Privacy Policy

1.1 Information You Provide

• Account Information: Full name, email address, phone number, university affiliation, department
• Profile Information: Profile picture, bio, year of study (students), business details (sellers)
• Transaction Information: Orders, payment details, delivery addresses, purchase history
• Communication: Messages with sellers/buyers, support tickets, reviews, ratings

1.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, clicks, search queries, features used
• Location Data: General location based on IP address (not precise GPS)
• Cookies: Session data, preferences, authentication tokens

1.3 Payment Information

Campus Market does not collect, process, or hold payments between buyers and sellers. Historical orders may contain transaction references or payment-status information from earlier payment integrations; we do not use Campus Market to initiate or verify new payments.

• Do not send payment PINs, passwords, or one-time codes through Campus Market.
• For payment records from a direct transaction, keep your receipt with your payment provider.

2.1 Essential Services

• Create and manage your account
• Process transactions and payments
• Facilitate communication between buyers and sellers
• Deliver products and services
• Provide customer support
• Send order confirmations and updates

2.2 Platform Improvement

• Analyze usage patterns to improve features
• Personalize your experience and recommendations
• Test new features and functionality
• Monitor platform performance and fix bugs

2.3 Safety & Security

• Detect and prevent fraud
• Enforce our Terms of Service
• Verify user identity and prevent fake accounts
• Investigate disputes and resolve complaints
• Comply with legal obligations

2.4 Marketing (With Consent)

• Send promotional offers and updates (opt-in only)
• Notify you of new features
• Send newsletters and announcements

You can opt out of marketing communications at any time via your account settings or email unsubscribe links.

3.1 With Other Users

When you place an order, sellers can see your name, delivery address, and phone number. When you sell, buyers can see your business name and contact information.

3.2 Service Providers

We share data with trusted third parties who help us operate:

• Email Services: Resend (for notifications)
• SMS Services: Africa's Talking (for alerts)
• Cloud Hosting: Supabase (for data storage)

All service providers are contractually bound to protect your data and use it only for specified purposes.

3.3 Legal Requirements

We may disclose your information if required by:

• Zimbabwean law or legal process
• Court orders or government requests
• Law enforcement agencies investigating crimes
• Protection of our rights, property, or safety

3.4 Business Transfers

If Campus Market is acquired or merged, your data may be transferred to the new entity. We will notify you of any change in ownership.

4.1 What Are Cookies?

Cookies are small text files stored on your device that help us recognize you and remember your preferences.

4.2 Types of Cookies We Use

4.3 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may affect platform functionality.

5.1 Security Measures

• Encryption: HTTPS/TLS encryption for all data transmission
• Password Security: Bcrypt hashing for password storage
• Access Controls: Role-based permissions and authentication
• Monitoring: 24/7 security monitoring and intrusion detection
• Backups: Regular encrypted backups

5.2 Data Retention

We retain your data:

• Active Accounts: While your account is active
• Transaction Records: 7 years (tax compliance)
• Support Tickets: 3 years
• Deleted Accounts: 30 days (backup retention)

5.3 Data Breach Notification

In the event of a data breach, we will notify affected users within 72 hours as required by the Cyber and Data Protection Act.

Under Zimbabwean Law, You Have the Right To:

How to Exercise Your Rights

Contact our Data Protection Officer: