Buntu Privacy Notice

When you create a Buntu account, we process the information you enter, such as your name, phone number, e-mail address and password. We ask for your date of birth to confirm that you are old enough to hold an account, and you can tell us your gender if you want to. We also process your account settings, such as your preferred language.

Buntu is for adults. You need to be 18 or older to hold an account. We do not knowingly keep a child’s data, and if we learn that an account belongs to someone under 18 we close it and delete the personal data held with it.

We process the contact details you give us, such as your phone number, e-mail address and delivery addresses. Because many addresses are easier to describe than to find, this can include directions or landmarks you add to help us reach you.

When you place an order, we process what you ordered, when you ordered it, the price, your delivery address and the status of your order. This also includes returns, cancellations and complaints.

We process the payment method you choose, such as mobile money, and the information needed to confirm a payment, such as the phone number used and a transaction reference.

If you contact us by phone, e-mail, chat or social media, we process the content of the conversation and the contact details you use, so that we can answer you and keep a record of your request.

If you write a review, rate a product or upload a photo, we process that content together with the name you choose to display.

Whenever you use our websites or app, your device automatically sends technical information. We refer to this data as "device and access data". It includes, for example, your IP address, device type, operating system, browser, language settings, and the date and time of your visit.

We use your account, contact and order information to accept your order, confirm it to you, and keep you informed about its status.

We use your name, phone number and delivery address to bring your order to you.

We use your payment information to request and confirm your payment, to issue refunds and to keep the records we need for our accounts.

We use your messages and order information to answer your questions, resolve complaints and handle returns.

We use order, payment, device and access data to detect and prevent fraud and misuse, and to protect you, our partners and Buntu.

We analyse how our websites and app are used, in pseudonymised form, to understand what works well and what does not. This helps us decide what to show, what to stock and what to fix.

Where we ask for your consent for a specific purpose, we use your data only for that purpose. You can withdraw your consent at any time.

Personalisation means that the products and content we show you are based on your previous activity, such as orders you have placed, products you have viewed and the language you use.

For personalisation we use your order information, information about the products you have viewed, and your settings. We do not use the content of your messages for this purpose.

Every time you access our websites or app, our servers record device and access data in log files. We use these logs to provide the service, to fix errors and to keep our systems secure.

We use cookies and similar technologies to keep you signed in, remember your basket and language, and understand how our services are used. You can find more information in chapter 12 and on the Data Preferences page.

When you sign in, we check your details and may ask you to confirm a code sent to your phone. We record sign-in attempts to protect your account against unauthorised access.

We remember whether you use Buntu in Kinyarwanda, English or French, so that you do not have to choose again on every visit.

We use our social media pages to share news and products, and to talk with customers. If you comment on a post or send us a message there, we process that content to answer you.

When you visit our pages, the social network processes data about you, such as your profile and your interactions, according to its own privacy policy. We may receive general statistics from the network about visits to our pages. These statistics do not identify you.

If you allow notifications in the Buntu app, we may send you updates about your orders. You can switch notifications off at any time in your device settings.

We work with providers of hosting, communication and other technical services. They process data only on our instructions and are bound by written agreements.

We pass your name, phone number and delivery address to the people and partners who deliver your order.

To process your payment, we exchange the information needed with your mobile money provider, such as the phone number used and the amount.

If you buy a product from a seller other than Buntu, we pass on the information that seller needs to fulfil your order.

We pass on data to authorities, courts or other third parties where we are legally required to do so, or where it is necessary to protect our rights or the rights of others.

You can ask us which personal data we hold about you, what we use it for and who we share it with.

If your data is incorrect or incomplete, you can ask us to correct it.

You can ask us to delete your data. Where we are required to keep certain records, such as records of a sale, we will restrict them instead of deleting them.

You can ask us to restrict the processing of your data, for example while we check whether your data is correct.

You can object to the processing of your data for marketing at any time. Where we process your data based on your consent, you can withdraw your consent at any time, with effect for the future.

You can ask us to provide the data you have given us in a common, machine-readable format.

We store your personal data for as long as is necessary to fulfil the purposes described in this Privacy Notice, in particular to fulfil our obligations to you and our legal obligations.

If you close your account, we delete your account data. Where we are not permitted to delete certain data, such as records of sales, we keep it and restrict it from any further use.

We keep messages and support records while your request is open and for a limited period after it has been closed.

Usage data that we analyse to improve our services is stored against a random identifier rather than your name, and is deleted when it is no longer needed.

The version on this page is always the current one. If we make a significant change, we will let you know before it takes effect.

If you have questions about this Privacy Notice or about data protection at Buntu, you can contact us at any time:

Cookies are small text files stored on your device when you visit a website. Similar technologies, such as local storage, work in a comparable way.

• Necessary: These are required for our services to work, for example to keep you signed in, remember your basket and save your language.
• Analytics: These help us understand how our services are used, so that we can improve them.
• Marketing: We do not currently use cookies for advertising.

You can find what we set, and what each item is for, on the Data Preferences page. You can also delete cookies or block them in your browser settings.

Data Preferences →