Legal

Privacy Policy

This policy explains what data PepeaDuka collects, why we collect it, and how we protect it when businesses use our cloud point-of-sale, stock, customer, billing, and support tools.

Last updated: 17 April 2026

1. Scope

This Privacy Policy applies to PepeaDuka websites, landing pages, trial request forms, customer onboarding, billing support, and the PepeaDuka application used by shops and service businesses. It covers personal data we collect directly from you, automatically through our services, or from trusted providers that help us deliver the platform.

2. Data we collect

We may collect account details such as your name, shop name, phone number, email address, town, business type, and preferred onboarding information when you request a trial, create an account, contact support, or subscribe to a package.

When you use the platform, we may process sales records, stock movements, receipts, customer contact details, invoices, payment status, device logs, browser details, IP addresses, and audit history needed to run the service and secure the account.

We may also collect billing and transaction details through our payment and messaging partners, including service providers used for card or mobile-money processing, messaging delivery, and support workflows.

3. How we use data

We use data to provide the service, set up trial and paid accounts, process payments, send receipts and service notices, respond to support requests, prevent fraud, improve reliability, and understand how businesses use the platform.

We may use contact information to send onboarding guidance, billing alerts, password-reset messages, verification emails, and service updates. We only send promotional communication where allowed by law or where you have chosen to receive it.

4. Customer data inside the platform

When a business uses PepeaDuka to store customer lists, receipts, orders, or stock activity, PepeaDuka acts as a service provider processing that business data on the customer’s instructions. The business using PepeaDuka remains responsible for making sure it has a valid reason to collect that data and for handling customer-facing notices or consents where required.

5. Sharing

We share data only with staff, contractors, and service providers who need it to operate PepeaDuka, such as hosting providers, payment processors, email and messaging providers, analytics and error monitoring services, and customer support tools.

We may disclose data if required by law, court order, or a valid regulatory request, or where needed to investigate abuse, enforce our Terms of Service, or protect users, PepeaDuka, or the public.

6. Storage, retention, and security

We use administrative, technical, and operational controls designed to protect your data against unauthorized access, misuse, disclosure, or loss. No internet service can be guaranteed 100% secure, but we work to reduce risk and monitor the platform for abuse.

We keep data for as long as needed to provide the service, comply with legal or tax obligations, resolve disputes, maintain backups, and enforce our agreements. After that, we delete or anonymize data where reasonably possible.

7. Your choices and rights

You may request access to, correction of, or deletion of personal data that PepeaDuka controls directly, subject to legal and operational limits. If your request relates to data stored in a customer’s PepeaDuka account, please contact that business first because they control that data.

You may also ask us to update communication preferences or raise a privacy concern using the contact details below.

8. Children

PepeaDuka is built for businesses and is not intended for children. We do not knowingly collect personal data from children for our own direct purposes.

9. Changes and contact

We may update this Privacy Policy from time to time to reflect product, legal, or operational changes. The latest version will be posted here with the updated date. For privacy questions or requests, contact info@pepeaduka.com or use WhatsApp support through the public PepeaDuka site.