd (“Afroko”, “we”, “our”, or “us”) values your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, and share information when you visit or use www.afroko.com, create an account, buy or sell products, or interact with us.
1. Who We Are
Afroko Ltd is a company registered in England & Wales, operating an Afro-Caribbean online marketplace connecting independent vendors and buyers.
Registered Office: [Insert Address]
Email: info@afroko.com
Website: www.afroko.com
Data Controller: Afroko Ltd
We are registered with the Information Commissioner’s Office (ICO) and comply with UK data protection laws.
2. Information We Collect
We collect personal and non-personal data to operate our marketplace effectively.
The type of data depends on whether you are a Visitor, Buyer, or Vendor.
🔹 (a) Information You Provide Directly
- Account information: name, email, password, phone number.
- Billing & shipping information: address, postcode, payment details.
- Vendor details: business name, company registration, tax/VAT info, bank or PayPal account for payouts.
- Communications: messages sent via contact forms, chat, or support emails.
- Marketing preferences: email subscription choices, reviews, and feedback.
🔹 (b) Information Collected Automatically
When you use our site, we may collect:
- IP address, browser type, operating system, device type.
- Cookies and analytics data (page visits, clicks, duration, etc.).
- Referring website or campaign source.
🔹 (c) Payment Information
We do not store full payment card details.
Payments are securely processed by Stripe and PayPal, who act as independent controllers for financial data.
3. How We Use Your Information
We use your data to operate Afroko and provide a safe, efficient, and personalised experience.
| Purpose | Example Use |
|---|---|
| Account creation & management | To register your account and maintain your login access. |
| Order processing | To complete transactions, communicate order updates, and deliver products. |
| Vendor onboarding & payouts | To verify sellers, manage commissions, and release withdrawals. |
| Customer service | To respond to questions or resolve disputes. |
| Marketing & communication | To send updates, promotions, and Afroko news (only if opted-in). |
| Fraud prevention & security | To detect and prevent fraudulent or abusive activity. |
| Legal compliance | To meet obligations under UK consumer and tax laws. |
4. Lawful Basis for Processing
Under UK GDPR, Afroko processes personal data under the following lawful bases:
| Purpose | Legal Basis |
|---|---|
| Account creation & transactions | Contractual necessity |
| Marketing emails (opt-in only) | Consent |
| Vendor payments & bookkeeping | Legal obligation |
| Fraud detection & platform security | Legitimate interest |
| Data analytics (improving site) | Legitimate interest |
You can withdraw your consent for marketing at any time (see Section 10).
5. Cookies and Tracking
Afroko uses cookies and similar technologies to:
- Keep you logged in.
- Remember cart items.
- Analyse traffic and performance (via Google Analytics or similar).
You can control or delete cookies through your browser settings.
For more details, see our Cookie Policy (available on afroko.com/cookies).
6. How We Share Information
We only share information when necessary to run the platform or comply with the law.
| Recipient | Purpose |
|---|---|
| Vendors | Delivery details for fulfilling orders. |
| Buyers | Contact info for communication about an order. |
| Payment processors (Stripe, PayPal) | To process secure payments. |
| Email service providers (Mailchimp) | To send newsletters and transactional emails. |
| Hosting & IT providers (Hostinger, Cloudflare) | To operate our secure website and servers. |
| Law enforcement or regulators | If required by law or court order. |
Afroko does not sell, rent, or trade your personal data to third parties.
7. International Data Transfers
Our servers are located in the UK and EU (via Hostinger).
However, some third-party tools (e.g., Stripe, Mailchimp) may process data outside the UK.
In such cases, we ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place to protect your data.
8. Data Retention
We retain personal data only as long as necessary:
| Data Type | Retention Period |
|---|---|
| Customer orders | 6 years (for legal/tax reasons) |
| Vendor data | While account is active + 2 years after closure |
| Email subscriptions | Until unsubscribed |
| Analytics logs | 26 months (Google Analytics default) |
When data is no longer required, it is securely deleted or anonymised.
9. Data Security
We take security seriously and implement:
- SSL encryption (https://)
- Firewalls and anti-malware
- Regular WordPress/Dokan updates
- Password hashing
- Role-based admin access
However, no online platform is 100% secure. Users are encouraged to use strong passwords and keep login details private.
10. Your Data Rights (Under UK GDPR)
You have the following rights:
- Access – request a copy of your data.
- Correction – fix inaccurate or incomplete data.
- Deletion – request deletion (“right to be forgotten”).
- Restriction – limit how we use your data.
- Data portability – request a copy in a usable format.
- Objection – opt out of certain processing, like marketing.
- Withdraw consent – stop receiving marketing emails.
To exercise any of these rights, email privacy@afroko.com or info@afroko.com.
We may ask for ID verification to protect your account.
11. Email Marketing & Communications
- Marketing emails are sent only if you opt in.
- You can unsubscribe at any time via the email link.
- Afroko may still send essential transactional emails (e.g., order confirmations or payout notices) even if marketing is disabled.
12. Children’s Privacy
Afroko is not intended for children under 16 years old.
We do not knowingly collect personal data from minors.
If you believe a child has provided data, contact us immediately to delete it.
13. Third-Party Links
Afroko may contain links to third-party websites (e.g., vendor stores, social media).
We are not responsible for their privacy practices or content. Please read their policies before sharing data.
14. Changes to This Policy
Afroko may update this Privacy Policy from time to time to reflect:
- Legal changes
- Platform updates
- New tools or services
We will notify users by updating the date above and, where appropriate, sending an email notice.
15. Contact & Complaints
If you have any questions or concerns about how we handle your data:
📧 Email: privacy@afroko.com
📍 Address: [Insert business address]
🕵️ Supervisory Authority: Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
You have the right to lodge a complaint with the ICO if you believe Afroko has mishandled your personal information.