1. Who is responsible for your information?
AfriCarib Mart is the service name. The legal controller name, registered address and privacy contact must be supplied by the owner. This draft is based on visible application features and must be checked against actual backend processing and supplier contracts.
2. Information the service may process
Account data includes name, email, phone number, account role and sign-in provider. Shopping features use delivery addresses, selected locations, basket and order details. Vendor setup requests business information, identity/business documents, bank details and operating hours. Device registration, notifications, diagnostics and support records depend on enabled features. Confirm the precise fields and data flows before approval.
3. Why information is used
Proposed purposes include operating accounts, handling orders, supporting vendors, processing payments, helping with support requests and protecting the service. The operator must record the lawful basis for each purpose. Contract, legal obligation, legitimate interests and consent must not be treated as interchangeable or assumed to cover every activity.
4. Sign-in, location and device permissions
Google sign-in uses identity information to authenticate the account. Location permissions can help find an address; users can manage device permissions in system settings. Notifications and biometric features depend on the choices made in the app and on the device. Confirm the exact Google, map, payment and notification data flows in the approved notice.
6. Keeping and deleting information
The final notice must state retention periods or meaningful criteria for account, order, payment, verification and support data. Account closure does not necessarily erase records needed for legal obligations or claims. Do not publish an unconditional deletion deadline without confirming backend behaviour.
7. Your choices and rights
UK data protection rights may include access, correction, erasure, restriction, portability and objection, depending on the circumstances and legal basis. Where consent is used, explain how it can be withdrawn. Add a verified contact channel for requests and describe how identity checks are handled proportionately. People may raise concerns with the Information Commissioner’s Office (ICO).
8. Website storage and updates
This redesigned website does not add an analytics tracker, advertising pixel or contact-form collection. Fonts and app preview images are served locally. Hosting infrastructure can still process technical request information. Review hosting configuration and any later integrations before approving the Cookie Policy. Publish a revision date when this notice is approved.
Reference: ICO privacy information guidance.