Privacy & Data Protection

At DripSwap, your privacy is a top priority. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over it, in line with the Data Protection Act No. 3 of 2021 of the Republic of Zambia.

1. Who We Are — Data Controller Details

Registered business name: DripSwap Technologies (PACRA Business Name Registration No. 320251060462) — DripSwap Technologies is a registered business, not a limited company.
Responsible individual / Data Protection Contact: Rexford Shatontola
Registered under the Data Protection Act No. 3 of 2021 as an individual data controller (Micro Organization category) — Certificate of Registration No.: [to be added once issued]
Address: Plot No. 169/39, Kabangwe, Lusaka, Lusaka Province, Zambia
Email: dripswapteam24@gmail.com
Phone / WhatsApp: 0764673470, 0963631937, 0573337510

2. Age Restriction — 18 and Older Only

DripSwap is not for use by anyone under the age of 18. We do not knowingly collect or process personal data from minors, and account creation requires you to explicitly check a box confirming you are 18 or older before you can proceed. If we become aware that we hold personal data belonging to someone under 18, that account and all associated personal data will be deleted.

If you believe a minor is using DripSwap or that we hold a minor's data, contact us immediately at dripswapteam24@gmail.com so we can investigate and delete the account.

3. Information We Collect

• Account & identity data: name, username, email address, mobile number, password, and profile photo.
• Marketplace & listing data: items or services you list for sale or swap, descriptions, prices, images, saved items, and search activity.
• Event & vendor coordination data: event type, date, budget, guest count, venue/decor/vendor preferences, checklist items and ticket purchases.
• Communications data: messages exchanged through in-app chat between buyers, sellers, and event vendors. Messages are kept until you choose to delete them.
• Location data: collected with your consent, only while the app is open and in use, to connect you with local listings, vendors, and delivery couriers. We do not track your location in the background.
• Delivery & logistics data: pickup/drop-off addresses and delivery status. Posting a delivery request and unlocking a matched courier's contact details are both free; independent couriers, who hold their own DripSwap accounts, see the sender's and recipient's name, phone number, and address once matched (see our Terms of Service).
• Images & video: photos and videos you upload are stored via our media hosting partner, Cloudinary.
• Payment data: DripSwap's own service fees (visibility Boosts, verification Badges, and Pro status) are processed through our licensed payment partner, PawaPay. DripSwap does not process or hold payment for the goods, services, or event entry you buy or sell from other users — those exchanges are arranged and settled directly between users. We do not store your card numbers or mobile money PINs.
• Device unlock data: if you enable fingerprint or Face ID quick-unlock, this is handled entirely by your device's own operating system; DripSwap never receives or stores your biometric data.
• Technical & usage data: device type, IP address, app version, and interaction data used to secure and improve the Platform. DripSwap does not run third-party advertising tracking pixels.

4. How We Use Your Information

We process your data to create and secure your account; verify you meet our 18+ age requirement; match you with relevant listings, vendors, and event resources; facilitate transactions, swaps, bookings, and deliveries you request; enable in-app communication; personalize your feed; verify identity for Pro/vendor tiers; prevent fraud; and comply with Zambian legal obligations (for example, tax record-keeping).

5. How We Share Your Information

We do not sell your personal data. We share it only:

• With other users — your public profile and listings, and standard contact details once you initiate a transaction with them.
• With independent couriers — the pickup/drop-off name, phone number, and address needed to complete a delivery, once a courier accepts your request.
• With our payment processor, PawaPay — for DripSwap's own service-fee transactions (boosts, badges, Pro status) only.
• With our service providers, Supabase and Cloudinary — which host our database and media on our behalf.
• As aggregated, anonymised platform metrics and market trends, which may be shared with brand partners and analytics providers and cannot be traced back to you.
• Where required by Zambian law, court order, or to protect the rights, safety, or property of DripSwap, our users, or the public.

6. Where Your Data Is Stored

The Act requires personal data of persons in Zambia to be processed and stored on servers located within Zambia, and sensitive personal data to always remain within Zambia. Data may only be transferred outside Zambia with consent and Data Protection Commissioner-approved safeguards.

DripSwap's database and media storage are currently hosted on infrastructure located in the European Union, through Supabase and Cloudinary. DripSwap is reviewing its hosting arrangements, and where required, seeking the appropriate consent and/or Data Protection Commissioner approval, to bring this into line with the Act's data-localisation requirements.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy. Financial and transaction records relating to DripSwap's own service fees are retained for at least six years, in line with Zambia Revenue Authority record-keeping requirements. Outside of that legal minimum, you control how long we keep your data — see the section below on deleting your data at will.

8. Your Rights, Including Deleting Your Data At Will

Under the Act, you have the right to: confirm whether we hold data about you and access it; request correction of inaccurate data; object to or restrict certain processing, including marketing; request a portable copy of your data; withdraw consent at any time; and lodge a complaint with the Office of the Data Protection Commissioner (compliance@dataprotection.gov.zm).

You may delete your personal data at will. You do not need to give us a reason. You can permanently delete your account and personal data at any time directly from your Settings dashboard, or by emailing dripswapteam24@gmail.com and asking us to do it for you. We do not impose a waiting period or require justification, and we will not keep your personal data beyond what we are legally required to retain (see Section 7) once you ask us to delete it.

9. Data Security

We employ industry-standard encryption in transit and at rest, and the technical and organisational measures described in our Security Policy. In the event of a security breach affecting your personal data, we will notify the Data Protection Commissioner within 24 hours of becoming aware of it, and inform affected users as soon as practicable.

10. Not an Escrow Service

DripSwap is not an escrow service and does not hold, safeguard, or guarantee funds on behalf of buyers or sellers. Payments you make to DripSwap itself are limited to DripSwap's own service fees (boosts, verification badges, and Pro status); payment for goods, services, or event entry is arranged directly between you and the other user.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the app or by email. Continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.

Questions? Contact us at dripswapteam24@gmail.com or WhatsApp.