Privacy policy
Effective date: 17 April 2026
weenorth (“we”, “us”) is an artisan marketplace operated by Silentechs Ltd in cooperation with WEE-North. This policy explains what personal information we collect, how we use it, who we share it with, and the rights you have under the Ghana Data Protection Act, 2012 (Act 843) and comparable frameworks such as the EU GDPR.
1. Information we collect
- Account information you provide at registration: full name, email, phone number, password (stored hashed), and account type (buyer / artisan / seller).
- Profile and listing content you publish: bio, skills, region, profession, photos, videos, product images, portfolio, ID documents for KYC.
- Transaction metadata for subscriptions processed via Hubtel: plan, amount, currency, Hubtel client reference, payment status. We never receive or store your full card or mobile-money credentials.
- Engagement events: page views, WhatsApp and call-click counters. IP addresses are pseudonymised server-side using a keyed HMAC before storage — we do not keep raw IPs for analytics.
- Communications: in-app messages between you and other users, reviews you post, complaints you file, and emails we send you (delivery logs only; the body is not re-stored after dispatch).
- Cookies: a session cookie (required) and optional analytics cookies if you consent. See the cookie banner on first visit.
2. How we use it
- Authenticate your account and keep it secure.
- Display your profile or store to matching buyers in Ghana.
- Operate subscription billing, KYC review, and dispute handling.
- Send service emails (welcome, verification, reset, approvals, invoices).
- Produce aggregate, non-personal platform metrics.
- Detect fraud and enforce our Terms of Service.
We do not sell your personal information, and we do not use it for third-party advertising or behavioural retargeting.
3. Sharing
We share personal information only with:
- Hubtel (payment processing) — billing details for subscriptions.
- Brevo (email delivery; Resend as secondary) — the minimum data needed to send you transactional email.
- Cloudflare R2 (media storage) — uploads you publish, under per-user scoped paths.
- Buyers you contact — the WhatsApp number and display name you chose to publish on your profile or store.
- Law-enforcement or regulators when legally compelled, after verifying the request.
4. Retention
Account data is kept for the lifetime of your account plus 90 days. Engagement events are retained for 24 months in identifiable form and then aggregated. Financial records are kept for 7 years to comply with Ghanaian tax law. Deleted-account requests are honoured within 30 days (see Section 6).
5. Security
Transport is TLS-encrypted end-to-end. Passwords are hashed with a modern memory-hard function. Session tokens are SHA-256-hashed before DB storage. Rate-limiting and IP-hash pseudonymisation defend against brute force and reversing. Role-based access controls separate buyer, artisan, seller, and admin surfaces.
6. Your rights
Under Act 843 and GDPR you have the right to:
- Accessa copy of your personal data (email privacy@weenorth.com with “DSAR” in the subject).
- Correct inaccuracies — most fields are editable in your dashboard; email us for anything else.
- Delete your account and all personally identifying data. Go to Settings → Delete account. Cascade runs within 30 days, with a grace window during which a sign-in restores the account.
- Object to processing, or restrict it where lawful bases permit.
- Lodge a complaint with the Data Protection Commission of Ghana (dataprotection.org.gh).
7. Changes
We will post any material change to this policy at this URL and email account holders at least 14 days before it takes effect.
8. Contact
Email privacy@weenorth.com for any data-protection question. Data Controller: Silentechs Ltd, Accra, Ghana.