BuntuCart Privacy Policy

Data Role Definition

BuntuCart acts as a data processor for end-customer data processed on behalf of merchants, and as a data controller for platform-level operational and analytics data.

What We Collect

We collect:

• Business contact information
• Customer phone numbers and message content required to facilitate conversations
• Order metadata (items, timestamps, status)

We do not collect or store payment credentials or financial account information.

Payments Data Statement

Payment-related information is processed directly by third-party payment service providers.

BuntuCart does not access, store, or control customer payment details.

WhatsApp Data Processing & Deletion

BuntuCart collects and processes WhatsApp message data (including text, media, voice notes, and customer phone numbers) strictly on behalf of our vendors (merchants) as a data processor to facilitate conversational commerce. End users (customers of our vendors) have the right to request deletion of their processed WhatsApp message data at any time. Such deletion requests can be initiated by contacting the respective vendor directly, or by emailing our privacy team at [email protected].

Cross-Border Compliance

BuntuCart implements reasonable administrative, technical, and organizational measures to protect personal data in accordance with applicable data protection laws, including but not limited to Kenya’s Data Protection Act, Nigeria’s NDPR, and applicable US privacy regulations.