What we know about you
The bare minimum to deliver to you and reply to you. No profiling, no reselling.
This policy is written in plain language and describes our practices. It is not a substitute for legal advice: depending on your country, the law may grant you additional rights. A review by a lawyer in your country is recommended.
The data controller is Bamba African Market LLC (Queen Marcasite brand). We collect your name, your email, your phone number, your delivery address and your order history. If you create an account, your password is stored encrypted. Your card details never pass through our servers: payment is handled directly by Stripe.
Preparing and delivering your orders, issuing your invoice, replying to your messages and notifying you of a restock if you asked for one. We do no profiling and don't use your history for advertising.
We use a few providers, each strictly for the stated purpose, with no reselling: site hosting with OVH (Europe), card payment with Stripe (United States), shipping with FedEx (United States) for orders outside Senegal, and our own couriers for Senegal. If you order from Senegal, Europe or Canada, your order data is therefore transferred to and processed in Europe and the United States to fulfil your order.
Orders and invoices: ten years, for accounting and warranty. Customer account: erased three years after your last sign-in. Contact messages: two years. After that, everything is deleted.
You can ask for access to your data, its correction, its erasure, or object to its processing. An email to contact@queenmarcasite.com is enough, with no justification needed. We reply as soon as we can, and within thirty days at most.
Depending on your state of residence (California, Virginia, Colorado and others), you can also request the exact list of data we hold and opt out of any “sale” or “sharing” of your data. We do neither.
Other countries
These rights are set out in Law No. 2008-12. If our answer doesn't satisfy you, you can refer the matter to the Commission de protection des données personnelles (CDP).
The GDPR applies and you can refer the matter to your country's data protection authority.