BuntuCart Privacy Policy

Data Role Definition

BuntuCart acts as a data processor for end-customer data processed on behalf of merchants, and as a data controller for platform-level operational and analytics data.

What We Collect

We collect:

• Business contact information
• Customer phone numbers and message content required to facilitate conversations
• Order metadata (items, timestamps, status)

We do not collect or store payment credentials or financial account information.

Payments Data Statement

Payment-related information is processed directly by third-party payment service providers.

BuntuCart does not access, store, or control customer payment details.

Cross-Border Compliance

BuntuCart implements reasonable administrative, technical, and organizational measures to protect personal data in accordance with applicable data protection laws, including but not limited to Kenya’s Data Protection Act, Nigeria’s NDPR, and applicable US privacy regulations.