Privacy policy

This draft describes how the MarketVV website actually handles personal data. It must be reviewed by a lawyer against Cameroon Law No. 2024/017 on personal data protection and, for users in the European Union, the GDPR, and completed where marked.

Who is responsible

[Operator: legal name, registered address, registration number, and the contact for data protection questions, to be completed.] Contact: privacy@marketvv.com.

What we collect and why

• Account: name, work email, password (stored only as a one-way hash), job title and phone if you add them, language, and the date and version of the terms you accepted. To run your account and contact you about it.
• Company: company name, country, address, registration and tax numbers, website, products traded, export markets, WhatsApp number if you choose to show it. Shown on your public profile where the page says so.
• Verification documents (suppliers): registration certificates and the manager's identity document. Seen only by MarketVV verification staff, to decide whether the company is genuine; scanned for viruses.
• Trade activity: listings, requests for quotation, quotations, messages and attachments. Shared only with the companies taking part.
• Payments (suppliers): plan, amount, date and receipt. Card and mobile-money details are entered on Flutterwave's page and never reach MarketVV.
• Security records: sign-in sessions (device type and IP address), and a log of important actions (for example password changes and staff decisions), to protect accounts and investigate abuse.
• Product statistics: views and clicks on listings are counted with a code that changes every day; no IP address or cookie value is stored with them.

We do not sell personal data, show advertising, or use tracking or advertising cookies.

Cookies

Only cookies needed for the site to work: one that keeps you signed in, and one that protects forms against forged requests. No consent banner is needed for these; there are no others.

Who processes data for us

• Hostinger: servers in the European Union holding the database, documents, attachments and photos, and the mailboxes that send MarketVV's emails. Backups are kept on a second Hostinger server.
• [Data center country, to be completed once the servers are created.]
• Flutterwave: payments.
• Sentry: error reports (technical details of the error; no account details, cookies or form contents).
• Have I Been Pwned: when you choose a password, the first 5 characters of its hash are checked against known leaks; the password itself never leaves MarketVV.

Some of these providers store data outside Cameroon. [Transfer safeguards, to be completed by counsel.]

How long we keep it

• Signed-in sessions end after 14 days.
• When you close your account, your name, email, phone and password are removed at once. Requests, quotations and messages you exchanged stay with the other companies, shown as "Closed account", because they are part of their trade records.
• Backups are kept for 30 days (daily) and 400 days (monthly), then deleted; closed-account details disappear from backups as they expire.
• Verification documents, payment records and security logs: [retention periods required by law, to be completed].

Your rights

You can see and correct your details in your account, download a copy of your data (Account → Your data → Download my data), and close your account. You can also object to or ask to restrict processing, and complain to the data protection authority. Write to privacy@marketvv.com; we answer within one month.

Security

Passwords are hashed, staff accounts require two-factor authentication, connections are encrypted (HTTPS), documents are private and downloaded only through short-lived links, backups are encrypted, and access is logged.

Changes

We will announce significant changes on the site and by email before they apply.