Privacy Notice

Who we are

Ubuntu BizBox ("we", "us") provides WhatsApp-first online stores for African hustlers and SMEs. This notice explains what personal information we collect, why, and your rights under POPIA (South Africa), the GDPR (EU) and similar laws across our markets (Nigeria NDPR, Kenya DPA, Ghana DPA).

What we collect

• Account data: name, email, phone, language, country.
• Store data: products, prices, branding you upload.
• Order data: buyer name, phone, delivery address, payment status.
• Usage data: pages visited, device type, IP (for fraud & rate-limit).
• Cookies: session, theme, language, currency, cookie-consent choice.

Why we use it

• Run your store, process orders, and route WhatsApp messages.
• Authenticate you and prevent abuse (rate-limits, breach checks via HIBP).
• Send transactional emails (order receipts, password resets, billing).
• Send product updates only if you opt in.

Where it's stored

Data is stored on Lovable Cloud (managed PostgreSQL with encryption at rest). Edge functions run on Cloudflare Workers. We do not sell your data.

Who we share with

• Payment providers (Paystack, M-Pesa) — to take payment.
• WhatsApp / Meta — only if you connect a WhatsApp Business number.
• Delivery partners — only when you fulfil an order.

Your rights (POPIA & GDPR)

You can access, correct, export or delete your data at any time. Email us atprivacy@ubuntubizbox.com. South African users may complain to the Information Regulator; EU users to their local DPA.

Cookies

We use only essential cookies by default. Non-essential cookies require your consent via the banner. You can withdraw consent any time by clearing your browser storage — the banner will reappear.

Contact

Questions? privacy@ubuntubizbox.com or visit our support page.