Last updated: March 2026
We collect information you provide directly: name, email, phone number, shipping address, and payment details. We also collect usage data: pages visited, device type, browser, IP address, and interaction patterns. Sellers provide additional business information including store details and product listings.
We use your information to: (a) provide and maintain the platform; (b) process orders and payments; (c) send order updates and notifications; (d) improve our services; (e) prevent fraud and ensure security; (f) communicate about your account and subscriptions.
We share your information with: (a) sellers when you place an order (name, address, phone for delivery); (b) payment processors (PayGate, M-Pesa) to complete transactions; (c) email service providers for transactional messages. We do not sell your personal data to third parties.
We use cookies for: session management, language preference, and authentication. We use browser local storage for: cart contents, shipping address cache, and UI preferences. You can clear these through your browser settings.
We protect your data with: HTTPS encryption, secure session tokens, CSRF protection, rate limiting, and input sanitization. Passwords are hashed and never stored in plain text. Payment card details are never stored on our servers.
Seller store information (name, description, products, location) is publicly visible. Seller email, phone, and financial details are kept private and only shared as needed for order fulfillment and platform operations.
You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) request deletion of your data; (d) export your data; (e) opt out of marketing communications. Contact support to exercise these rights.
We retain account data for as long as your account is active. Order records are kept for 5 years for legal and tax purposes. You may request account deletion, after which personal data will be removed within 30 days (except where legally required to retain).
MyShop is not intended for children under 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it.
Your data may be processed on servers outside Mozambique (our hosting is on Vercel's global infrastructure). We ensure appropriate safeguards are in place for any international data transfers.
We may update this privacy policy periodically. We will notify you of significant changes via email or platform notification.
For privacy-related questions or requests, contact us at privacy@myshop.co.mz or through the Support page.
