Privacy Policy

Storefront is operated by Dropship Trading (Pty) Ltd, a company incorporated in the Republic of Botswana (“we”, “us”). We provide software that lets an independent business run an online shop — catalogue, ordering, payment and delivery — under its own brand.

Questions about this policy, or about information we hold, go to privacy@areye.app.

We handle personal information in two capacities, and your rights differ depending on which applies.

As a controller, for the merchants who sign up: their account details, billing information and how they use the product. We decide what to collect and why.

As a processor, for the shoppers who buy from a merchant’s shop. That information belongs to the merchant. We hold and process it only on that merchant’s instructions, only to run their shop, and we do not sell it, mine it, or use it for our own purposes. A shopper wanting their information corrected or erased should ask the merchant they bought from; if they ask us, we will pass the request on and support the merchant in answering it.

From merchants: name, email address, phone number, business name and address, the bank or payment-gateway details needed to be paid, and records of their use of the platform.

From shoppers, on a merchant’s behalf: name, phone number, delivery address and location, email address where given, order and payment history, and messages exchanged about an order.

We do not store full card numbers. Card payments are handled by the relevant payment provider, which receives the card details directly.

Merchants may connect a WhatsApp Business account so their customers can receive order updates and, where enabled, browse and order inside WhatsApp. Where a merchant does this:

• We send the customer’s phone number and the details needed for the message — such as an order number, a total, or a delivery status — to Meta Platforms, so the message can be delivered.
• Where the merchant enables an in-chat catalogue, we send their product information (names, descriptions, prices, images and availability) to their own WhatsApp commerce catalogue.
• We receive messages sent to the merchant’s number so that an order placed in chat reaches the merchant, and so that a customer replying STOP is unsubscribed.
• We access a merchant’s WhatsApp Business account only where they have granted us access, and only to operate the features above on their instruction. Access ends when the merchant revokes it.

Meta’s own handling of this information is governed by their terms and privacy policy, not ours.

A customer can stop receiving messages at any time by replying STOP. We record that immediately and exclude the number from further non-essential messages.

• To take, fulfil and deliver orders, and to tell a customer what is happening with theirs.
• To let a merchant run their shop — catalogue, staff, reporting, payments.
• To take payment and to pay merchants what they are owed.
• To send marketing where the recipient has agreed to receive it, and to stop when they say so.
• To keep the platform secure, prevent fraud and abuse, and meet our legal obligations.

Only those who need it to do the job: payment providers, our delivery operation and its drivers, messaging providers (SMS, email and WhatsApp), and hosting and infrastructure suppliers. Each receives the minimum needed for their part and may not use it for anything else.

One merchant never sees another merchant’s data. Every record on the platform is bound to the merchant it belongs to, and that separation is enforced by the software, not by convention.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

Our servers are in Europe, and some of our suppliers operate elsewhere. So information may be transferred outside Botswana or South Africa. Where it is, we require the recipient to protect it to a standard comparable to this policy.

Order and payment records are kept for as long as tax and company law requires. Account information is kept while the account is open. Message logs, including WhatsApp delivery records, are kept for two years so a merchant can show what was sent. Opt-out records are kept indefinitely — deleting them would let someone be messaged again by mistake.

If you are a shopper: ask the merchant you bought from, or email privacy@areye.app and we will pass your request to them. Tell us the shop and the phone number or email you used.

If you are a merchant: email privacy@areye.app from your account address, or ask us from inside your dashboard. We will delete your account and your shop’s data within 30 days.

If you connected WhatsApp: revoking our access in Meta Business Manager immediately ends our access to your WhatsApp Business account. Ask us as above to delete the message records we hold.

We may keep what the law requires us to keep — chiefly transaction records — and opt-out records, for the reason given above.

You may ask what we hold about you, ask us to correct it, ask us to delete it, and object to marketing. Merchants in South Africa have these rights under POPIA; in Botswana, under the Data Protection Act. Write to privacy@areye.app and we will answer within 30 days.

The platform is not for children. Some shops sell age-restricted goods; the legal duty to check age sits with the licensed seller, and our software supports that check rather than replacing it.

We will post any change here and update the date at the top. Where a change materially affects merchants, we will tell them directly.