Privacy Policy

Table of Contents:

1. Introduction
2. Information We Collect
3. How We Use Your Information
4. Legal Basis for Processing
5. Sharing Your Information
6. Data Retention
7. Your Rights
8. Security Measures
9. International Transfers
10. Updates to This Policy
11. Contact Us

1. Introduction:

Thank you for using Enattie. We are an online marketplace operating in Ethiopia, dedicated to providing a trusted platform for individuals and businesses to buy and sell a wide range of products. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website or mobile application.

We understand the importance of your privacy and are committed to protecting your personal data in accordance with the Ethiopian Personal Data Protection Proclamation No. 1280/2023 and, where applicable, the General Data Protection Regulation (GDPR). This policy outlines your rights and how you can exercise them.

2.Information We Collect:

To provide and improve our services, we collect several types of information. Each type serves a specific purpose to ensure the security, functionality, and customization of your experience.

2.1 Personal Data

This includes information that identifies you as an individual. It is collected when you register, make purchases, or interact with our services.

• Full name, phone number, and email address
• Delivery and billing address
• Payment and transaction information
• Identification details for business users (e.g., national ID or license)

2.2 Technical and Usage Data

We automatically collect technical data when you use our platform. This helps us enhance system performance and protect against misuse.

• IP address and device identifiers
• Browser type and operating system
• Access times and pages visited
• Cookies and tracking technologies (see our Cookie Policy for more details)

2.3 Transactional Data

To manage the purchase and delivery of items, we collect order-specific information, such as:

• Product details
• Order history
• Payment method used
• Delivery status and logistics updates

2.4 Data from Third-Party Services

If you use external services to log in or verify your account, we may collect limited information from them.

• Name, profile photo, and contact info from Google, Facebook, Apple, or Truecaller
• Authentication tokens used for verification

We only access this information with your consent and in accordance with your settings on those services.

3.How We Use Your Information:

We use your data to provide a reliable and safe service for all users. Here’s how we put it to work:

• To create and manage user accounts
• To process orders, confirm payments, and coordinate deliveries
• To protect against fraud, spam, and unauthorized access
• To offer customer support and respond to inquiries
• To improve our platform through usage analysis
• To fulfill regulatory and legal requirements

If you've opted in, we may also use your data to send marketing communications and promotional offers.

4.Legal Basis for Processing:

We process your data in accordance with applicable legal standards. These include:

• Consent – When you choose to provide us with your data (e.g., signing up for newsletters)
• Contractual Necessity – When data is required to complete transactions or provide services
• Legal Obligation – When we are required by law to retain or share data (e.g., tax filings)
• Legitimate Interest – When it helps us operate securely and efficiently, without overriding your rights

We reserve the right to remove content or suspend accounts without notice if we detect violations.

5.Sharing Your Information:

We do not sell your data. However, we may share it with trusted third parties to fulfill our services. This includes:

• Payment processors – To securely manage transactions
• Logistics and courier partners – To arrange shipping and delivery
• Verification and identity providers – To confirm user legitimacy
• Technology and infrastructure vendors – To support platform operations and analytics
• Authorities and regulators – When legally obligated to disclose information

All third parties are bound by confidentiality and data protection agreements.

6.Data Retention:

We retain your personal data only as long as it is necessary. This varies based on the type of data and purpose:

• Purchase and payment records: Up to 2 years, in line with tax laws
• Customer support records: Up to 2 years
• Marketing-related data: Up to 12 months, unless you withdraw consent earlier

After these periods, data is deleted or anonymized using secure procedures.

7.Your Rights:

You have several rights over your data, as provided by Ethiopian and international data protection laws. These include:

• Access – You may request a copy of the personal data we hold about you
• Correction – You can ask us to fix inaccuracies or incomplete information
• Deletion – You may ask us to erase your data, unless retention is legally required
• Restriction – You can ask us to limit how your data is processed in specific cases
• Objection – You may object to certain processing based on legitimate interest
• Withdrawal of Consent – You may withdraw your consent at any time where it was previously granted

To exercise these rights, please contact us at info@enattie.com.

Protecting Minors

If you are under the age of 18, you must obtain consent from a parent or legal guardian before using our services. We do not knowingly collect personal data from children without appropriate authorization.

8.Security Measures:

We implement appropriate safeguards to protect your data against loss, misuse, or unauthorized access. These include:

• Secure data transmission via HTTPS encryption
• Verified payment gateways with fraud detection
• Access restrictions for authorized personnel only
• Routine system updates and vulnerability assessments
• Two-factor authentication and anonymized email routing when supported

9.International Transfers:

In some cases, your data may be stored or processed in servers located outside Ethiopia. We take steps to ensure it is protected:

• Using Standard Contractual Clauses (SCCs) approved by regulators
• Signing data processing agreements with international service providers
• Implementing robust security protocols aligned with global standards

10.Updates to This Policy:

We may occasionally update this policy to reflect changes in our services or legal obligations. When we do:

• The "Last Updated" date will change
• Significant updates will be communicated through our platform or via email
• Continued use of Enattie implies acceptance of the new terms