Privacy Policy

Effective Date: April 16, 2025

Last Updated: July 10, 2025

1. Our Privacy Promise to You: Trust is Our Foundation

Welcome to Duala Market Waterside Market LLC ("DMWM"). Our mission is to build the most trusted digital marketplace for Africa, empowering vendors and customers by connecting them through commerce. We believe that trust is the absolute foundation of this mission. In a digital world, nothing is more important than protecting your personal information and honoring the confidence you place in us when you use our services.

This Privacy Policy is more than just a legal document; it is a declaration of our commitment to you. We are guided by a simple, powerful principle: your information belongs to you, and we will only use it to your benefit, to provide and improve the services you love. We are dedicated to being completely transparent about how we collect, use, and protect your data. We strive to give you meaningful control over your information and to design our platform with your privacy at its core from the very beginning.

The growth of e-commerce across Africa presents a monumental opportunity, but it also comes with a great responsibility to safeguard the data of every individual who joins our community. Fear about privacy and a lack of trust can be significant barriers to digital adoption, and we are determined to overcome them by setting a new, higher standard for privacy protection. This policy is our promise to be careful, sensible, and respectful custodians of your data, helping to build a digital future for Africa where innovation and privacy thrive together.

2. Navigating This Policy: Scope and Key Terms

To ensure this policy is as clear as possible, this section explains who and what it covers and defines some key terms you will see throughout the document. We have designed this policy to be layered and easy to navigate, allowing you to find the information you need quickly.

Who This Policy Applies To

This Privacy Policy applies to all individuals who interact with our services, whom we have grouped into the following categories. This role-based approach helps clarify how our data practices apply to you specifically, ensuring that each type of user clearly understands how their information is collected, used, and protected.

  • Customers: Individuals who visit our platform, browse our marketplace, create an account to make purchases, or otherwise interact with DMWM as a buyer.
  • Vendors: Individuals or businesses who create a DMWM account to set up a storefront, list products for sale, and use our services to manage their e-commerce business.
  • Visitors: Any individual who browses our website (https://dmwm.africa) without creating an account or making a purchase.

Our Services

This policy covers the collection and processing of personal data across all of DMWM's websites, applications, products, and services that reference it (collectively, the "Services"). Our Services include, but are not limited to:

  • Operating the multi-vendor e-commerce marketplace at dmwm.africa.
  • Facilitating transactions and processing payments through various methods, including mobile money, credit/debit cards, and bank transfers, via our integrated payment partners.
  • Coordinating logistics and delivery of goods through our shipping partners, such as DHL.

This policy does not apply to the practices of companies that DMWM does not own or control, such as the individual Vendors on our platform who may have their own privacy policies for how they handle the data of Customers who purchase from them. It also does not apply to third-party services you may access through DMWM, which will have their own separate policies.

Key Terms Explained

We use plain language throughout this policy, but some terms have specific legal meanings. Here are a few key definitions to help you understand our commitments:

  • Personal Data: Any information that identifies you or can be reasonably used to identify you. This includes obvious information like your name and email address, but also less direct information like your device's IP address or serial number.
  • Processing: Any action we take with your Personal Data. This includes collecting, storing, using, sharing, or deleting it.
  • Data Controller: The entity that determines the "why" and "how" of processing Personal Data. For the data described in this policy, Duala Market Waterside Market LLC is the Data Controller.
  • Data Processor: An entity that processes Personal Data on behalf of the Data Controller. For example, our cloud hosting provider is a Data Processor.
  • Third-Party Partners: Companies we work with to provide our Services, such as payment processors (e.g., moneroo, pawaPay, Stripe) and logistics providers (e.g., DHL).

3. What Information We Collect, How, and Why

Transparency is a core pillar of our privacy promise. We believe you have the right to know exactly what Personal Data we collect, the source of that data, why we need it, and the legal ground we rely on to process it. To provide maximum clarity, we have organized this information into a comprehensive table below. This format is designed to be user-friendly and aligns with the transparency requirements of global data protection laws.

Our guiding principle is data minimization: we strive to collect only the Personal Data that is strictly necessary to provide our Services, secure our platform, and comply with our legal obligations. If we do not need a piece of information, we will not ask for it. The following table details our data processing activities.

Category of Personal Data How We Collect It Our Purpose for Processing (Why We Need It) Our Legal Basis for Processing
Identity & Account Data
(e.g., name, email address, password, phone number, physical address, date of birth. For Vendors, we may also collect government-issued ID or business registration documents for verification.)
Provided directly by you during account creation, checkout, or our Vendor verification process. To create, secure, and manage your account; to fulfill orders; to communicate with you about your account and transactions; and to verify your identity to prevent fraud and comply with legal requirements like KYC. Performance of a contract; legal obligation; legitimate interest (to secure our platform).
Transaction & Financial Data
(e.g., details about products you purchase, transaction amount and currency, payment method type, mobile money number, bank account details for Vendor payouts. We do not directly store full credit/debit card numbers.)
Provided by you at checkout; received from our secure payment partners when they process your payment or we issue a payout. To process payments for your purchases; to issue payouts to Vendors; to maintain accurate financial records for tax and accounting purposes; to handle refunds and resolve disputes. Performance of a contract; legal obligation.
Vendor-Specific Data
(e.g., store name, business contact information, product listings, images, descriptions, prices.)
Provided directly by you when setting up and managing your Vendor storefront. To operate your public-facing storefront, display your products, and facilitate sales through our marketplace. Performance of a contract.
Device & Usage Data
(e.g., IP address, device type and identifiers, OS, browser type/version, pages visited, time spent, links clicked, crash reports.)
Collected automatically through server logs and tracking technologies like cookies. To secure our platform against malicious activity; prevent and detect fraud; analyze usage to improve services; troubleshoot technical issues; personalize user experience. Legitimate interest (security, fraud prevention, service improvement); consent (for non-essential cookies and tracking technologies).
Communications Data
(e.g., content of emails, support tickets, chat messages, other communications.)
Collected when you contact customer support, respond to surveys, or communicate with us directly. To respond to your questions and requests; provide effective support; gather feedback to improve services; maintain a record of communications. Legitimate interest (customer service and service improvement).
Location Data
(e.g., coarse location from IP address; precise location from device GPS signal.)
Coarse location from IP address automatically; precise location with your explicit consent from device. To provide location-specific services (e.g., shipping cost estimates); show relevant products/vendors; for fraud and security analysis. Legitimate interest (coarse location); consent (precise location).
Information from Partners
(e.g., delivery status updates from logistics partners, payment confirmations from processors.)
Received from integrated third-party partners. To fulfill orders and keep you updated; confirm transactions; manage logistics and payments; resolve issues. Performance of a contract; legitimate interest (operational efficiency).
Marketing & Preferences Data
(e.g., communication preferences, marketing opt-ins, user interests.)
Collected when you opt-in to marketing or set communication preferences in your account. To send information about products, services, offers, and promotions that may interest you. Consent (withdrawable at any time).

4. How and Why We Share Your Information

We understand that you care how information about you is used and shared, and we appreciate your trust that we will do so carefully and sensibly. We do not sell your Personal Data to third parties for their marketing purposes. We only share your information in the limited circumstances described below, always for a specific purpose, and with a commitment to safeguarding your privacy.

Sharing Between Users to Fulfill Transactions

DMWM is a marketplace that connects Customers and Vendors. To make this connection work and to complete a transaction, we must facilitate the sharing of certain information between the two parties.

  • What we share: When a Customer purchases a product from a Vendor, we share the Customer's name, shipping address, and contact information (such as email or phone number) with the Vendor.
  • Why we share it: This sharing is essential for the Vendor to fulfill the order, arrange for shipping, and communicate with the Customer about their purchase. This is a fundamental part of the contract formed between the Customer and the Vendor when a purchase is made on our platform.

Sharing with Our Essential Third-Party Partners

We work with a select group of trusted partners who provide critical services that make DMWM possible. We only share the minimum information necessary for them to perform their function, and we require them through contractual agreements to protect your data and use it only for the purposes we specify.

Payment Processors (e.g., moneroo, pawaPay, Stripe)

  • What we share: Transaction amount, currency, and payment method details to securely process payments and issue payouts.
  • Why we share it: To authorize and complete financial transactions securely. We follow strict industry standards like PCI DSS and do not store full unencrypted credit card numbers on our servers.

Logistics and Shipping Partners (e.g., DHL)

  • What we share: Customer's name, shipping address, and contact information.
  • Why we share it: Required by couriers to deliver packages and provide tracking updates.

Technology Service Providers

  • What we share: Data necessary for foundational technical services like cloud hosting, data analytics, and customer support software.
  • Why we share it: To operate a secure, reliable, and scalable platform.

Sharing for Legal, Safety, and Security Reasons

We may share your information to comply with laws; enforce our policies; protect the rights, property, or safety of DMWM, our users, or others; or to detect and prevent fraud or security issues.

  • To comply with law: In response to valid legal requests.
  • To enforce policies: Including investigating potential violations.
  • To prevent harm: Detecting, preventing, or addressing fraud, security vulnerabilities, or technical issues.

Sharing in the Event of a Business Transfer

If DMWM is involved in a merger, acquisition, or sale of assets, your Personal Data may be transferred as part of that transaction. We will continue to ensure its confidentiality and notify you before it becomes subject to a different privacy policy.

5. Your Privacy Rights and How to Control Your Data

We believe you should have easy-to-use tools to access and control your Personal Data, no matter where you live. This section outlines your privacy rights and how to exercise them.

Your Fundamental Privacy Rights

  • Right to Access: Request a copy of your Personal Data.
  • Right to Correction: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data, subject to legal obligations.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Restrict Processing: Request temporary suspension of processing under certain circumstances.
  • Right to Object: Object to processing based on legitimate interests.
  • Right to Withdraw Consent: Withdraw consent at any time where we rely on it.

How to Exercise Your Rights

  • Contact Us Directly:Please email our privacy team at privacy@dmwm.africa with your request. Be sure to include sufficient details for us to understand and process your request efficiently, such as the specific information you wish to access, correct, or delete, along with any relevant account details to help us verify your identity.

Identity Verification

To protect your privacy and security, we may require additional information to verify your identity before responding to your request.

Managing Your Communications

You can opt-out of promotional emails at any time by clicking the “unsubscribe” link or adjusting your communication preferences in your account settings. Note that transactional and service-related communications will still be sent as necessary.

6. Our Use of Cookies and Tracking Technologies

Like most online services, we use cookies and similar tracking technologies to operate and improve our platform. This section explains what these technologies are, how we use them, and how you can control them.

What Are Cookies?

Cookies are small text files placed on your computer or mobile device by a website when you visit it. They store a small amount of information that can be read by the website on subsequent visits. They are widely used to make websites work or function more efficiently and to provide information to the site owners.

How We Use Cookies

We group our cookies into the following categories:

  • Strictly Necessary Cookies: Essential for browsing and using site features such as accessing secure areas, adding items to your cart, and checking out. These cookies do not require your consent.
  • Performance & Analytics Cookies: Collect information about how you use our services, such as pages visited and errors encountered, to help improve the website. Data collected is aggregated and anonymous.
  • Functional Cookies: Remember your choices (e.g., username, language, region) to provide enhanced, personalized features such as remembering login details.
  • Marketing & Advertising Cookies: Deliver advertisements more relevant to you, limit ad frequency, and measure ad campaign effectiveness. Usually placed by advertising networks with our permission.

Your Choices and How to Opt-Out

You can manage your cookie preferences through:

  • Cookie Consent Manager: Upon your first visit to our website, you will see a cookie banner explaining our use of cookies, with options to accept all or to choose which non-essential cookies you wish to enable. Please note that once you make your selection, the cookie banner will disappear, and currently, there is no persistent link on the website to adjust your preferences later. If you wish to change your cookie settings after making your initial choice, you may need to clear your browser cookies or revisit our site using a new browser or incognito window to reset your preferences.
  • Global Privacy Control (GPC): If your browser has GPC enabled, we will treat it as an opt-out request for selling or sharing Personal Data for targeted advertising, as required by laws such as CCPA.
  • Browser Settings: You can set your browser to block cookies or alert you when they are being sent. However, blocking all cookies may limit access to parts of our site.

7. Data Security and Retention: Protecting and Managing Your Information

Protecting your Personal Data is a top priority at DMWM. We have implemented a comprehensive security program with robust technical and organizational measures to safeguard your information against unauthorized access, alteration, disclosure, or destruction. We also have clear principles for how long we retain your data to ensure we do not keep it longer than necessary.

Our Security Safeguards

Our security measures include:

  • Encryption: We use SSL/TLS protocols to protect data in transit and encrypt sensitive data at rest in our databases.
  • Access Controls: Role-based access controls limit data access to authorized personnel only, based on job necessity.
  • Secure Payment Processing: We comply with PCI DSS standards for processing payment data securely.
  • Regular Audits and Monitoring: We conduct security audits, vulnerability testing, and monitor our systems for suspicious activity.
  • Employee Training: All employees undergo comprehensive training on data protection and security best practices.

Data Breach Notification

No method of internet transmission or electronic storage is completely secure. In the unlikely event of a data breach posing high risk to your rights and freedoms, we will notify you and the relevant data protection authorities without undue delay, typically within 72 hours.

Our Data Retention Principles

We retain your Personal Data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Retention periods depend on:

  • Account Data: Retained while your account is active. Deleted or anonymized upon closure unless required by law.
  • Transaction Data: Retained as required by financial and tax laws, typically several years after account closure.
  • Automatically Collected Data: Retained for shorter periods sufficient for security, troubleshooting, and service improvement.

8. International Data Transfers: A Global Marketplace

DMWM is building a platform to connect Africa with the world. To provide our services, your Personal Data may be processed and stored in countries outside your country of residence, including the United States and other jurisdictions where our service providers are located.

We understand that data protection laws vary by country and some may not provide the same level of protection as your home jurisdiction. When we transfer your Personal Data internationally, we take all necessary steps to ensure it is protected with appropriate legal safeguards.

Our commitment includes:

  • Legal Safeguards: For transfers from the EEA, UK, or Switzerland to countries not deemed adequate, we use Standard Contractual Clauses (SCCs) that require recipients to protect data to European standards.
  • Commitment to African Frameworks: We align our practices with regional frameworks such as the African Union's Malabo Convention and the AfCFTA Digital Trade Protocol to build trust within the African digital ecosystem.
  • Consistent Protection: We apply the same high standards described in this Privacy Policy regardless of where your data is processed.

By using our services, you acknowledge that your Personal Data may be transferred to and processed in countries outside your own.

9. Region-Specific Disclosures and Rights

To comply with diverse global privacy laws, this section provides additional information and outlines specific rights for users in certain regions.

For Users in the EEA, UK, and Switzerland

  • Data Controller: Duala Market Waterside Market LLC.
  • Data Protection Officer (DPO): Contact our DPO at dpo@dmwm.africa.
  • Legal Bases: Processing is based on performance of a contract, legal obligation, legitimate interests, or consent.
  • Your Rights: You have the right to lodge complaints with your local supervisory authority.

For Users in California

  • Your Rights: You have rights to know/access, delete, correct, opt-out of sale/sharing, and limit use of sensitive data.
  • How to Exercise: Currently, we do not offer a “Do Not Sell or Share My Personal Information” link in our website footer. However, you can exercise your rights by enabling Global Privacy Control (GPC) in your browser, which we honor as a valid opt-out request where applicable. If you wish to limit the use of your sensitive personal information or have any other privacy-related requests, please contact us directly at privacy@dmwm.africa with sufficient details to process your request.
  • Non-Discrimination: We will not discriminate against you for exercising your rights.

For Users in South Africa

  • Responsible Party: Duala Market Waterside Market LLC.
  • Information Officer: Contact dpo@dmwm.africa.
  • Your Rights: You may request access, correction, deletion, and object to processing on reasonable grounds.

For Users in Nigeria

  • Data Controller: Duala Market Waterside Market LLC.
  • Your Rights: Right to be informed, access, correct, erase, data portability, withdraw consent, and lodge complaints with the Nigeria Data Protection Commission (NDPC).

10. Policy Updates and How to Contact Us

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in practices or for operational, legal, or regulatory reasons. The “Last Updated” date will change accordingly. For material changes affecting your rights, we will provide prominent notice such as an email notification or website banner. Please review periodically to stay informed.

How to Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us:

  • General Privacy Questions: Email privacy@dmwm.africa
  • Data Protection Officer: Email dpo@dmwm.africa
  • By Mail: Duala Market Waterside Market LLC, Attn: Privacy Compliance Office, 2810 N Church St PMB 422571, Wilmington, DE 19802-4447, United States of America