Privacy policy

This text is a working template drawn up for a B2B sourcing company based in Benin. It must be reviewed and validated by legal counsel before final production use and does not constitute legal advice.Details still to be completed in Admin → Settings: societe, adresse, ville, email, telephone.

1. Data controller

The controller of the personal data collected on AFRICTECH SOURCING (https://africtech-sourcing.vercel.app) is [societe to be completed], [adresse to be completed], [ville to be completed], Bénin. Contact for any data-related question: [email to be completed] · [telephone to be completed].

This policy applies within the framework of the personal data protection rules in force in the Republic of Benin (Law No. 2017-20 on the Digital Code, Book V) and, where applicable, the rules of the user's country of residence.

2. Data collected

Account data: name, email, phone, company, country, language, password (stored only in encrypted form).
Request and order data: equipment sought, quantities, specifications, delivery addresses, attachments, messages, accepted proposals, invoices.
Supplier data: company information, catalogue, supporting documents (registration, certificates, certifications), quotations.
Technical data: log of logins and sensitive actions (date, action, account), required for security and traceability.
Payment data: reference, amount, currency, status and payment method communicated by the payment provider. No full card number or security code is collected or stored by the Company.

3. Purposes and legal bases

Performance of the sourcing service (processing requests, inviting suppliers, proposals, orders, invoicing): performance of the contract.
Account management, security, fraud prevention, login attempt limitation: legitimate interest and legal obligations.
Service emails (acknowledgements, proposals, invoices, reminders): performance of the contract. No commercial prospecting is sent without prior consent.
Accounting and tax obligations: legal obligations.

4. Recipients

Data is accessible to the Company's authorised staff. Invited Suppliers receive only the technical description of the request and, upon the Company's decision, the documents the Customer has authorised for sharing; they do not receive the Customer's contact details before the confirmation of an order that requires it. The following technical providers process data on behalf of the Company: hosting and database (Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, États-Unis), transactional email sending, online payment provider (FedaPay) for payments made online. Data may be hosted outside the user's country; the Company ensures its providers offer appropriate security guarantees.

5. Retention periods

Account data is kept for the duration of the relationship and then archived three years after the last activity. Requests, proposals, orders and invoices are kept for the statutory retention period for commercial and accounting documents (ten years). Technical logs are kept for twelve months. A Supplier's supporting documents are deleted when its account is closed, unless legally required.

6. Security

Exchanges are encrypted (HTTPS). Passwords are irreversibly encrypted. Access to data is limited by role (customer, supplier, team). Accounts are temporarily locked after several failed login attempts. Sensitive actions are logged.

7. Cookies

The Platform uses only a session cookie strictly necessary for login and for the service to work, plus local browser storage for display preferences. No advertising cookie or third-party tracking tool is used.

8. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, under the conditions provided by law. You may exercise these rights by writing to [email to be completed] or by post to [societe to be completed], [adresse to be completed], [ville to be completed], Bénin. A reply is given within a reasonable time. You may also contact the competent data protection authority (in Benin: the Autorité de Protection des Données Personnelles, APDP).

9. Changes

This policy may be updated; the applicable version is the one published on the Platform.