BLUETAPESTRY PRIVACY NOTICE
About this Notice
This Privacy Notice provides information on how BLUETAPESTRY collects and processes your personal data when you visit our website or mobile applications. It sets out what we do with your personal data and how we keep it secure and explains the rights that you have in relation to your personal data.
Who we are
BLUETAPESTRY is the leading pan-African e-commerce platform. Our platform consists of our marketplace, which connects sellers with consumers, our logistics service, which enables the shipment and delivery of packages from sellers to consumers, and our payment service, which facilitates transactions among participants active on our platform in selected markets.
The data we collect about you?
Personal data means any information that can be used to identify directly or indirectly a specific individual. We collect your personal data in order to provide tailored products and services and in order to analyse and continually improve our products and services. We may collect, use, store and transfer different kinds of personal data for marketing and personal data optimization purposes. BLUETAPESTRY also uses Google Digital Marketing to propose targeted offers for certain products and services to our customers.
You provide us with your personal data when you register your personal details on our website and mobile platforms and transact with the same.
The personal data we collect includes:
- Information you provide to us: We receive and store the information you provide to us including your identity data, contact data, biometric data, delivery address and financial data. These types of personal data may include:
contact details (such as your name, postal addresses, phone numbers and email addresses),
demographic information (such as your date of birth, age or age range and gender),
online registration information (such as your password and other authentication information),
payment information (such as your credit card information and billing address),
information provided as part of online questionnaires (such as responses to any customer satisfaction surveys or market research),
competition entries/submissions, and
in certain cases your marketing preferences.
2) Information we automatically collect/generate or obtain from third parties:
Collect and store certain types of information regarding your use of the BLUETAPESTRY marketplace including information about your searches, views, downloads and purchases. In addition, we may receive information about you from third parties including our carriers; payment service providers; merchants/brands; and advertising service providers.
These types of personal data may relate to your device (such as your PC, tablet or other mobile device), your use of our websites and apps (as well as certain third party websites with whom we have partnered), and/or your personal preferences, interests, or geographic location. Examples of these types of information include:
a) name and age (or predicted age range),
b) information about your device, operating system, browser and IP address,
c) unique identifiers associated with your device,
d) details of web pages that you have visited,
e) which products you have looked at online (including information about products you have searched for or viewed, purchased or added to an online shopping basket),
f) how long you spend on certain areas of a website or app together with the date and time of your visit/usage,
g) personal data contained within user-generated content (such as blogs and social media postings),
h) social media user name or ID, and
i) social media profile photo and other social media profile information (such as number of followers).
How We Use Your Personal Data:
We use your personal data to operate, provide, develop and improve the products and services that we offer, including the following:
A) Registering you as a new customer.
B) Processing and delivering your orders.
C) Managing your relationship with us.
D) Enabling you to participate in promotions, competitions and surveys.
E) Improving our website, applications, products and services.
F) Recommending/advertising products or services which may be of interest to you.
G) Enabling you to access certain products and services offered by our partners and vendors.
H) Complying with our legal obligations, including verifying your identity where necessary.
I) Detecting fraud.
Legal basis for the processing of Personal Data :
We will only process your personal data where we have a legal basis to do so. The legal basis will depend on the purposes for which we have collected and used your personal data. In almost every case the legal basis will be one of the following:
Consent: For example, where you have provided your consent to receive certain marketing from us. You can withdraw your consent at any time, including by clicking on the “unsubscribe” link at the bottom of any marketing email we send you
Our legitimate business interests: Where it is necessary for us to understand our customers, promote our services and operate effectively, provided in each case that this is done in a legitimate way which does not unduly affect your privacy and other rights.
Performance of a contract with you: This would also apply where we need to take steps prior to entering into a contract with you. For example, where you have purchased a product from us and we need to use your contact details and payment information in order to process your order and send the product to you.
Compliance with law: Where we are subject to a legal obligation and need to use your personal data in order to comply with that obligation.
Data Retention
We will take every reasonable step to ensure that your personal data is processed for the minimum period necessary for the purposes set out in this Privacy Notice. Your Personal Data may be retained in a form that allows for identification only for as long as:
We maintain an ongoing relationship with you. This will enable us to improve your experience with us and to ensure that you receive communications from us
Your Personal Data is necessary in connection with the purposes set out in this Privacy Notice and we have a valid legal basis,
The duration of: (i) any applicable limitation period (i.e., any period during which a person could bring a legal claim against us), and
We will actively review the personal data we hold and delete it securely, or in some cases anonymise it, when there is no longer a legal, business or consumer need for it to be retained.
Data Security
We have put in place security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Your Legal Rights
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to access, correct or erase your personal data, object to or restrict processing of your personal data, right to ask that we transfer your personal data to a third party, and unsubscribe from our emails and newsletters.
We can refuse to accede to your request where it is unreasonable or where you have failed to provide additional information necessary to confirm your identity.
Data Controllers & Contact
If you have any questions or concerns about BLUETAPESTRY’s Privacy Notice or you are looking for more information on how we process your personal data, or wish to exercise your legal rights in respect of your personal data, please contact the Data Privacy Officer by email at info@bluetapestry.co.ke
We will investigate any complaint about the way we manage Personal Data and ensure that we respond to all substantiated complaints within prescribed timelines.