Privacy Policy

Zedima ("Zedima", "we", "us") operates the zedima.rw marketplace and mobile experience from Kigali, Rwanda, connecting customers with multiple suppliers for delivery across Rwanda. This policy explains what personal data we collect, why, and the choices you have.

We collect the information you give us directly and a limited amount generated by using the service:

• Account details: name, email address, phone number, and password (stored as a salted hash — we never store your password in plain text).
• Order & delivery details: delivery address, GPS coordinates when you drop a pin, and order history.
• Payment details: for Mobile Money orders, the phone number you pay from and the transaction reference returned by the mobile money provider. We do not receive or store your mobile money PIN — that stays between you and your provider.
• Communications: one-time verification codes sent by email/SMS, and any messages you send our support team.
• Usage data: pages viewed, searches, and device/browser information, collected automatically to keep the site working and secure.

• To create and secure your account, and verify it's really you (OTP codes, login alerts).
• To process, fulfil, and deliver your orders, including sharing your delivery address and phone number with the assigned delivery rider.
• To communicate order status, respond to support requests, and send service updates.
• To detect and prevent fraud, abuse, and unauthorized access.
• To improve the marketplace — what we stock, how search results rank, and site performance.

We do not sell your personal data. We share it only where necessary to run the service:

• Suppliers fulfilling your order receive the order line items needed to prepare them.
• Delivery riders receive your delivery address, phone number, and live order status.
• Payment providers (MTN Mobile Money) receive your payment phone number and order amount to process the transaction.
• Service providers we use to run the platform — email and SMS delivery, hosting, and infrastructure — process data on our behalf under contract.
• Authorities, where required by Rwandan law or to protect our rights and users' safety.

We keep account and order data for as long as your account is active and for a reasonable period afterward to meet tax, accounting, and dispute-resolution obligations. You can ask us to delete your account at any time — see Section 7.

Passwords are hashed, sessions are signed, and payment credentials never touch our servers — Mobile Money charges are authorized directly on your phone. No system is perfectly secure, but we apply industry-standard practices to protect your data and will notify affected users if a breach puts their information at meaningful risk.

• Access, correct, or update your account details from your account settings at any time.
• Request a copy of the personal data we hold about you.
• Request deletion of your account and associated personal data, subject to records we must legally retain (e.g. completed order/tax records).
• Opt out of non-essential marketing messages — order and account notifications remain, since they're needed to run the service.

To exercise any of these, contact us using the details in Section 9.

We may update this policy as the service evolves. Material changes will be reflected by the "Last updated" date above, and where appropriate we'll notify you directly.

Questions about this policy or your data? Reach us at care@zedima.rw.