Privacy Policy

Gephra Sustaina

Last Updated: December 15, 2025

Operated by Gephra Ltd

1. Introduction

Gephra Sustaina ("we", "us", "our") operates an online marketplace connecting vendors, makers, and buyers of sustainable products and services. We respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, store, share, and secure personal information when you interact with the Gephra platform through our website, mobile access, or services.

By creating an account, browsing the website, becoming a vendor, or purchasing products, you agree to the terms in this Privacy Policy.

2. What Data We Collect

We may collect the following:

2.1 Information You Provide

  • Name and contact details
  • Account credentials
  • Addresses (billing/shipping)
  • Vendor business data (legal name, documents, compliance forms)
  • Product sustainability data
  • Communication messages
  • Uploaded files
  • Customer orders

2.2 Automatically Collected Data

  • IP address
  • Device/browser information
  • Platform activity analytics
  • Cookies and session data
  • Approximate location
  • Page behaviour

2.3 Financial Data

Payment processing is handled through secure third-party gateways. We do not store full card numbers or mobile money PINs.

3. How We Use Your Data

We process your information to:

  • Register and maintain user/vendor accounts
  • Process orders, subscriptions, and payouts
  • Communicate about purchases, quotes, and requests
  • Verify identity for compliance
  • Enhance platform performance
  • Prevent fraud
  • Produce sustainability analytics
  • Offer personalised marketplace experiences

All uses are based on contract fulfilment, consent, legitimate interest, or legal obligations.

3.1 Lawful Basis by Purpose

  • Account creation, purchases, and order fulfilment — Contract
  • Fraud prevention and platform security — Legitimate interest
  • Marketing communications — Consent (opt-in)
  • Financial and tax records — Legal obligation
  • Analytics improvements — Consent where required

4. Sharing Your Information

We may share your information only with:

  • Payment processors
  • Logistics and shipping partners
  • Marketplace vendors (only when required to complete an order)
  • Technical infrastructure providers
  • Government or regulatory bodies when required by law

We do not sell your data to advertisers or external companies.

5. Cookies & Tracking

We use essential cookies to maintain sessions and platform security. Analytics cookies are optional and are only used after consent where required. Cookie settings may be controlled in your browser.

6. Data Retention

We retain information only as long as necessary for:

  • Account activity
  • Legal compliance
  • Tax and transactional records
  • Marketplace operation

After expiry, we delete or anonymise data.

7. Security Measures

We apply industry standard measures:

  • Encryption
  • Access controls
  • Password hashing
  • Monitoring
  • Secure payment processing

No platform can be 100% secure, but we continually update safeguards.

8. Your Rights

Where applicable, you may request to:

  • Access your personal data
  • Correct or update it
  • Delete your account
  • Withdraw consent
  • Object to marketing
  • Export your data

9. International Processing

Your information may be stored or processed outside your country through secure cloud infrastructure. Where international transfers apply, we use appropriate safeguards such as contractual protections, security controls, and vendor due diligence.

10. Children

We do not knowingly collect data from children under 16.

11. Third-Party Links

Our site may contain external links. Those sites have their own policies and we are not responsible for their practices.

12. Policy Changes

We may update this Privacy Policy. New versions become effective upon posting. Notice will be provided if significant changes are made.

13. How to Contact Us

Email: privacy@gephra.com

Company: Gephra Ltd, Rwanda

More contact information will be added as required.