Privacy policy

1. Who is responsible for your data

The data controller is ACCROPOLE PRESTIGE, a bakery and pastry shop based in Bastos, Yaoundé, Cameroon. This policy covers both this website and the ACROPOLE mobile app.

For any question about your data, write to us or come into the shop: the details are on the Contact page.

2. What we collect

2.1 What you give us

• Account — name, phone number, email address if you provide one, password.
• Delivery — saved addresses, delivery instructions, and the recipient's details when that is not you.
• Orders — items, amounts, pickup or delivery method, requested date and time, and any note left for the shop.
• Messages — what you write to us, and enough to reply.

2.2 What usage produces

• Location — only when you allow it and only while the app is open, to estimate the delivery fee and guide the courier. Never in the background, and no record of your movements.
• Notification token — a technical identifier issued by Google Firebase, so we can tell you how your order is progressing.
• Technical logs — IP address, device type, timestamps, errors. They serve security and diagnosis.

2.3 What we do not collect

We store no Mobile Money PIN, no card number, and no password in clear text. This website sets no cookies and loads no third-party analytics or advertising.

3. Why we use it

• To fulfil your order — prepare it, take payment, deliver or hand it over, and keep you informed. This is performance of the contract between us.
• To identify you — verifying your number by one-time code protects your account and our deliveries.
• To answer you — handling a complaint, a quote, a particular request.
• To meet our obligations — accounting and invoicing, for the periods the law requires.
• Security — detecting abuse, limiting repeated attempts, preventing fraud.

We do not use your data for targeted advertising, and we sell it to no one.

4. Who has access

Your data is shared only with those who need it:

• Our team — the people who prepare, take payment and deliver, each limited to what their role requires.
• The Mobile Money provider, which processes the transaction. It receives the amount and the number it needs; we never see your PIN.
• Our host, DigitalOcean, LLC — 105 Edgeview Drive, Suite 425, Broomfield, CO 80021, USA, which operates the servers where the data is stored.
• Google Firebase, for delivering the app's notifications.
• The competent authority, where the law obliges us.

Our servers and those of these providers may sit outside Cameroon. Data there is protected by each provider's contractual commitments.

5. How long we keep it

• Account — as long as it exists, then erased on deletion.
• Orders and invoices — kept for the period accounting and tax obligations require, even after the account is deleted. They are then separated from your profile as far as the law allows.
• Technical logs — a few months, then erased.
• Messages — for as long as it takes to handle your request and keep a record should it continue.

6. Your rights

At any time you may:

• See and correct your information from "Edit my profile" in the app.
• Delete your account, from that same screen. Deletion is permanent and immediate; only legally required accounting records remain.
• Withdraw a permission — location or notifications — from your phone's settings, without losing access to the rest.
• Ask us for a copy of your data, or object to a particular use.

Send your request through the channels on theContact page. We answer within a reasonable time, and no later than thirty days.

7. Security

Traffic to our servers is encrypted (HTTPS). Passwords are stored as an irreversible hash, never in clear text. Access to data is restricted by role. No system is infallible: should a breach affect your data, we would tell you.

8. Children

Our services are not aimed at people under 18 without a parent's or guardian's consent. We do not knowingly collect a child's data.

9. Changes

This policy may change. The date of the last update appears at the top of the page; any substantial change will be flagged in the app.