Privacy
What EduShop holds about you, why, and who can see it. This describes the system as built, not as a template imagines it.
What we hold about buyers
- Your email address, which is also how you sign in.
- Your password, stored only as an Argon2id hash. We cannot read it, and neither can anyone who obtains the database.
- The delivery addresses you save, and the address recorded against each order.
- What you ordered, what you paid, and what happened to the order afterwards.
- Reviews you write, which are shown publicly against the product.
We do not hold card details, because we do not take card payments. We do not ask buyers for identity documents.
What we hold about suppliers
A supplier applying to sell gives us their registered legal name, registration number, contact details, tax clearance, and documents proving those — typically a certificate of incorporation and the identity document of a director.
Those documents are not published anywhere. They are stored outside anything the website serves, they have no address a browser can reach, and only EduShop reviewers can open them. Every time one is opened we record who opened it and when.
Who sees what
- A supplier sees the orders placed with them, including the name and address the parcel goes to. They do not see your account or your other orders.
- Our operational figures are counts only — orders placed, payments taken. They carry no buyer identity of any kind, so nobody can browse people through a dashboard.
- Privileged actions are recorded in an audit trail that cannot be edited or deleted, only added to.
We email you about things that happened to your orders and applications. We never put a password, a sign-in link, or anything that would let the holder of the message act as you into an email.
Keeping and deleting
Orders, payments, and the audit trail are kept: they are the record of a transaction and of who did what, and both may be needed for a dispute, a reconciliation, or a legal obligation. Addresses you save are yours to delete when no order depends on them.
We have not yet set retention periods. Doing so properly means deciding, for each kind of record, how long the law and a dispute need it — and inventing a number here would be worse than admitting we have not decided.
Asking us about your data
Zimbabwe’s Data Protection Act gives you rights over information about you. Contact us and we will act on them. Note that we cannot delete a record that a payment, dispute, or legal obligation still depends on.