Privacy Policy

1. Identity & Scope of this Privacy Policy

This Privacy Policy explains how SHOP WITH DISCO ("ShopWithDisco", "we", "us", or "our"), operating the e-commerce boutique at https://shopwithdisco.com (the "Website"), collects, stores, processes, and protects your personal data when you visit our website, place orders, communicate with our concierge, or authenticate using third-party login providers including Google OAuth.

This policy applies to all global visitors, with specific adherence to the Ghana Data Protection Act (Act 843), standard international data principles (GDPR), and the Google API Services User Data Policy.

2. Google OAuth User Data Policy & Limited Use Disclosure

SHOP WITH DISCO offers convenient authentication via Google Sign-In ("Sign in with Google"). This section explicitly details how our application accesses, uses, stores, and protects Google user data in full compliance with Google's verification requirements:

2.1 What Google User Data We Request

When you authenticate using Google Sign-In, SHOP WITH DISCO requests access only to standard, non-sensitive public profile scopes:

• Email Address (email): To uniquely identify your customer account, send order confirmation receipts, and link your purchase history.
• Basic Profile Info (profile / openid): Your full name and profile picture avatar URL, used to personalize your customer account dashboard.

We never request or access: your Google Drive files, Gmail messages, contacts, calendar events, passwords, or device location data.

2.2 How We Use Google User Data

We use your Google account information strictly for the following purposes:

• To securely create and authenticate your SHOP WITH DISCO customer account without requiring a separate password.
• To associate your guest checkout orders with your verified email address.
• To deliver digital invoices, shipping notifications, and delivery courier status updates.

2.3 No Sale or Commercial Transfer of Google User Data

SHOP WITH DISCO will never sell, rent, license, trade, or transfer Google user data to data brokers, third-party advertisers, market research firms, or any unauthorized external parties.

2.4 Google API Limited Use Requirements Compliance

SHOP WITH DISCO's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2.5 Third-Party Data Storage

Your authentication token and profile identifier are stored in our secure, enterprise-grade database hosted by Supabase Inc., encrypted in transit (TLS 1.3) and at rest (AES-256). No other third party is granted access to your Google account data.

3. Personal Information We Collect (General Checkout & Browsing)

Depending on your interactions with our storefront, we collect:

• Fulfillment & Contact Information: Full name, telephone number (required for Ghanaian courier delivery dispatch), delivery address, city/region (e.g. Greater Accra, Kumasi), and delivery instructions.
• Order Details: Items, garment sizes, colors, quantities purchased, transaction timestamps, and order tracking numbers.
• Customer Inquiries: Communications with our concierge team via WhatsApp, email, or submitted website forms.
• Technical Browsing Data: IP address, browser type, operating system, pages viewed, and referral URLs collected automatically for security diagnostics, DDoS mitigation, and site stability via Cloudflare CDN.

4. Payment Security & Financial Data Handling

SHOP WITH DISCO utilizes certified, PCI-DSS Level 1 compliant payment processor Paystack to process debit card, credit card, and Mobile Money (MTN MoMo, Telecel Cash) transactions.

Financial Data Protection: All payment credentials (such as credit card numbers, CVVs, expiration dates, or Mobile Money PINs) are entered directly into Paystack's encrypted, certified checkout window. SHOP WITH DISCO servers never see, collect, or store your raw payment cards or mobile wallet PINs. We receive only a cryptographic transaction confirmation reference.

5. Data Retention, Account Deletion & User Rights

You have full ownership and control over your personal information and Google account data.

5.1 How to Request Data Deletion

You may request the permanent deletion of your customer account, order linkage, and all associated personal and Google OAuth data at any time by sending an email to:

Email: [email protected] or [email protected]
Subject: Data Deletion Request / Delete My Account

Upon receiving your request, our data compliance officer will verify your identity and purge your personal profile, Google account linkage, and saved addresses from our database within 30 business days. (Certain historical transaction receipts will be retained strictly as required by applicable tax, commercial accounting, and anti-fraud statutory laws).

5.2 How to Revoke Google Account Permissions Directly

You can immediately revoke SHOP WITH DISCO's access to your Google Account at any time through Google's security settings:

Visit Google Account Permissions (https://myaccount.google.com/permissions) → Select "SHOP WITH DISCO" → Click "Remove Access".

6. Security Safeguards & Infrastructure

We implement industry-standard administrative, physical, and technical safeguards designed to protect personal data:

• Strict HTTPS SSL/TLS 256-bit encryption across all pages, API endpoints, and subdomains.
• Database security rules enforcing Row-Level Security (RLS) on Supabase infrastructure.
• Cloudflare CDN security firewalls mitigating automated bot attacks and unauthorized intrusions.
• No plain-text storage of customer passwords or authentication tokens.

7. Cookies & Analytics Technologies

Our website uses strictly necessary cookies (for shopping cart state retention and secure login sessions) and anonymous analytics cookies (via PostHog Analytics, hosted on EU servers) to monitor site performance and navigation efficiency. We do not use intrusive third-party cross-site advertising trackers.

8. Contact Our Privacy & Compliance Team

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please contact our Data Protection Team:

Application Name: SHOP WITH DISCO
Official Website: https://shopwithdisco.com
Privacy Compliance Email: [email protected]
Customer Support Email: [email protected]
Headquarters: Accra, Ghana
WhatsApp Concierge: Official WhatsApp Channel