Privacy Policy
Gephra Sustaina
Last Updated: December 15, 2025
Operated by Gephra Ltd
1. Introduction
Gephra Sustaina ("we", "us", "our") operates an online marketplace connecting vendors, makers, and buyers of sustainable products and services. We respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, store, share, and secure personal information when you interact with the Gephra platform through our website, mobile access, or services.
By creating an account, browsing the website, becoming a vendor, or purchasing products, you agree to the terms in this Privacy Policy.
2. What Data We Collect
We may collect the following:
2.1 Information You Provide
- •Name and contact details
- •Account credentials
- •Addresses (billing/shipping)
- •Vendor business data (legal name, documents, compliance forms)
- •Product sustainability data
- •Communication messages
- •Uploaded files
- •Customer orders
2.2 Automatically Collected Data
- •IP address
- •Device/browser information
- •Platform activity analytics
- •Cookies and session data
- •Approximate location
- •Page behaviour
2.3 Financial Data
Payment processing is handled through secure third-party gateways. We do not store full card numbers or mobile money PINs.
3. How We Use Your Data
We process your information to:
- •Register and maintain user/vendor accounts
- •Process orders, subscriptions, and payouts
- •Communicate about purchases, quotes, and requests
- •Verify identity for compliance
- •Enhance platform performance
- •Prevent fraud
- •Produce sustainability analytics
- •Offer personalised marketplace experiences
All uses are based on contract fulfilment, consent, legitimate interest, or legal obligations.
3.1 Lawful Basis by Purpose
- •Account creation, purchases, and order fulfilment — Contract
- •Fraud prevention and platform security — Legitimate interest
- •Marketing communications — Consent (opt-in)
- •Financial and tax records — Legal obligation
- •Analytics improvements — Consent where required
4. Sharing Your Information
We may share your information only with:
- •Payment processors
- •Logistics and shipping partners
- •Marketplace vendors (only when required to complete an order)
- •Technical infrastructure providers
- •Government or regulatory bodies when required by law
We do not sell your data to advertisers or external companies.
5. Cookies & Tracking
We use essential cookies to maintain sessions and platform security. Analytics cookies are optional and are only used after consent where required. Cookie settings may be controlled in your browser.
6. Data Retention
We retain information only as long as necessary for:
- •Account activity
- •Legal compliance
- •Tax and transactional records
- •Marketplace operation
After expiry, we delete or anonymise data.
7. Security Measures
We apply industry standard measures:
- •Encryption
- •Access controls
- •Password hashing
- •Monitoring
- •Secure payment processing
No platform can be 100% secure, but we continually update safeguards.
8. Your Rights
Where applicable, you may request to:
- •Access your personal data
- •Correct or update it
- •Delete your account
- •Withdraw consent
- •Object to marketing
- •Export your data
9. International Processing
Your information may be stored or processed outside your country through secure cloud infrastructure. Where international transfers apply, we use appropriate safeguards such as contractual protections, security controls, and vendor due diligence.
10. Children
We do not knowingly collect data from children under 16.
11. Third-Party Links
Our site may contain external links. Those sites have their own policies and we are not responsible for their practices.
12. Policy Changes
We may update this Privacy Policy. New versions become effective upon posting. Notice will be provided if significant changes are made.
13. How to Contact Us
Email: privacy@gephra.com
Company: Gephra Ltd, Rwanda
More contact information will be added as required.