How we look after your data.

What we collect

Account details: your name, email address, optional phone number and a securely hashed password. Orders: the resources you bought, amounts, payment method and payment references. Messages: anything you send through the contact form. Security logs: sign-in events with IP address and browser type, kept to protect your account.

Payments

Card and mobile-money details are entered directly on the secure pages of Chapa or the Commercial Bank of Ethiopia. We receive only the payment status and a reference number.

Website analytics

We count page visits using our own privacy-friendly analytics. We do not use advertising or tracking cookies, do not store your IP address for analytics, and respect “Do Not Track” and Global Privacy Control signals.

Bot protection

Our sign-in, registration, password-reset and contact forms use Cloudflare Turnstile to block automated abuse. When you use these forms, Cloudflare processes technical information such as your IP address and browser characteristics to tell people and bots apart; it does not use this for advertising. See Cloudflare’s privacy policy for details.

Cookies

We use only essential cookies: a session cookie to keep you signed in and your bag, and a security token that protects forms against forgery.

How we use your data

To provide your purchases, process payments, send receipts and account emails, reply to your messages, prevent fraud and meet legal and accounting obligations. If you subscribe to our newsletter, we email you occasionally; every email has an unsubscribe link.

Sharing

We share data only with the service providers needed to run the store (payment processors, email delivery, hosting, and Cloudflare for bot protection), or where required by law. We never sell your data.

Retention

Order records are kept as long as required for accounting. Security logs are kept for up to 12 months and analytics data for up to 180 days. Accounts whose email address is never verified, and that have no orders, are deleted after 7 days.

Your rights

Under Ethiopia’s Personal Data Protection Proclamation No. 1321/2024 you can access, correct and delete your personal data, and object to or withdraw consent for its use. From your account’s Profile page you can update your details, download a copy of your data and delete your account. For anything else, contact us at africacomplete61@gmail.com; we reply within 30 days.

When you delete your account we erase your personal details straight away. Records of paid orders are kept only for as long as Ethiopian tax and accounting law requires.

Security and breaches

Your data is stored on secured servers, transmitted only over encrypted connections, and accessible only to authorised staff using two-factor authentication. If a personal-data breach occurs that puts your rights at risk, we will notify the relevant authority and affected users without undue delay, as the Proclamation requires.