Privacy Policy

1. Who we are

KASAROSE MARKET is the online marketplace of the KASAROSE LOGISTICS group. For the purposes of data protection law we are the data controller of the personal data described in this policy.

You can reach our privacy contact at support@kasabazaar.com or on +233 50 972 5081.

We handle personal data in line with Ghana's Data Protection Act, 2012 (Act 843). Where you contact us from outside Ghana, we apply the same standards to your data.

2. The data we collect

We never see or store your full card number. Card and Mobile Money details are captured directly by our payment processors — Paystack (Ghana) and Stripe (international) — on their own systems. We receive only the result of the transaction and a reference.

3. How we use your data

We use your personal data for the following purposes, on the following legal bases:

• To perform our contract with you — creating your account, processing orders and payments, arranging delivery, handling returns and refunds, and paying vendors their earnings.
• For our legitimate business interests — preventing fraud and abuse, securing the platform, resolving disputes between shoppers and vendors, improving the marketplace, and understanding which products and categories are in demand.
• To meet legal obligations — keeping tax and accounting records, responding to lawful requests from regulators, and meeting the record-keeping rules our payment processors impose on us.
• With your consent — sending marketing emails. You can withdraw consent at any time, without affecting anything we did before you withdrew it. We set no advertising or profiling cookies at all; see our Cookie Policy.

We do not sell your personal data, and we do not use it to make automated decisions that produce legal effects for you.

4. Who we share your data with

KASAROSE MARKET is a marketplace, not the seller of record for most items. That means some sharing is unavoidable:

• Vendors. When you place an order, the vendor fulfilling it receives your name, delivery address, phone number and the contents of that order — and nothing else. A vendor may use that data only to fulfil and support your order, and is contractually barred from marketing to you off-platform or selling your details on.
• Delivery partners. Couriers and riders receive the delivery address, recipient name and phone number needed to complete the drop-off. Where the group's own companies carry the parcel, see section 5.
• Payment processors. Paystack and Stripe process the payment and receive the data they need to do so and to satisfy their own anti-fraud and regulatory obligations.
• Service providers. Hosting, email delivery, SMS and error-monitoring providers process data strictly on our instructions under written contracts.
• Authorities. Where we are legally required to disclose data, or where disclosure is necessary to establish or defend a legal claim.

5. Sharing within our group

KASAROSE MARKET is part of the KASAROSE LOGISTICS group. The group's other companies are:

• KASAROSE LOGISTICS (Parent company — freight, real estate and property management) — kasarose.com
• Neoride Africa (Mobility and last-mile transport) — neorideafrica.com

We share personal data with these companies only where there is a specific operational reason to do so, and only the minimum needed:

• KASAROSE LOGISTICS receives recipient name, delivery address, phone number and parcel details for orders it carries — including nationwide road freight and any item shipped in from abroad. It also processes tracking events so you can follow a shipment.
• Neoride Africa receives recipient name, delivery address and phone number for last-mile deliveries its riders complete in Kumasi and Ejisu.

Each group company is responsible for its own use of the data it receives and publishes its own privacy policy on its own site. Marketing lists are not shared between group companies: opting in to KASAROSE MARKET emails does not opt you in to anyone else's.

6. International transfers

The group operates in both Ghana and the United States, and some of our service providers are based outside Ghana. Where personal data leaves Ghana, we transfer it only to recipients bound by written contractual terms requiring a level of protection equivalent to that required by Act 843, and only for the purposes described in this policy.

7. How long we keep your data

• Account data — for as long as your account is open, then up to 12 months after closure in case you return.
• Order and payment records — six years from the end of the relevant financial year, to meet tax and accounting requirements.
• Vendor records — six years after the vendor relationship ends, for the same reason.
• Technical logs — 90 days, unless retained longer as part of a security investigation.
• Marketing preferences — until you withdraw consent, plus a suppression record so we do not accidentally email you again.

8. Your rights

Under Act 843 you have the right to:

• ask what personal data we hold about you and get a copy of it;
• have inaccurate or incomplete data corrected;
• ask us to delete data we no longer have a lawful reason to keep;
• object to processing based on our legitimate interests, and to stop direct marketing at any time;
• withdraw a consent you previously gave;
• complain to the Data Protection Commission of Ghana if you believe we have handled your data unlawfully.

Most of this you can do yourself from your account profile. For anything else, write to support@kasabazaar.com. We respond within 30 days and never charge for a first request.

9. Security

All traffic to KASAROSE MARKET is encrypted in transit with TLS. Passwords are stored using a one-way hash and cannot be read by our staff. Access to customer records inside the group is limited to staff who need it for their role and is logged. Payment card data never touches our servers.

No system is perfectly secure. If a breach is likely to put your rights at risk, we will notify you and the Data Protection Commission without undue delay.

10. Children

KASAROSE MARKET is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We update this policy when our practices change. The effective date at the top of this page always shows the current version. Where a change materially affects your rights, we will tell you by email or with a notice on the site before it takes effect.

See also our Cookie Policy for how we use cookies and similar technologies, and our Terms of Use for the rules that govern your use of the marketplace.