Privacy Policy

Who is responsible for your data

There are two roles, and which one applies depends on whose data it is:

• Shop owners and staff: Reduced To Clear Enterprise is the data controller for the details you give us to open and run a shop. We handle this data in line with the Data Protection Act, 2012 (Act 843).
• Customers of a shop: the shop you buy from decides why and how your details are used for your orders, and is responsible for them. We process those details on the shop's behalf, to run the platform, and we are the controller for the account, sign-in and phone verification details that make the platform work.

Governing law

This policy, and every rule that governs how we handle personal data on the platform, are governed by the laws of the Republic of Ghana. Disagreements are settled as set out in the Terms of Service: first by talking, then mediation, then the courts of Ghana.

What we collect

From shop owners and staff

• Your name, email address and mobile number, and your password (stored only in scrambled form, never as plain text).
• Your shop's name, web address, phone number and address, and the details of any staff you add.
• If we ask you to verify your business: a Ghana Card number, business registration number or TIN, and the name it is registered in.
• Payment records for your plan: the receipt number, amount, date, and the mobile money number and network used. We never see your mobile money PIN.
• The products, sales, orders, expenses, customers and settings you enter (your shop data).

From customers

• Your name, mobile number, and (if you create an account) your email address and password in scrambled form.
• Delivery addresses you save, your orders and what you bought, items on your wishlist, and your payment method and status for each order (not your PIN or card details).
• If you shop at the counter and give your phone number, the shop may record it with your name so your purchases and receipts stay with you. You can later join them to an online account by confirming the number.

From everyone

• Verification codes we text you (kept in scrambled form and deleted within minutes), and a record of the text messages and emails we send you (who, when, and whether it was delivered).
• Technical details such as your IP address and device, used to keep the platform secure, apply limits against abuse, and find errors.
• Essential cookies and similar storage that keep you signed in and remember your cart. We do not use advertising cookies.

Why we use it

• To provide the platform: open and run shops, take and fulfil orders, process payments, send receipts, and show shops their customers and sales.
• To confirm who you are: check a mobile number with a code, prevent fake or repeated sign-ups, and verify businesses.
• To keep things safe and working: stop fraud and abuse, protect accounts, fix faults and improve the platform.
• To contact you: send service messages about your account, orders, plan and payments, and notices from us to shops.
• To meet the law: keep records and respond to lawful requests from authorities.

Our reasons under the Data Protection Act are that it is needed to carry out our contract with you, that you have consented (for example when you tick to agree or enter a code), that the law requires it, or that we have a legitimate interest in running a secure service that is balanced against your rights. We do not use your data for advertising and we do not sell it.

Who sees your data

• The shop you buy from sees your name, phone, delivery address and orders for its shop only. A customer account works across shops on the platform, but a shop does not see what you bought from other shops.
• Our team sees what it needs to run the platform and give support, including shop details and business verification details.
• Service providers who help us run the platform and only for that purpose: our mobile money payment partner (Paystack), our SMS provider, our email provider, our hosting and database providers, and an error-monitoring service that receives technical error reports.
• Authorities and courts where the law requires us to share, or to protect rights and safety.

We do not sell personal data to anyone.

Sending data outside Ghana

Some of our providers (for example hosting and error monitoring) may process data on servers outside Ghana. When that happens we use providers that protect data to a standard comparable to the Data Protection Act, 2012 (Act 843), and we share only what is needed.

How long we keep it

• Accounts and shop data: while your shop or account is active. After a shop is switched off we keep its data for at least 90 days so the owner can return, and may delete it after that.
• Verification codes: minutes. Rate-limit counters: hours to days.
• Payment and tax-related records: for as long as the law requires us or the shop to keep them.
• Messages log: kept for a limited time to show delivery and to resolve disputes.
• When we no longer need data, we delete it or make it anonymous.

How we protect it

We use measures such as encrypted connections, scrambled passwords and codes, limits on sign-in and message requests, access controls between shops, and logs of important actions. No system is perfectly secure. If a breach affects your personal data in a way that puts you at risk, we will tell you and the Data Protection Commission as the law requires.

Your rights

Under the Data Protection Act, 2012 (Act 843) you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct data that is wrong or out of date;
• delete data we no longer need or have no right to keep;
• stop using your data for direct marketing, and withdraw consent you have given.

A customer's request about orders is best made to the shop first, because the shop holds that record; we will help the shop respond. To make a request to us, use the contact details below. If you are unhappy with how we handle it, you can complain to the Data Protection Commission of Ghana.

Children

The platform is for people aged 18 and over. We do not knowingly collect data from children. If you think a child has given us data, tell us and we will delete it.

Changes to this policy

We may update this policy. For a change that matters we will tell shop owners through their admin or by email at least 14 days before it starts, and the date at the top will change.

Contact us

Reduced To Clear Enterprise, trading as RTC Stores.

• Phone and WhatsApp: 0256 253 494