Privacy

The operator of NAFLIS MALL is NAFLIS AFRICA LTD..

What we collect

  • Shop owners and partners: name, phone number, shop or business name, shop details, mobile money details you choose to add, payment evidence you upload, and the invite or referral code you used.
  • Buyers: the name, phone number, delivery address and instructions you type when you order, and any payment evidence or messages you send on your order page. Buyers do not need an account.
  • Shop visits: when you open a shop we count the visit (which shop and product you looked at, whether you added to the cart, and how you arrived, such as from a WhatsApp link). This uses a random identifier stored on your device. It carries no name, phone number or email, and the shop owner only sees totals. Shop owners' own visits are not counted. Referral link visits are counted with a one-way code that changes every day, not your address.
  • Site visits: as you move around the site we note which pages you open and how long you stay on each, how you arrived (for example a marketer's link, WhatsApp or a search), your device type, and the country and town your connection appears to be in. This uses a random identifier stored on your device. We do not keep your IP address, name, phone number or anything you type, and order pages are recorded without their private link. Visits are kept for about a year. Visits by our own team are not counted.
  • Deliveries: to deliver an order, the shop and anyone the shop names as a delivery person see your name, phone number, address and delivery instructions. A delivery person is given a private link that shows only what is needed to deliver (no prices or payment details). We keep a record of each step of an order with its time, including problems a delivery person reports and wrong delivery codes. If you add an email address to an order we use it only for updates about that order. Your delivery code is stored scrambled and is shown only on your order page.
  • Followers: if you follow a shop, a random identifier stored on your device. It carries no name, phone or email. If you turn on alerts we keep your browser's notification address so we can send them.
  • Verification: when you sign up or sign in, we text or email you a one-time code. We keep only a scrambled copy of it for a few minutes. If you add an email address or turn on two-step sign-in, we keep that too. Administrators also have the devices they sign in from noted, so a new one can be flagged.
  • Searches: words typed into a shop's search box are counted to show the shop what people look for. Phone numbers, emails and long numbers are removed, and the shop sees totals, not individuals.

Why we use it

To run orders and payments between buyers and shops, to bill shop owners, to show shop owners what happens in their shop, to send the alerts you asked for, and to prevent fraud. We do not sell personal information.

Who can see it

  • The shop you order from sees your order details. Only the shop that receives your payment sees your payment evidence.
  • Partners see the name, shop name and progress of people they referred, never their phone numbers.
  • Administrators see account and order records so they can confirm payments and resolve problems.
  • If you were invited with a CFLED training portal code, a masked phone number is shared with that portal to credit your inviter.

Backups

A full copy of the database is made every day, encrypted, and kept for 14 days in separate storage so the service can be restored if something goes wrong.

On your device

Signed-in users have one session cookie. Your browser also stores your recent order codes, your delivery details so you do not retype them, your cart, and the follower identifier. You can clear these in your browser at any time.

Your choices

You can ask to see, correct or delete your information, or turn off alerts, by contacting us through Help and contact. Some records, such as completed orders and payment history, may have to be kept.