Personal Data Protection

Personal Data Protection Policy

Introduction

Welcome to Wez.et ("Wez," "we," "us," or "our"), an e-commerce platform operating in Ethiopia. We are committed to protecting your personal data and respecting your privacy. This Personal Data Protection Policy ("Policy") explains how we collect, use, disclose, and safeguard your personal information when you visit our website at www.wez.et (the "Site"), make purchases, or interact with our services.

This Policy is designed to comply with the Ethiopian Personal Data Protection Proclamation No. 1321/2024 and other applicable laws. By using our Site or services, you consent to the practices described in this Policy. If you do not agree with this Policy, please do not use our Site or services.

We may update this Policy from time to time. The updated version will be posted on this page with the effective date. We encourage you to review it periodically.

Effective Date: September 18, 2025

Information We Collect

We collect personal data that you provide directly to us and information automatically collected through your use of the Site. Personal data means any information that can identify you, directly or indirectly.

Personal Data You Provide:

  • Account Information: When you create an account, register, or place an order, we may collect your name, email address, phone number, billing and shipping addresses, and payment details (such as credit card information, processed securely by third-party payment gateways).
  • Contact Information: If you contact us via email, chat, or forms, we collect your name, email, phone number, and any other details you provide.
  • User-Generated Content: Reviews, comments, or feedback you submit.
  • Marketing Preferences: Information related to subscriptions to newsletters or promotional offers.

Automatically Collected Information:

  • Device and Usage Data: IP address, browser type, operating system, pages viewed, time spent on the Site, referral sources, and clickstream data.
  • Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track user activity, preferences, and improve Site functionality. See our Cookies section below for more details.
  • Location Data: Approximate location based on IP address (we do not collect precise geolocation without your consent).

We do not intentionally collect sensitive personal data (e.g., data revealing racial or ethnic origin, political opinions, religious beliefs, health, or biometric data) unless required for specific services and with your explicit consent.

How We Use Your Information

We process your personal data based on lawful grounds under the Ethiopian Personal Data Protection Proclamation, such as your consent, contractual necessity, legitimate interests, or legal obligations.

We use your information for the following purposes:

  • To Provide Services: Process orders, manage accounts, fulfill deliveries, and provide customer support.
  • To Improve Our Site: Analyze usage patterns to enhance user experience, customize content, and develop new features.
  • Marketing and Communications: Send promotional emails, newsletters, or offers (you can opt-out at any time).
  • Security and Fraud Prevention: Detect and prevent fraudulent activities, unauthorized access, or security breaches.
  • Legal Compliance: Comply with Ethiopian laws, respond to legal requests, or enforce our terms.
  • Analytics: Use aggregated, anonymized data for business insights.

We adhere to data protection principles, including purpose limitation, data minimization, accuracy, and storage limitation.

Sharing Your Information

We do not sell your personal data. We may share it with trusted third parties under strict confidentiality agreements:

  • Service Providers: Payment processors, shipping companies, IT service providers, and marketing partners who assist in operating our Site and services (e.g., email service providers, analytics tools).
  • Business Partners: In case of mergers, acquisitions, or asset sales, your data may be transferred as part of the business.
  • Legal Authorities: If required by law, court order, or government request, including under the Ethiopian Personal Data Protection Proclamation.
  • With Your Consent: For any other purpose where you have provided explicit consent.

All third parties are required to protect your data in compliance with applicable laws.

Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, alteration, or disclosure. These include encryption, firewalls, access controls, and regular security audits.

In the event of a data breach, we will notify affected individuals and the relevant authorities as required by the Ethiopian Personal Data Protection Proclamation (e.g., within 72 hours where feasible).

Despite our efforts, no online transmission or storage is 100% secure. If you have concerns, please contact us.

Your Rights

Under the Ethiopian Personal Data Protection Proclamation, you have the following rights regarding your personal data:

  • Right to Access: Request a copy of your data we hold.
  • Right to Rectification: Correct inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data in certain circumstances.
  • Right to Restriction: Limit processing of your data.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Withdraw Consent: Where processing is based on consent.
  • Right to Lodge a Complaint: With the Ethiopian Data Protection Authority.

To exercise these rights, contact us at [insert contact email, e.g., privacy@wez.et]. We will respond within 30 days, or as required by law. We may need to verify your identity.

Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this Policy, or as required by law. For example:

  • Account data: Retained while your account is active and for 7 years thereafter for tax and legal purposes.
  • Transaction data: Retained for 10 years as per Ethiopian commercial laws.
  • Marketing data: Until you opt-out.

After retention periods, data is securely deleted or anonymized.

Cookies and Tracking Technologies

We use cookies to enhance your experience. Cookies are small files stored on your device.

  • Essential Cookies: Necessary for Site functionality (e.g., session management).
  • Performance Cookies: Collect analytics on Site usage.
  • Marketing Cookies: Track browsing for targeted ads.

You can manage cookies via your browser settings. Disabling them may limit Site features. For more details, see our Cookie Policy [link if separate].

International Data Transfers

If we transfer data outside Ethiopia (e.g., to cloud servers), we ensure adequate safeguards, such as standard contractual clauses or adequacy decisions, in line with the Ethiopian Personal Data Protection Proclamation.

Children's Privacy

Our Site is not intended for children under 18. We do not knowingly collect data from minors. If we become aware of such collection, we will delete it promptly.

Changes to This Policy

We may revise this Policy to reflect changes in our practices or legal requirements. Changes will be posted here with an updated effective date. Continued use of the Site constitutes acceptance.

Contact Us

If you have questions about this Policy or your data, contact our Data Protection Officer at:

Wez.et [Insert Address, e.g., Addis Ababa, Ethiopia] Email: privacy@wez.et Phone: [Insert Phone Number]

We are registered under Ethiopian laws as [Insert Company Details if known].