Privacy Policy

1. Who we are

Atrady Limited ("Atrady", "we", "us") is a company registered in Ghana, based in Accra. We run three websites: atrady.com (this site), buy.atrady.com (goods in stock in Ghana) and business.atrady.com (goods imported to order). One customer account works on both storefronts, so this one policy covers all three. We are the data controller for the personal data described here, under Ghana's Data Protection Act, 2012 (Act 843).

2. What we collect

Only what an order or an account needs:

• Account: your name, email address and, if you set one, a password (stored hashed - we never see it). Signing in by one-time code uses your email only.
• Orders: what you ordered, quantities, colours or sizes, the shipping method you chose, your WhatsApp or phone number, and a delivery address when we deliver to you.
• Payments: the amount, date, reference and status of each payment. Card and Mobile Money details are entered on Paystack's secure page and are never stored by Atrady; we receive only a confirmation and a masked reference.
• Messages: reviews and questions you post on a product, product requests, "interested" and "notify me" sign-ups, and what you tell us on WhatsApp, email or the phone.
• Warehouse and resale: for cartons kept with us - what is stored, deliveries you request, storage balances, and whether you flagged stock for resale.
• Device and usage: the pages you visit, the device and browser you use, your approximate location from your IP address, and - if you allow them - push notifications. See section 6 for analytics and advertising cookies.

3. Why we use it

• To take, price, ship, store and deliver your orders, and to keep you updated about them by email, in-app notification, push notification or WhatsApp.
• To run your account: sign-in codes, order history, saved addresses, your warehouse stock and any storage or shipping balance due.
• To answer you when you contact us, and to send new-product digests and reminders you have signed up for - every email has an unsubscribe link.
• To match stock you have flagged for resale with buyers, sharing only what is needed to make the sale (the product and quantity, not your contact details until you agree).
• To prevent fraud, enforce our terms and comply with law - including tax and customs records for imports.
• To understand how the sites are used and to measure advertising, so we can improve them (section 6).

4. Who we share it with

We do not sell personal data. We share it only with the services that make an order happen, each bound to use it for that purpose:

• Paystack - processes payments (Mobile Money and cards).
• Email and messaging providers - deliver our order emails, sign-in codes and notifications (we currently use Resend and a standard SMTP mail service).
• Cloudinary - hosts product and review photos you upload.
• Shipping, clearing and delivery partners - receive the name, phone number and address needed to move and hand over your goods.
• Hosting and database providers - store the sites' data on our behalf.
• Analytics and advertising platforms (Google, Meta, TikTok) - receive usage and conversion data as described in section 6.
• Authorities - where the law requires it, for example customs declarations or a lawful request.

Some of these providers process data outside Ghana. Where they do, we rely on their contractual commitments to protect it to a standard consistent with Act 843.

5. Where your data lives and how long we keep it

Account and order records are kept for as long as you have an account and for seven years after your last order, because tax and import records must be retained. Marketing sign-ups are kept until you unsubscribe. Reviews stay on the product unless you ask us to remove them. Usage data is kept in aggregate; identifiable analytics data is retained for the period set in the tool (14 months in Google Analytics). You can ask us to delete your account at any time (section 8); we then remove or anonymise everything not required by law.

6. Cookies, analytics and advertising

Our sites use a small number of cookies and similar technologies: strictly necessary ones to keep you signed in and remember your cart, and - once enabled - Google Analytics 4 to understand which pages and products people use, and the Meta Pixel and TikTok Pixel to measure whether an advert led to a sign-up or an order and to show relevant adverts to people who visited. These platforms may set their own cookies and combine the data with information they already hold about you under their own policies. You can control cookies in your browser settings, opt out of interest-based adverts in your Meta, TikTok and Google ad settings, and install Google's Analytics opt-out add-on.

7. How we protect it

All traffic to our sites is encrypted (HTTPS). Passwords are hashed. Access to customer data inside Atrady is limited to staff who need it to serve you, and admin access is logged. Payment details never touch our servers. No system is perfectly secure; if we ever learn of a breach affecting your data, we will tell you and the Data Protection Commission as the law requires.

8. Your rights

Under Act 843 you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct anything that is wrong (you can edit your profile and addresses in your account);
• delete your account and personal data, subject to records we must keep by law;
• stop sending you marketing - use the unsubscribe link in any email or tell us;
• object to, or restrict, a particular use of your data.

Write to us using the details in section 10 and we will respond within 30 days. You also have the right to complain to Ghana's Data Protection Commission (dataprotection.org.gh).

9. Children

Our sites are for adults. We do not knowingly collect data from anyone under 18; if you believe a child has given us data, contact us and we will delete it.

10. Contact

Atrady Limited, Accra, Ghana. Email: atrady.ltd@gmail.com. WhatsApp: 0249905548. For data-protection requests, put "Privacy" in the subject line.

11. Changes

When this policy changes we update the date at the top and, for material changes, tell account holders by email. Continuing to use the sites after a change means you accept the updated policy.